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")

05:42:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x200002, &(0x7f0000002ec0)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:39 executing program 0:
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000001180))

05:42:39 executing program 1:
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize}, {@msize}]}})

05:42:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:39 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  861.012787][ T4269] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  861.029994][ T4269] device team0 left promiscuous mode
[  861.035462][ T4269] device team_slave_0 left promiscuous mode
[  861.042623][ T4269] device team_slave_1 left promiscuous mode
[  861.049605][ T4269] bridge0: port 3(team0) entered disabled state
[  861.082241][ T4271] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  861.091223][ T4271] bridge0: port 3(team0) entered blocking state
[  861.097797][ T4271] bridge0: port 3(team0) entered disabled state
[  861.108175][ T4271] device team0 entered promiscuous mode
[  861.114054][ T4271] device team_slave_0 entered promiscuous mode
[  861.120816][ T4271] device team_slave_1 entered promiscuous mode
[  861.128735][ T4271] bridge0: port 3(team0) entered blocking state
[  861.135080][ T4271] bridge0: port 3(team0) entered forwarding state
05:42:39 executing program 0:
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000001180))

05:42:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x200002, &(0x7f0000002ec0)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x200002, &(0x7f0000002ec0)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:40 executing program 0:
r0 = syz_open_dev$usbfs(0x0, 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:40 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  863.184662][ T4285] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  863.193708][ T4285] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  863.201981][ T4285] bridge0: port 3(team0) entered blocking state
[  863.208328][ T4285] bridge0: port 3(team0) entered disabled state
[  863.215993][ T4285] device team0 entered promiscuous mode
[  863.221556][ T4285] device team_slave_0 entered promiscuous mode
[  863.227863][ T4285] device team_slave_1 entered promiscuous mode
[  863.234576][ T4285] bridge0: port 3(team0) entered blocking state
[  863.240880][ T4285] bridge0: port 3(team0) entered forwarding state
[  863.258292][ T4287] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  863.266552][ T4287] device team0 left promiscuous mode
[  863.271842][ T4287] device team_slave_0 left promiscuous mode
[  863.277881][ T4287] device team_slave_1 left promiscuous mode
[  863.284052][ T4287] bridge0: port 3(team0) entered disabled state
[  863.869068][ T4290] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  863.877450][ T4290] bridge0: port 3(team0) entered blocking state
[  863.883815][ T4290] bridge0: port 3(team0) entered disabled state
[  863.891124][ T4290] device team0 entered promiscuous mode
[  863.896765][ T4290] device team_slave_0 entered promiscuous mode
[  863.903050][ T4290] device team_slave_1 entered promiscuous mode
[  863.910672][ T4290] bridge0: port 3(team0) entered blocking state
05:42:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086607, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc)
mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x200002, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0)
syz_clone3(0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:42 executing program 1:
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB=',wfdno=', @ANYRESHEX])

05:42:42 executing program 0:
r0 = syz_open_dev$usbfs(0x0, 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:42 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:42 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  863.917024][ T4290] bridge0: port 3(team0) entered forwarding state
05:42:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x200002, &(0x7f0000002ec0)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:42 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:42 executing program 0:
r0 = syz_open_dev$usbfs(0x0, 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

[  863.958836][ T4302] 9pnet_fd: Insufficient options for proto=fd
05:42:42 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:42 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:42 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

[  864.084667][ T4306] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  864.362442][ T4306] batman_adv: batadv0: Removing interface: team0
05:42:42 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), 0x0)
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  864.960730][ T4306] 8021q: adding VLAN 0 to HW filter on device team0
[  864.998352][ T4306] bond0: (slave team0): Enslaving as an active interface with an up link
05:42:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086607, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r4}, 0xc)
mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x200002, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0)
syz_clone3(0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

05:42:43 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:43 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:43 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:43 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), 0x0)
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  865.017460][ T4315] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  865.026067][ T4315] device team0 left promiscuous mode
[  865.031708][ T4315] device team_slave_0 left promiscuous mode
[  865.038163][ T4315] device team_slave_1 left promiscuous mode
[  865.044366][ T4315] bridge0: port 3(team0) entered disabled state
[  865.051979][ T4316] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  865.060461][ T4316] bridge0: port 3(team0) entered blocking state
05:42:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40086607, &(0x7f0000000040)=@v1={0x0, @aes256={0x0}, 0x0, @auto="0709f2c5e99fcbce"})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x200002, &(0x7f0000002ec0)=ANY=[@ANYBLOB="667d01", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086607, &(0x7f00000000c0)={0x40000, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000200), 0x6000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)

[  865.066900][ T4316] bridge0: port 3(team0) entered disabled state
[  865.074262][ T4316] device team0 entered promiscuous mode
[  865.079826][ T4316] device team_slave_0 entered promiscuous mode
[  865.086522][ T4316] device team_slave_1 entered promiscuous mode
[  865.093187][ T4316] bridge0: port 3(team0) entered blocking state
[  865.099533][ T4316] bridge0: port 3(team0) entered forwarding state
05:42:43 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:43 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

[  865.171071][ T4336] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
05:42:43 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), 0x0)
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  865.222837][ T4341] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  865.274642][ T4341] bond0: (slave team0): Releasing backup interface
[  865.299279][ T4341] bridge0: port 3(team0) entered blocking state
05:42:43 executing program 1:
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:43 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

[  865.425346][ T4341] bridge0: port 3(team0) entered disabled state
[  866.025589][ T4341] device team0 entered promiscuous mode
[  866.031186][ T4341] device team_slave_0 entered promiscuous mode
[  866.063190][ T4341] device team_slave_1 entered promiscuous mode
[  866.092386][ T4347] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  866.100748][ T4347] device team0 left promiscuous mode
[  866.106326][ T4347] device team_slave_0 left promiscuous mode
[  866.112361][ T4347] device team_slave_1 left promiscuous mode
[  866.118603][ T4347] bridge0: port 3(team0) entered disabled state
[  866.131639][ T4349] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
05:42:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x808, &(0x7f0000000080)=ANY=[], 0x1, 0xa07, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

05:42:44 executing program 1:
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:44 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:44 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(0xffffffffffffffff, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

[  866.140510][ T4349] bridge0: port 3(team0) entered blocking state
[  866.146876][ T4349] bridge0: port 3(team0) entered disabled state
[  866.154206][ T4349] device team0 entered promiscuous mode
[  866.160654][ T4349] device team_slave_0 entered promiscuous mode
[  866.167004][ T4349] device team_slave_1 entered promiscuous mode
[  866.173776][ T4349] bridge0: port 3(team0) entered blocking state
[  866.180091][ T4349] bridge0: port 3(team0) entered forwarding state
05:42:44 executing program 4:
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

05:42:44 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x0)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001180))

05:42:44 executing program 1:
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2)

05:42:44 executing program 0:
syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000001180))

05:42:44 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(0xffffffffffffffff, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

05:42:44 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000240))
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000008f3600a355e7f78b3b16a403eb9f62eebb7edbe55c97e190a85f4b5efdafa01b96786b9965ae6702d116deeedfeb3def846eca732237ab23e338e85db8e56d53cc25ca59f347e3c4470ae1d392ff49847d7a4f438551305c437effaa55c467a31fc9af46d33c5898e704b84e2cad005d4ab1a51f0a2f0aedc9005d61ce671c20d365d30dc738a5dbe79de41459b63fb92f91a1273177460c6afb6aa0e56a0a564c77b7e65a2a66785ac571733a4d4413a0ac92427a53a59a0e69425200"/202, @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)

05:42:44 executing program 0:
syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000001180))

05:42:44 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "82535c"}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x20)

05:42:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:45 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(0xffffffffffffffff, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

05:42:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:45 executing program 4:
unshare(0x4000000)
unshare(0x24020400)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

05:42:45 executing program 2:
r0 = socket(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)

05:42:45 executing program 0:
syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004550f, &(0x7f0000001180))

05:42:45 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, 0x0)

05:42:45 executing program 2:
r0 = socket$caif_stream(0x25, 0x1, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000002c0)=';', 0x1)

05:42:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:45 executing program 4:
unshare(0x4000000)
unshare(0x24020400)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

05:42:45 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

05:42:45 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:46 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, 0x0)

05:42:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x7, &(0x7f0000000100), 0x4)

05:42:46 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

05:42:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x10, &(0x7f0000000100), 0x4)

05:42:46 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:46 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:46 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000480)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

05:42:46 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, 0x0)

05:42:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, 0x0)

05:42:46 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x1017]}, 0x8)

05:42:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0xe, &(0x7f0000000100), 0x4)

05:42:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:47 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x2, 0xe0, &(0x7f0000000480)=""/224, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

05:42:47 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect(r0, &(0x7f0000000100)=@in={0x0, 0x2}, 0xa)

05:42:47 executing program 2:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0)

05:42:47 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, 0x0, 0x0)

05:42:47 executing program 0:
syz_emit_ethernet(0xae, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff018000000000000086dd6068561400780000fe8000000000000000000000000000bbff02"], 0x0)

05:42:47 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x98)

05:42:47 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:47 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
r3 = dup2(r2, r1)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x8)

05:42:47 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0xfffffff9, 0x0, 0x108}, 0x98)

05:42:47 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, 0x0, 0x0)

05:42:48 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

05:42:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:48 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
getpgrp(r1)

05:42:48 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)

05:42:48 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

05:42:48 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, 0x0, 0x0)

[  869.844698][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  869.851047][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
05:42:48 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x7, 0x4)

05:42:48 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x12, 0x0, &(0x7f00000000c0))

05:42:48 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, 0x0, 0x0)

05:42:48 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x9, 0x4)

05:42:48 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x3800090, &(0x7f0000000040)=ANY=[], 0x1, 0x7c4, &(0x7f0000000340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xfd, 0x0, &(0x7f00000000c0))

05:42:48 executing program 4:
clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0)
clock_gettime(0x2, &(0x7f0000000040))

05:42:48 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x12, 0x0, &(0x7f00000000c0))

05:42:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:49 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000), 0x8)

05:42:49 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, 0x0, 0x0)

05:42:49 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:49 executing program 2:
r0 = socket(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000140)={'batadv_slave_1\x00'})

05:42:49 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)

05:42:49 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, 0x0, 0x0)

05:42:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0)

05:42:49 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:49 executing program 2:
syz_io_uring_setup(0x2d56, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x280}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

05:42:49 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000), 0x8)

05:42:49 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080), 0x8)

05:42:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:50 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0)

05:42:50 executing program 2:
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000280)={[{@errors_continue}, {@discard}, {@fmask={'fmask', 0x3d, 0x3}}, {@uid={'uid', 0x3d, 0xee00}}, {@fmask={'fmask', 0x3d, 0xdc1}}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@dmask={'dmask', 0x3d, 0x40}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x21, 0x14fb, &(0x7f0000002a40)="$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")
creat(&(0x7f0000000280)='./bus\x00', 0x0)

05:42:50 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080), 0x8)

05:42:50 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r1, 0x1d32, 0x0, 0x0, &(0x7f0000000000), 0x8)

05:42:50 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

05:42:50 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80882, 0x0)
write$rfkill(r0, &(0x7f0000000080), 0x8)

05:42:50 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:50 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

05:42:50 executing program 4:
clock_adjtime(0x0, 0x0)

05:42:50 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)

05:42:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x88, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x88}}, 0x0)

05:42:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00')

05:42:51 executing program 4:
clock_adjtime(0x0, 0x0)

05:42:51 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x18}}, 0x0)

05:42:51 executing program 4:
clock_adjtime(0x0, 0x0)

05:42:51 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7ffff, &(0x7f0000000040)=@raw=[@ldst, @alu], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

05:42:51 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15}]}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x3e, &(0x7f0000000340)=@string={0x3e, 0x3, "0e047c9cb6ec891f69e848ecd534f3980563c6b8f732dc7083e71f56ca0a3d4eb5dcc18dd08c1959249f6f8a2bcdbdcf480920066b78c87327bcd8d9"}}]})

05:42:51 executing program 1:
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)=""/140, 0x8c}], 0x1, 0x20000004, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f00000005c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x27}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'})

05:42:51 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:51 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:51 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0xffff})

05:42:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:51 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833, 0x0, 0x0, 0x0, 0x0, 0xffff})

05:42:51 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x1, &(0x7f0000000000))

05:42:51 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)

05:42:51 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0)

05:42:52 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0)

05:42:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c)
listen(r1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
getsockname(r2, 0x0, &(0x7f0000000380))

05:42:52 executing program 3:
r0 = semget(0x0, 0x0, 0x0)
semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/146)

05:42:52 executing program 1:
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x84, 0x21, 0x0, 0x0)

05:42:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000000080))

05:42:52 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833})

05:42:52 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833})

05:42:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:52 executing program 2:
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x84, 0x8, 0x0, 0x0)

05:42:52 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48)

05:42:52 executing program 4:
clock_adjtime(0x0, &(0x7f0000000140)={0x61883833})

05:42:52 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x0, 0x2}, 0x48)

05:42:52 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89a0, &(0x7f0000000000)={0x3, @default})

05:42:52 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x89e3, 0x0)

05:42:52 executing program 4:
r0 = io_uring_setup(0x70f3, &(0x7f0000000000))
io_uring_enter(r0, 0x0, 0x298e, 0x1, 0x0, 0x0)

05:42:52 executing program 1:
timer_create(0x2, 0x0, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f00000000c0))

05:42:52 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000001cc0))

05:42:53 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000080))

05:42:53 executing program 1:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x502, 0x0)

05:42:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:53 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x89ea, 0x0)

05:42:53 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @fixed, 0x7fff}, 0xe)

05:42:53 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5421, 0x0)

05:42:53 executing program 3:
request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='[\\{,\x00', 0xfffffffffffffffd)

05:42:53 executing program 0:
socketpair(0x25, 0x1, 0x8000, &(0x7f0000000800))

05:42:53 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080))

05:42:53 executing program 4:
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x0, 0x0, 0x0)

05:42:53 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)

05:42:53 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0)

05:42:53 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x89e9, 0x0)

[  875.522834][ T4659] fuse: Bad value for 'fd'
05:42:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:54 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xa, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10)

05:42:54 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:54 executing program 0:
socketpair(0x22, 0x2, 0x11, &(0x7f0000000280))

05:42:54 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x8, &(0x7f0000000100)=ANY=[], 0x1, 0x7ea, &(0x7f0000000340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xa0, 0x0, &(0x7f00000000c0))

05:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x5432, 0x0)

05:42:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x8, &(0x7f0000000100)=ANY=[], 0x1, 0x7ea, &(0x7f0000000340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xd6, 0x0, &(0x7f00000000c0))

05:42:54 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

[  876.312135][ T4674] delete_channel: no stack
[  876.317325][ T4674] delete_channel: no stack
05:42:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/155, 0x9b}], 0x1, 0x0, 0x0)

05:42:54 executing program 3:
syslog(0x2, &(0x7f0000000000)=""/4096, 0x1000)

05:42:54 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/155, 0x9b}], 0x1, 0x0, 0x0)

[  876.495157][ T4683] loop4: detected capacity change from 0 to 2048
[  876.549434][ T4683] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
05:42:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="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"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:42:55 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:42:55 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/155, 0x9b}], 0x1, 0x0, 0x0)

05:42:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x3, ','}, @md5sig={0x13, 0x12, "4150bd00000000000100"}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "8539177e2b549749c7b3a42c87d080a0"}, @md5sig={0x13, 0x12, "f2f710431f924427ed6baa2ebe128497"}]}}}}}}}, 0x0)

05:42:55 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:42:56 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/155, 0x9b}], 0x1, 0x0, 0x0)

05:42:56 executing program 3:
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000001a40)=""/4096, 0x1000, 0x1)
mremap(&(0x7f00000b8000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000417000/0x1000)=nil)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x522, &(0x7f0000000fc0)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46")
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001800)={{{@in6=@private0, @in=@initdev}}, {{@in=@private}, 0x0, @in6=@remote}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x19000c0, &(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000000003,acc', @ANYRESDEC=r0, @ANYBLOB=',appraise_type=imasig,fowner=', @ANYBLOB=',smackf', @ANYRESDEC, @ANYBLOB=',euid>', @ANYBLOB=',\x00'])
lchown(&(0x7f0000001500)='./file0\x00', r0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, &(0x7f00000007c0))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400038, 0x19)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)
r2 = syz_open_dev$vcsn(&(0x7f0000001180), 0x7f, 0x80100)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001200), 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
preadv(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x19000c0, &(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c657569643ae6edd35f1242"])
lchown(&(0x7f0000000000)='./file0\x00', r3, 0x0)

05:42:56 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:42:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="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"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:42:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="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"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:42:56 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:42:58 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="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"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:42:58 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5412, 0xf0ff1f00000000)

05:42:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="2c736d61e23cb5c704399c0e43a362636b66873dffff2cb75093548e4103e53da9f0dc7f627a3a666b14bc1a6350ebf8e9d4c4f26097d8a0b4c518adce22e6b13be10d8e9400dc6cbef0dabd1de22d420b1c3bf371e06ad942a7a84913f918c64d3f14d9cb107863b808afded833675bc9892affd680a7ac2bcc76f0cc5299c2657d8c10e53412ee504408aed548c2b719ff06343d7157e61b2f134a9d1c169e80090ffbb05382ae9e2cbdefa9d9ec733ced79f0830bff646deb33da4045bd997e9377e43df78d05562c6c6a498c118f12aca4172d2badac9effc8b236029cc9045d6a979ee7eaec0ba35cd39b0316e3454f08706ea50666900fff23ef5d3cb74d62574c67aa4c1eea1f39029171b50396f56aea2b777c85906030f7baa4"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:42:58 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x891d, 0x0)

05:42:58 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0x80000001, "600dc1bfd8ec3d1f3169bdadb5ec99eb27b3816e876d9cbb50d1a515df46b0c5"})

05:43:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="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"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:43:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:03 executing program 3:
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000001a40)=""/4096, 0x1000, 0x1)
mremap(&(0x7f00000b8000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000417000/0x1000)=nil)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x522, &(0x7f0000000fc0)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001800)={{{@in6=@private0, @in=@initdev}}, {{@in=@private}, 0x0, @in6=@remote}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x19000c0, &(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000000003,acc', @ANYRESDEC=r0, @ANYBLOB=',appraise_type=imasig,fowner=', @ANYBLOB=',smackf', @ANYRESDEC, @ANYBLOB=',euid>', @ANYBLOB=',\x00'])
lchown(&(0x7f0000001500)='./file0\x00', r0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, &(0x7f00000007c0))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400038, 0x19)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)
r2 = syz_open_dev$vcsn(&(0x7f0000001180), 0x7f, 0x80100)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001200), 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00')
preadv(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x19000c0, &(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c657569643ae6edd35f1242"])
lchown(&(0x7f0000000000)='./file0\x00', r3, 0x0)

05:43:03 executing program 1:
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:43:03 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001140)={0xa, @vbi})

05:43:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x6, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f00000050c0)={r3, r4+60000000})
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
clock_nanosleep(0x4, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f00000004c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c)
r6 = getpid()
sched_setscheduler(r6, 0x0, &(0x7f00000001c0)=0x9)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x18804c6, &(0x7f0000000700)=ANY=[@ANYBLOB="78696e6f3d6f6e2c251c87cf4a5b72656469726563745f6469723d2e2f66696c65302c78696e6f3d6175746f2c696e64650a1446ff2c78696e6f3d6f66662c64656661756c745f7065726d697373696f6e732c776f726b6469723d2e2f6275732c78696e6f3d6175746f2c6c6f7765726469723d2e2f6255732c66736e616d653dffff2c7065726d69745f646972656374696f2c736d61636b66737472616e736d7574653d2c669ac8133433b80233dd61252e06674d4b6b005058fd6e5a2d8780a6b8b9a2836b757d87acc62f", @ANYRESDEC=0x0, @ANYBLOB="2c736d61e23cb5c704399c0e43a362636b66873dffff2cb75093548e4103e53da9f0dc7f627a3a666b14bc1a6350ebf8e9d4c4f26097d8a0b4c518adce22e6b13be10d8e9400dc6cbef0dabd1de22d420b1c3bf371e06ad942a7a84913f918c64d3f14d9cb107863b808afded833675bc9892affd680a7ac2bcc76f0cc5299c2657d8c10e53412ee504408aed548c2b719ff06343d7157e61b2f134a9d1c169e80090ffbb05382ae9e2cbdefa9d9ec733ced79f0830bff646deb33da4045bd997e9377e43df78d05562c6c6a498c118f12aca4172d2badac9effc8b236029cc9045d6a979ee7eaec0ba35cd39b0316e3454f08706ea50666900fff23ef5d3cb74d62574c67aa4c1eea1f39029171b50396f56aea2b777c85906030f7baa4"])
open(&(0x7f0000000080)='./file1\x00', 0x181041, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000080), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c)
r7 = socket(0x1a, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000000)={r7, 0x4})
r8 = open(&(0x7f0000002000)='./bus\x00', 0x143146, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

05:43:04 executing program 0:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000480, &(0x7f00000000c0)=ANY=[], 0x1, 0x7b1, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16b142, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000580)="9f", 0x5e00, 0x1228}])

05:43:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)

05:43:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:04 executing program 1:
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:43:04 executing program 0:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x0)
r1 = open(&(0x7f0000000240)='./file2\x00', 0x1cda42, 0x0)
r2 = dup(r0)
write$binfmt_elf32(r2, &(0x7f00000013c0)=ANY=[], 0x658)
ioctl$FS_IOC_FSSETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x658})

05:43:05 executing program 2:
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x81832, 0xffffffffffffffff, 0x0)

05:43:05 executing program 4:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f1b6c696b7710826"})

05:43:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

[  886.945894][ T4762] loop3: detected capacity change from 0 to 2048
[  886.977061][ T4762] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615ÏÅÅñ0
[  886.977061][ T4762] .DA»¯d"	o¶?¤ôn[(ã½${UýLg\D–" or missing value
05:43:05 executing program 3:
syz_clone(0x4a001000, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

05:43:05 executing program 1:
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x891d, 0x0)

05:43:05 executing program 2:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5437, 0x0)

05:43:05 executing program 4:
syz_clone(0x4a001000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

05:43:05 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x3, &(0x7f00000025c0)=@framed, &(0x7f0000002600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

05:43:05 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

05:43:05 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)

05:43:05 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10)

[  887.626053][   T27] audit: type=1800 audit(1688017386.027:345): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  887.664760][   T27] audit: type=1800 audit(1688017386.047:346): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1963 res=0 errno=0
05:43:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0)

05:43:06 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x32, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20)

05:43:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000400))

05:43:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:06 executing program 3:
r0 = io_uring_setup(0x369f, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x19, 0xffff800097d6ffff, 0x0)

05:43:06 executing program 1:
r0 = socket(0x18, 0x0, 0x2)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)

05:43:06 executing program 0:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x4)

[  887.758490][ T4806] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
05:43:06 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, 0x0, 0x0)

05:43:06 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x2, 0x0, 0x0)

05:43:06 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:06 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f00000000c0))

[  887.867595][ T4806] CIFS mount error: No usable UNC path provided in device string!
[  887.867595][ T4806] 
[  887.901777][ T4806] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
05:43:06 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:06 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:06 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="fc", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)

05:43:06 executing program 0:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x7)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x1, &(0x7f00000002c0)='%'})

05:43:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:07 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0, 0x0)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000340)=0x7, &(0x7f0000000380)=0x2)
r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r4, @ANYBLOB="e89a825a87441d43e6b7390b7665a34c23013767589755aa76ce3f82acf9c19f48b12fd58b1f5f3b276f877ab09a4ead087223fc120d0000c43a838626463c89540300002a9a9aa1c0be299d8d2c1a283b3bf71bcb91d4f3bca1e06a53a4b42e2e8335faef9c455b55315a4d3353e4cee41095dd8d95a5b785075600000075c52b32c0719490d45c6858685969c782e6115fa5b331d8fe31d6e5cf3cc3ffbe189cca7140d336c41a98509c5100c76d011716da792b789884650002000026582d04f68b14363f6abc5c9ca5eb8cbffae42e52dde21750a5aacb350891583fcac9bed0dfd1c4e7bc564eecbb76c7b066e414dd656fb188bd386e8c", @ANYRESHEX=r0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES16=r3], 0x5, 0x2b7, &(0x7f0000000800)="$eJzs3MtrE18UwPHT9JWmtMnix08UpAfd6GZoo2sxSAtiwFIb8QHCtJ1oyJiUTKhExOrKrfhHuChddlfQ/gPduNONG3fdCC7sQhzJPPpMaWmbTNt8PxDuTe49M/dOJuHcIZO1B++fF/OOkTerEourdIiIrIukJCahjqCMefUe2eqNXO3/9fXivYeP7mSy2dEJ1bHM5LW0qg4OfXrxqi/ottwrq6knaz/TP1b/Xz2/9nfyWcHRgqOlclVNnSp/r5pTtqUzBadoqI7blulYWig5VsVvL/vtebs8O1tTszQzkJitWI6jZqmmRaum1bJWKzU1n5qFkhqGoQMJwX5yCxMTZuaQwdPHPBg0SaWSMTtFpG9XS24hkgEBAIBI7cz/Y/WU/vjy/8VLK9X++0uDQf6/3NMo/7/+zd/Wtvw/LiJNz/93Z0Tt5Uj5P06Jev6fCD6/nrePF4e9Cvk/AAAAAAAAAAAAAAAAAAAAAACnwbrrJl3XTYZl+OgVkbiIhM+jHieag/e/vW3euNc1KGK/m8vN5fwy6LAiIrZYMixJ+eOdD4F6PbwXUOtS8tmeD+Ln53KdXksmLwUvfkSSktoZ77pjt7OjI+rbHt8tia3xaUnKf43j0w3je+TK5S3xhiTly7SUxZYZ77zejH89onrrbnZHfJ/XDwAAAACAs8DQDQ3X74axV7sfv7G+bnh9wF9fDzdcn3fJha5o5w4AAAAAQLtwai+Lpm1blTNXCWd40KjwtwyRjDnc+ck4dAeoxA411CERsfWoew8vG+3VR8ajOiznPnz8fXwbvLEU32emTat0t/ZbCAAAAEArbCb94Ss3ox0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtqBV/Jxb1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT4l8AAAD//3uREoU=")
r7 = open(0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x116)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x147b42, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r7, r3})
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x2007, 0x0, 0x3)

05:43:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:07 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:07 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001c40)=[@in6={0xa, 0x0, 0x0, @mcast2}, @in={0x48, 0x0, @private}], 0x2c)

05:43:07 executing program 3:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffd28)
sendfile(r0, r1, 0x0, 0xffffdffa)
sendfile(r1, r0, 0x0, 0x800000a1)

05:43:07 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x10000000000001, 0x1f)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

05:43:07 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  888.787820][ T4847] loop1: detected capacity change from 0 to 128
[  888.846077][   T27] audit: type=1800 audit(1688017387.247:347): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048642 res=0 errno=0
05:43:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:07 executing program 1:
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1, 0x4a6, &(0x7f0000000580)="$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")

[  889.481121][   T27] audit: type=1800 audit(1688017387.657:348): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1970 res=0 errno=0
05:43:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:08 executing program 4:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  889.701611][ T4858] loop1: detected capacity change from 0 to 512
05:43:08 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x10000000000001, 0x1f)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

05:43:08 executing program 4:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  889.853634][ T4858] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
05:43:08 executing program 3:
set_mempolicy(0x2, &(0x7f0000000000)=0x10000000000001, 0x1f)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

05:43:08 executing program 4:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[  889.971447][ T4858] EXT4-fs error (device loop1): ext4_quota_enable:6956: comm syz-executor.1: Bad quota inode: 4, type: 1
05:43:08 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  890.021122][ T4858] EXT4-fs warning (device loop1): ext4_enable_quotas:6997: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  890.151302][ T4858] EXT4-fs (loop1): mount failed
05:43:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

[  890.370588][ T4891] xt_CT: You must specify a L4 protocol and not use inversions on it
05:43:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:08 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$rds(0x15, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0)

05:43:08 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:08 executing program 3:
fanotify_mark(0xffffffffffffffff, 0x80, 0x8002002, 0xffffffffffffffff, 0x0)

05:43:09 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:09 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000020c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90)

05:43:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

05:43:09 executing program 1:
socketpair(0x1e, 0x0, 0x7, &(0x7f00000005c0))

05:43:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:09 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:09 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000004c0)={0x0, 0x0})

05:43:09 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x35c, 0xffffffff, 0x0, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x45c, 0x45c, 0x45c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "2e2992f8db7ac21ddb59c9f5dec30e4a74c1cc4c04044f07c6967613cec3"}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'ip6tnl0\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b8)

05:43:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

05:43:09 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000380))

05:43:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0)

05:43:10 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:10 executing program 1:
prctl$PR_SET_IO_FLUSHER(0x19, 0x20000000)

05:43:10 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0)
ioctl$BLKZEROOUT(r0, 0x4c09, 0x0)

05:43:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:10 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0)

05:43:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:10 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:10 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}})

05:43:10 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000008ac0)={0x2e84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4a4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x264, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="a8390b85ab7c"}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1f4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x35, 0x3, "9d5de8c2f7e06fa81b67d05cf0c1280f2dd84c5bd5fe2003ee43cc5cb6cb78c115184f45948699c4941e1546f3cec427e9"}, @NL80211_BAND_6GHZ={0x51, 0x3, "d7ff43193009eb0140cc1344a3d8d0b849e495a0195fa817708229a9ee3c88748b9c6935ef39516d8685b0e83b626e4f9db456897fc66014c8c61b1efe5487f2042ab2699df1f353b44067e0ea"}, @NL80211_BAND_5GHZ={0x6d, 0x1, "85c403168d82511715d6113c06eb0fb7077517697da20404c2e0dee6032bbb069bee5960928990fa6e6a77a2790272b7508055adca1d2741aaf24583a685e7d181b6733b1d4c10a67017656afb5134008d8483873ab072fafda5f42d14bfb72a35ff7d9b931ab64322"}, @NL80211_BAND_6GHZ={0xf1, 0x3, "8f8f5838b7d059b250bac12597735e5aac120774e6aac8dea0be48931b7bd5f998acb19784a243bc2e1b2654e27d8e6d201aae62e85dc01e8b93a9b3bdaea00bc54da1705dd4c1a644bc2207f96dd7b5ae167b9ec9c93c750c637c1b15184b83491f40cf0da31b4dcc67219a26cc44fe1ac96122e020fcb1505afc30ef6202f0d6efdfdc459a5e61557800016d93fd3fc32619a6464c5991b28740286e3d6fe8ce2761277709734583e479546bddcd05bed71f0e0e424e74fa0d6076b1873918bc021e01c2386e77b2bdc48d665db27678892dd99af8ba0c3dd24364f32c3003f0fed5d2bed6850cccfcd17f11"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x220, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x205, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @broadcast, 0x0, @device_b}}, @ht={0x2d, 0x1a}, @perr={0x84, 0x5c, {0x0, 0x6, [@ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @device_b}, @not_ext={{}, @broadcast}, @not_ext={{}, @device_b}, @not_ext={{}, @broadcast}, @not_ext]}}, @fast_bss_trans={0x37, 0xeb, {0x0, 0x8, "ee7d1fa4c1658b9161959d71091d206e", "9085c7bfdb72758c6b4baa131b08aa30c3c5902cf39e0e281258df0ce7f609b4", "2d0c72414d8d6d60491678f573d4f84ef124e19cdc40ee106e43600c749e4dbc", [{0x0, 0x19, "ea6cdbe523896c01b0a56d11bdd51c2f42fddd1cb447ff8455"}, {0x0, 0x8, "08ae90454290ac8c"}, {0x0, 0x21, "a9057708b24a90cfd4422e10c4cce76b112338ff0c8f7e7f66dd291b8b6cc75571"}, {0x0, 0x1d, "065ceb153ef7ad20e4da13d9cdaff7b676d0388c0c45c407824bb9234c"}, {0x0, 0x12, "6af12bc48ea161145dae562bc165c828b9c4"}, {0x0, 0x4, "17024443"}, {0x0, 0x6, "4214a101bb37"}, {0x0, 0xe, "e6f796bf330a1f047ae0d6a91e9f"}]}}, @tim={0x5, 0x53, {0x0, 0x0, 0x0, "23671e58e505574d61f1574fd12ba20200953d4018f865e7e00bd1cd7065bf2037890c6e6d0bda75f8e521b923ba7803688d7157dee70d48295386f81b8f5eafa4371ba592ebef653987e41fd1f457cd"}}, @ssid={0x0, 0x1c, @random="2caf3ddb70ba0b1550c841eabd435145ada0c5e12021a73fa15549f6"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="5f628d8194ad"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x9b0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x20, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x988, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x981, 0xb, "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"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x190c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0xfc, 0x4, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xd1, 0x2, "bbd5dedbfd661d6b1304a8f572bae6747c32d4d546399029e272e979cb2f069b29958a2afca9213b5e9528ea43eb9df5ee61b4d4f3089d14d0043987df5fc746e6cb7544c0a691c446b8d66fd7aa06afac0fdc4f5e1cb36cdfac64f3fc55bd8a8647ca3cef5bd976983648b42be367fe4b5e51fa8d9cd22b03291c99a131ed37eabf402565be14b2679ced03474c71cf69c45a73dc1f3fe52e88882d4bba57f3c6e9d8d43f051355491f58694a17b0c927e26f6111cb134282f29deb1d957db6a65f422b2836cc1df30102e7f4"}, @NL80211_PKTPAT_OFFSET={0x8}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x17ec, 0x4, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x91, 0x1, "06b3f3f829338e5723b2ab2196240e76de10ddf615c1f776743c3920784bfa8e862efc2f8d72612bbfef546843e77191577c49aab6536f0ddafa3c132d16e43d3f47359485a3ffe7453671c626516fc01e5682e41f93ff14cf3c1eff3afcfb059b00fce12e3e5c0ac89f5590ca6b758f1de1ecf2b184dd5bb06b479fb2cc992cf06fb98002887be569bbb6f612"}, @NL80211_PKTPAT_MASK={0x49, 0x1, "efde6e42156e9de08a562e078dd81472e8bd20e7d95538d389cc564b363690f498d0550ba83700f3a097a7ceef28f4497e3583f063046e9eda31f0aa3c709b97c42f63c7b6"}, @NL80211_PKTPAT_MASK={0x5d, 0x1, "b11f0916c167e58cafd05d9e7fc6a52f29133b0bcd7af9a17aac30ed7159b74c695a94eaf91895a8dc2cefac7b2a9fbcc40bb99a3f834b9efa1c0c9813ce903b0588594a1ff0e8c04b6d283c5ca0ec6616f814bfd02dd9da69"}, @NL80211_PKTPAT_MASK={0x8d, 0x1, "9c5b2b92ded434911b0204f279f9d0b1331bcf7afe07933433b594e2264d9c1cbda04f3397a70a41f60473b62ecfdbe1398c0b11b1458494ce5c2bf401ffba1a8a0e2e101a0546f357e495a02d4e00e4775694d28db46d481a7d3df901349670afce0a359744b2ec19a39036650b57ebf4c8dfc76985dad6abf65d101421872591696a30069dc0d41a"}, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "7dc5c674815e9f8904355cd5c5f030d0a22eb04a2bcc50cbfe65bc4c616ba9cf8e3e48fbf0ef6db9fb8bb59245b07d0469194f60179a520ac5c4e0b7993c27ae7a26a82d7c0b3293f9c16c63228ae1e7ed4186b732854e85ef6116f9c47a3b9b7ba0415c2f55e232733738a49e50c32da9ebfe730a6c81dbadce1a9c044e3a56bec03922b5ef6c91c41add83f48080adc3aa5c4e5ed121ba3e55cadaa359045e7913d26146a90ce344616f506d45b5fdd711c7fe6d3c7034d9fd11439d85597c03c441629e1df40082"}]}, {0x12c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xbd, 0x2, "208b1954ce61094a6681d0eb53a08b3c010b53cd23063bd2312430677661d3a03102741843ee478cb6090773cc348c17e76882fdc74ff067c75a40fb48929416a03a0ce81e8eb96de1bf68deef127b69f982e40126051bd7c9c3f2ce1582e990e6b3945db11fb622428a0bb865785f672b50a2c3a4ddb06c6e3702989c9e53cdc751838505b61bfa3c67d06b5abd48202c5ba59161a941bb05b39012b6fe49ce7ad769b5b9796dabe72e0b9b40745450b794eaa8b952b75ecc"}, @NL80211_PKTPAT_MASK={0x25, 0x1, "b0458b665ee9e09afdcc3ec7d668996ade5e8db8c332c34a07f5790b81be0f3cd4"}, @NL80211_PKTPAT_PATTERN={0x49, 0x2, "a613ce393cc9fbdf64e2185ef0d4407252851b850b777573ae1fc9504877f89b4e071f94a323f5fa563c48b9a301f8b155a877d45f0ace5b17e245dfd935b78056c6f38c93"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x91, 0x1, "849d698033cf31826bc63acc8cb8bb29f2efba99ed8c5298af75003f45a4fbaec7d2e3f1b815d013bfb6acf2ec52d9b07bfe32bb92d5365deaf2c65aedd4b992049732cded161c65e883bb9fddd02c14a67ada2dfa2061192c3a68b044255c600002049a100aeb61592454e2e9d64017353523a25281a6c3ad0316a0f80800f8f62072c9269fa7491a558c5cea"}, @NL80211_PKTPAT_PATTERN={0x1001, 0x2, "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"}, @NL80211_PKTPAT_MASK={0xdd, 0x1, "74e81aa8f3f12200a0dfa7a267b52f909cb457402c1bf9687a6d1da43d970ec98ec5f878f2634f5ef68606b74239b65286ee591787f2258af99aeecd2ce48ffe04b379fe583a51ccc7fe813ebe25a566caca47d08486466b1b863c72ea0eef2274715c39ad636f084b1dd24172fcea68d155ea6e32dc875caef226f57f0d2530159ae1a379fc87ffb22c59d5d19d4e887b7449e0f879b4d55d585c05c800c445bf2ded2c55e3aedc28c38f98f31c1918ddc9015a10a14be988bc9272f584b9beeb1632d8c58d3ab59da8412460832cfd3738521f1dfa559cbb"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xa9, 0x1, "1665ca17f2f9ffb73050596c5891ecaa4bf9a7c18f6e006b9cb6c37789d5ac82668fd4bbc727a4e83b972ea80b09632396643b63ab611dea713aaa72b7ea2eb5cb546325b6881532932890197ef360ef5d54881e272ef4e72254abc38effea731a3fda176da94007cbb1ae42676957b010c98016258418c5e9c64b987f45cca675684e0094bb32edf4cbac0e50fdbf5a4f47d1603f6e3e9f2579bb1eeedfdf3eb88653b4be"}, @NL80211_PKTPAT_PATTERN={0x59, 0x2, "a2de40386595883d0de7c327359e0ab894d282663da26a14c050ee7a9b2da4e9c26cbff327803680b014451fc3d0def76792126b1d2a54428d487eafb18c1fefe08b71078202e227420a3839e4b23c999fa499ff3f"}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, '&'}, @NL80211_PKTPAT_MASK={0x99, 0x1, "a627fd3742a14804cd317ac6cfa18f064f9bf0696680f7ba3dc85fe2ac1692597df1b93cfc6e2493ed1dc409c560f5fa440293ee9246ec75ba40c60ef6c3d549eaead1aee45d9321610f0233a4022c530cabf3426ab498fec994de36f3db961adfb9be1010f5375c4e629aa89672a97944ee33c9c1afd4b2541190f73730f6d35ed5064bfd6ca446529b686784b180d9416c4f0c9a"}, @NL80211_PKTPAT_MASK={0x39, 0x1, "1a90844d5136fcd32b2bb82aaa7f28276586a4811cc4aff8f6b34aa91067f24235f26e89c03d56324cd9e36d828f58f548464fd673"}, @NL80211_PKTPAT_PATTERN={0x6d, 0x2, "c09be18f9a6bcf56ae175ee5cd372c0168cfd80425dde05a3f2c0b0bfd7ea3e02ac6f58748db68ee2f69270b5229e0f0bf34c83e45f92062ba6f2cc65b06f0e363538c5cdb45a3f7dd14c9e9adf5f1761a7e00a76b2f14bfede22e47f5c371bc274e89459e869c904a"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x11, 0x2, "28a060dce3d16614aeec8db9a0"}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x6f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x6f0, 0x4, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x71, 0x1, "c439a55d47ce1215f2880bc6a5cfc75e132572ae197b1d07806f906ef64b6f05058074a5c0a824d53515a14cb3e95c90e3ddd21ddf7a83c963315ec0271ce770dee297a1a8a4beeb1af282834d6e44cbc4427911b2f644630433cb833513b4ebab04f78dbc416ec543625cf66c"}, @NL80211_PKTPAT_MASK={0x6d, 0x1, "3cfc2c3c953baa4a81b173f5ee70628c4995111072208d658f8afd16756979dce76d6a215a260400321dd084ff227cbe44791a9606b581ba6a1e623f558a3fe0ca687157f0accbad96b5ebd82acd611da37deaacf14eb6323bca4eab83d3e1cc328514025d21a7733a"}, @NL80211_PKTPAT_PATTERN={0xa1, 0x2, "6396a5832c840063495b47fde30b61b0c73b7db12eaa14e40ac951680c0318e6cf882ad151543164edb956d7ec45f78627bed14abac750bfc53181cd40ecceb5095f805b0ccc6cb39a434c19ce69219ab21e3e5336bd0c7bc8a849721225c7e15136ab18ec76fc47c3ac31dc2a263ff6e4dfaafdd0ffab23ae4b279c2b5727fe3fb0e552e323c7574aafcee0590b62e93294d84ffcbdc86142e004bec5"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x550, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x541, 0x2, "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"}]}]}]}]}, 0x2e84}}, 0x0)

05:43:10 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0)
ioctl$BLKZEROOUT(r0, 0x1278, &(0x7f0000000340))

05:43:10 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}})

05:43:10 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, 0x0)

05:43:10 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x2b, 0x0, 0x0)

05:43:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:10 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg$sock(r0, &(0x7f000000a9c0)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002440)="bd", 0x1}, {&(0x7f0000002540)="19", 0x1}], 0x2}}, {{&(0x7f0000003900)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4054b1852435e95eb09ee53d616d5581c19bae72590f2f367f9fa5f6e9ae2d88eeaf2b5d55cf1887835d482650d1a1104ce31ef635f16b8f519fcf1afc525a"}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003980)="92", 0x1}], 0x1}}], 0x2, 0x0)

05:43:11 executing program 3:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000480, &(0x7f00000000c0)=ANY=[], 0x1, 0x7b1, &(0x7f00000007c0)="$eJzs3c1rXOUaAPDnTL7T3ptcuHBvXQUEDZROTI2tgouKCxEsFHThyjZMpqFmkimZiTQhYIoIbgQVF4Juuvaj7tz6sa3/hQtpqZoWKy4kciZn2mkzM0nMx7Tk94OTvO+cc/K8z3nPxzs5h5kADqyR9Ecu4khEfJBEDGWvJxHRUyt1R5xaX+7O6nIhnZJYW3v116S2zO3V5UI0rJM6lFX+HxHfvxtxNLcxbmVxaWayVCrOZ/Wx6uzFscri0rELs5PTxeni3InxiYnjJ585eWL3cv39x6XDNz586cmvTv35zv+uvv9DEqficDavMY/dMhIj2TbpSTfhfV7c7WAdlnS6AfwjExHRtX6Ux5EYiq5aqYWB/WwZALBX3o6INQDggElc/wHggKn/H+D26nKhPrX5d0GbmwOPppsvRET/ev71+5vrc7pr9+yuRX/tPujg7eS+5JOIGN6F+CMR8dk3b3yRTrFH9yEBmlm5HBHnhkc2nv+TDc8sbNdTW1hm5IF6w/mvd4fhgU18m45/nm02/stlx39/7eeD45++9WN3Zafx2xz/mdz1ncZoJx3/Pd/wbNudhvwzw11Z7V+1MV9Pcv5CqZie2/4dEaPR05fWx9vEGL31161W8xrHf7999Obnafz0970lcte7++5fZ2qyOrmTnBvdvBzxWHez/JO7/Z+0GP+e2WKMl59779NW89L803zr08b899balYgnmvb/vSfakrbPJ47Vdoex+k7RxNc/fTLYKn5j/6dTGr/+XmA/pP0/2D7/4aTxec3K9mNcuzL0Xat5IxFrWaQW+Tff/3uT12rl+iDh0mS1Oj8e0Zu8svH14/fWrdfry6f5jz7e2/T4b7f/p+8Jz20x/+4bv3zZJv+O9//Utvp/+4Wrd2a6WsXfPP+0/ydqpdHsla2c/7bawJ1sOwAAAAAAAAAAAAAAAAAAAAAAAADYqlxEHI4kl79bzuXy+fXv8P5vDOZK5Ur16PnywtxU1L4rezh6cvWPuhxq+DzU8ezz8Ov14w/Un46I/0TEx30DtXq+UC5NdTp5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgcavH9/6mf+zrdOgBgz/R3ugEAwL5z/QeAg6fV9X+l6asDe9oWAGB/eP8PAAeP6z8AHDyu/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxM6dPp9PaH6vLhbQ+NRAR5beOTRUrM/nZhUK+UJ6/mJ8ul6dLxXyhPNvyD62s/yqVyxcnYm7h0li1WKmOVRaXzs6WF+aqZy/MTk4XzxZ79i0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANi6yuJSEqVScb6yuDQz+WgXkohIp4elPQ99oSvbCdotkySbL7NZ4fVdaHNf1ta93iz1ONtZqy863pW7X2g8Swzs4xkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NHydwAAAP//DdEU9g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16b142, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000580)="9f", 0x5e00, 0x3c00}])

05:43:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:11 executing program 0:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000735236088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f0002000000090505021c9f7e000009058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

05:43:11 executing program 1:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000003200)=ANY=[], 0x8, 0x2cb, &(0x7f0000000100)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getpid()
r0 = creat(0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1000})
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x78}, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team0\x00', 'gre0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "30d937b943cae52ee44db9900ab87800455746c7831b94470ed5a438ddb5"}}, {{@ip={@local, @dev, 0x0, 0x0, 'ip6gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000980)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/34, 0x22}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000001d80)=""/174, 0xae}, {0x0}], 0x7}}, {{&(0x7f0000002040)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/177, 0xb1}}, {{&(0x7f0000002580)=@can, 0x80, &(0x7f0000002700)=[{0x0}], 0x1, &(0x7f0000002740)=""/99, 0x63}, 0xf2f}], 0x3, 0x0, &(0x7f0000002b80))
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3)

05:43:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  893.413853][ T4997] loop1: detected capacity change from 0 to 128
[  893.418533][ T4998] __nla_validate_parse: 74 callbacks suppressed
[  893.418549][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

[  893.485952][ T4994] loop3: detected capacity change from 0 to 2048
[  893.504029][   T27] audit: type=1800 audit(1688017391.897:349): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048643 res=0 errno=0
05:43:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  893.604406][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  893.657750][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  893.666493][ T3542] usb 1-1: new high-speed USB device number 7 using dummy_hcd
05:43:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

[  893.729280][ T4994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 52: invalid block bitmap
[  893.801325][ T5014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  893.860501][ T4994] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 13 with error 117
[  893.929077][ T3542] usb 1-1: Using ep0 maxpacket: 8
[  893.933826][ T4994] EXT4-fs (loop3): This should not happen!! Data will be lost
[  893.933826][ T4994] 
05:43:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000480, &(0x7f00000000c0)=ANY=[], 0x1, 0x7b1, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16b142, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000580)="9f", 0x5e00, 0x3c00}])

05:43:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  894.063037][ T3542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  894.076566][ T3621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  894.099331][ T3542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 40732, setting to 1024
[  894.110666][ T3542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  894.120622][ T3542] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  894.131858][ T3542] usb 1-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23
[  894.141087][ T3542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.151877][ T3542] usb 1-1: config 0 descriptor??
[  894.159508][ T3621] EXT4-fs (loop3): This should not happen!! Data will be lost
[  894.159508][ T3621] 
[  894.169799][ T3621] EXT4-fs (loop3): Total free blocks count 0
[  894.175899][ T3621] EXT4-fs (loop3): Free/Dirty block details
[  894.182718][ T3621] EXT4-fs (loop3): free_blocks=0
[  894.187772][ T3621] EXT4-fs (loop3): dirty_blocks=32
[  894.198139][ T3621] EXT4-fs (loop3): Block reservation details
05:43:12 executing program 1:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000003200)=ANY=[], 0x8, 0x2cb, &(0x7f0000000100)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
getpid()
r0 = creat(0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1000})
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x78}, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team0\x00', 'gre0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "30d937b943cae52ee44db9900ab87800455746c7831b94470ed5a438ddb5"}}, {{@ip={@local, @dev, 0x0, 0x0, 'ip6gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000980)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000c80)=""/251, 0xfb}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/34, 0x22}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000001d80)=""/174, 0xae}, {0x0}], 0x7}}, {{&(0x7f0000002040)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/177, 0xb1}}, {{&(0x7f0000002580)=@can, 0x80, &(0x7f0000002700)=[{0x0}], 0x1, &(0x7f0000002740)=""/99, 0x63}, 0xf2f}], 0x3, 0x0, &(0x7f0000002b80))
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3)

[  894.306031][ T5019] loop3: detected capacity change from 0 to 2048
[  894.326503][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  894.328235][ T5021] loop1: detected capacity change from 0 to 128
[  894.357435][ T5019] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 52: invalid block bitmap
[  894.387653][   T27] audit: type=1800 audit(1688017392.787:350): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048644 res=0 errno=0
[  894.395593][ T5019] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 13 with error 117
[  894.421626][ T3542] usb 1-1: usb_control_msg returned -32
[  894.429435][ T5019] EXT4-fs (loop3): This should not happen!! Data will be lost
[  894.429435][ T5019] 
[  894.432539][ T3542] usbtmc 1-1:0.0: can't read capabilities
[  894.566495][ T3621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  894.588996][ T3621] EXT4-fs (loop3): This should not happen!! Data will be lost
[  894.588996][ T3621] 
[  894.613967][ T3621] EXT4-fs (loop3): Total free blocks count 0
[  894.629754][ T3621] EXT4-fs (loop3): Free/Dirty block details
[  894.641983][ T3621] EXT4-fs (loop3): free_blocks=0
[  894.655920][ T3621] EXT4-fs (loop3): dirty_blocks=32
[  894.666558][ T3621] EXT4-fs (loop3): Block reservation details
[  894.799412][ T5025] usbtmc 1-1:0.0: INITIATE_ABORT_BULK_OUT returned 0
[  895.006137][ T3542] usb 1-1: USB disconnect, device number 7
05:43:13 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x300)

05:43:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x48, 0x0, 0x0)

05:43:13 executing program 1:
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103)
creat(&(0x7f0000000300)='./file1\x00', 0x0)
openat$dir(0xffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x0)

05:43:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x46, 0x0, 0x0)

05:43:13 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  895.536941][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:14 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x0)

[  895.589578][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:14 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$rds(0x15, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0)

05:43:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:14 executing program 3:
syz_io_uring_setup(0x5411, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)

05:43:14 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:14 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000003c0)=0x1, 0x4)

05:43:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  895.788861][ T5052] binder_alloc: 5051: binder_alloc_buf, no vma
[  895.805827][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:14 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

[  895.881922][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:14 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x10000, 0x0)

05:43:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  895.977068][ T5067] binder_alloc: 5066: binder_alloc_buf, no vma
[  896.062648][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  896.101264][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  896.137130][ T5073] binder_alloc: 5070: binder_alloc_buf, no vma
05:43:14 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{}, [@alu={0x7}, @jmp, @map_idx_val, @map_fd, @map_idx, @ldst={0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9a, &(0x7f0000000180)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

05:43:14 executing program 3:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x3, 0x4, 0x10, 0x200, {r0, r1/1000+10000}, {0x3, 0xc, 0x9, 0x3, 0x4, 0x6, "54930b91"}, 0x4, 0x2, {&(0x7f0000000040)}, 0x7fff, 0x0, r2})
clock_gettime(0x4, &(0x7f0000000140))
syz_open_dev$vim2m(&(0x7f0000000280), 0x9, 0x2)
clock_gettime(0x0, &(0x7f00000002c0))
syz_io_uring_setup(0x5411, &(0x7f0000000380)={0x0, 0x447c, 0x2, 0x2, 0x14a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600))

05:43:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:14 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

05:43:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 0:
ioperm(0x0, 0x27, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0)

05:43:15 executing program 1:
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 1:
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

[  896.611152][ T5084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:15 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0xf)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x541b, 0x0)

05:43:15 executing program 1:
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:15 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 3:
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0))

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)

05:43:15 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 3:
syz_open_dev$vim2m(0x0, 0x0, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
clock_gettime(0x6, &(0x7f0000000480))

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700), 0x0, 0x10000, 0x0)

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:15 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700), 0x0, 0x10000, 0x0)

05:43:15 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x2, 0x2)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700), 0x0, 0x10000, 0x0)

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 1:
openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 3:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, 0x0}, 0x500}], 0x1, 0x10000, 0x0)

05:43:15 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:15 executing program 1:
openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

05:43:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, 0x0}, 0x500}], 0x1, 0x10000, 0x0)

05:43:15 executing program 1:
openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000000c0)=0x20)

05:43:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

05:43:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:16 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, 0x0)

05:43:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:16 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, 0x0}, 0x500}], 0x1, 0x10000, 0x0)

05:43:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:16 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, 0x0)

05:43:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:16 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, 0x0)

05:43:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:17 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:17 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:17 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0))

05:43:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:17 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0))

05:43:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  899.087149][ T5217] __nla_validate_parse: 25 callbacks suppressed
[  899.087167][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  899.091678][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:17 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000000c0))

05:43:17 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

05:43:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  899.182784][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  899.204969][ T5219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  899.318739][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:18 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:18 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

05:43:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:18 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

[  899.909996][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  899.926069][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  899.932840][ T5245] binder: BINDER_SET_CONTEXT_MGR already set
05:43:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:18 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

[  899.955194][ T5245] binder: 5236:5245 ioctl 4018620d 20000000 returned -16
[  899.962424][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  900.013446][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}, {0x0}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

[  900.083256][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  900.101206][ T5251] binder: BINDER_SET_CONTEXT_MGR already set
05:43:18 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  900.123761][ T5251] binder: 5249:5251 ioctl 4018620d 20000000 returned -16
05:43:19 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}, {0x0}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

05:43:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:19 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {0x0}, {0x0}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

05:43:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  901.232419][ T5276] binder: BINDER_SET_CONTEXT_MGR already set
[  901.250194][ T5276] binder: 5268:5276 ioctl 4018620d 20000000 returned -16
05:43:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:19 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:20 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:20 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:20 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

05:43:20 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  902.681012][ T5318] binder: BINDER_SET_CONTEXT_MGR already set
[  902.700836][ T5318] binder: 5316:5318 ioctl 4018620d 20000000 returned -16
05:43:21 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:21 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:21 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x2}, 0x500}], 0x1, 0x10000, 0x0)

05:43:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

05:43:21 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:22 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)

05:43:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

05:43:22 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:22 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:22 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  904.529252][ T5360] __nla_validate_parse: 27 callbacks suppressed
[  904.529269][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  904.559701][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  904.627319][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

[  904.668480][ T5376] binder: BINDER_SET_CONTEXT_MGR already set
05:43:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

05:43:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  904.709478][ T5376] binder: 5370:5376 ioctl 4018620d 20000000 returned -16
[  904.758063][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  904.844223][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  904.871284][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:24 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

05:43:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x3}, 0x500}], 0x1, 0x10000, 0x0)

05:43:24 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

[  905.654835][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  905.700364][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  905.740498][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)

05:43:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}}], 0x2f3, 0x10000, 0x0)

[  905.927105][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
05:43:24 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:24 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}}], 0x2f3, 0x10000, 0x0)

05:43:24 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}}], 0x2f3, 0x10000, 0x0)

05:43:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:24 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:25 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2], 0x38}}, 0x0)

05:43:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x0, 0x0)

05:43:25 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:25 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

05:43:25 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:25 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:25 executing program 4:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, 0xffffffffffffffff)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

05:43:25 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)

05:43:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x0, 0x0)

05:43:25 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:25 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:26 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:26 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:26 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:26 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:26 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x39, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe03}, {0x0, 0x6}, {&(0x7f0000002a80)=""/4090, 0x7c}], 0x3d3, 0x0, 0x141}, 0x500}], 0x2f3, 0x0, 0x0)

05:43:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:27 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="060015"], 0x38}}, 0x0)

05:43:27 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:27 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:27 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:27 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:28 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:28 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:28 executing program 5:
syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
open(0x0, 0x0, 0x0)

05:43:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32=r2, @ANYBLOB="06001500"], 0x38}}, 0x0)

05:43:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:28 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:28 executing program 5:
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
lchown(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0)

05:43:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  909.875216][ T5535] __nla_validate_parse: 159 callbacks suppressed
[  909.875232][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100000000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:28 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:28 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:28 executing program 5:
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)

[  910.051882][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010000000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 5:
userfaultfd(0xc0803)

05:43:29 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0)

[  910.659483][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010000000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:29 executing program 5:
write$capi20(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x5fd, 0x2)

[  910.830785][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:29 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010000000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 5:
mknod(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)

05:43:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  911.074549][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
05:43:29 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)

05:43:29 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

[  911.229341][ T5590] binder: 5588:5590 ioctl c0306201 20001480 returned -14
05:43:29 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000000c0))

05:43:29 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600080001000200000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:29 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  911.454444][ T5609] binder: BINDER_SET_CONTEXT_MGR already set
[  911.455290][ T5605] binder: 5601:5605 ioctl c0306201 20001480 returned -14
[  911.477270][ T5609] binder: 5603:5609 ioctl 4018620d 20000000 returned -16
05:43:29 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:29 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:29 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  911.653777][ T5620] binder: 5619:5620 ioctl c0306201 20001480 returned -14
[  911.661646][ T5623] binder: 5621:5623 ioctl c0306201 0 returned -14
05:43:30 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:30 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  911.799898][ T5633] binder: 5631:5633 ioctl c0306201 0 returned -14
05:43:30 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:30 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:30 executing program 2:
r0 = syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000010280)='./bus\x00', 0x10, &(0x7f0000007f80)=ANY=[], 0x1, 0x7e64, &(0x7f0000000100)="$eJzs3M1uG1UUAODjhEZAS4kQC3aMxI8ciVhjO6mgbCKqqgtIFdGy7MKxHcttYkdx4oSuuuHnIdjBinfgAdix6aJvgMQOiU2FGuSZiYTKTyNinMb5Pml8fI9vzr3XmizOKEoA59Z88tuvpbgcL0XEbERcisjel4ors5KHNyLizYiY+dNVKvKjwZ1RYi4iXo6Iy6Piec1SMffbH768893PH7/zzfc/zqZff/XL6Z0aOE27EfF2RGxt5+P9rTz2O3m8W+Qbw24Wt5aGRcw/2LpXjPt53G+vZxX2G0fzGlmsd/L5/e29wShubDaao9jpbmT57V6+4GDYOaqT/cDdxk42brXXs9gd9LPYuZ/v66CI9we7eZ1WUe/zZn6+3aOY59sH7fw82/ey2OztFvm8br/VPhjFYRGL5aK1/t+/47Pik25v7yAZtncG3X4vWa5U00q6uNO8spim1Q/qi51WY6N5pV1bajU2lpJye2XQ31xIyp1mMynfuHZtIammlVolfS+5cfOzZLOVlEfxo25vb7e7OVhIapX6cqW6kLxVTW6triVrn16/vrp2O1nt95Kb/WFST5Nq/epy7Wr9/WTt1u2kltZS55+o0oTXY8r88w10+OQwM9HtAJwF4+z/Q/8PHNP56v+L8+j//+LE/e+7Z7v/1f/DCbiBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrYs/fbiXvZnPxzNF/pUi9VoxLhWfHf6N0lM1Z0d1I+LCMed/UYqYK9Y4ul6IiJXi+v3V//c7AAAAgGn26HH5YSnr1vOX+X+fPnNhMtvihB7k4ckzps1lr6VLD8a0bPZY5xn30PFlD6JeH1e12Wx/4zrpxSieUI1F9mv14riqHcvsRFcDAACeDzoBAAAAmGpP/xk+AAAAMH30/wAAADD9sv7f//8DAACA6fbocfnhae8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOfuTRCGggAAX/xrgihO4Q42juAILuEIDuJGNhaZw05ELXKCiIgQQyB8HxzHJeHyrnzNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN+Vx9WuuixPTfvc7s38ZxoAAADgq3mdBllO89Ei6yLffbq7F2+thhFRRsT4x+/3RcQk//GMUUSsM66ztocHAACA/qoO503XZwAAAAAAAAAAAAAAAAAAAABedLH/b1sn+/8AAACgPfb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwYHdeTgCAQRiA9rNA95+2CLqB4OU9SMgxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH12Zp0aN+pN/wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPDhwUAQCAIACjmv2L+LGDPbgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC63ST77NcxCoAwEARAk3wglT+z9rd+S5FcIWLtIc7AEtg0214bqWfRR1/jf9m39em9K28N/qo5ewAAAAB/0CLT5VYvPXEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwe4cWgEAg0AUa+k+7D9eBQ+PwySGLxAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDIG33cE51RCQBAyb65PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAABDkb73CAAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUwEAAP//bbMf7Q==")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfd)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
fsync(r1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06)
openat$dir(0xffffffffffffff9c, &(0x7f0000008000)='./bus\x00', 0x400800, 0x30)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000081c0)={'ip6tnl0\x00', &(0x7f0000008140)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x4, 0x9, 0x3b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x8000, 0x0, 0xbca}})
ioctl$FICLONE(r1, 0x40049409, r0)
syz_open_dev$vcsn(&(0x7f0000008280), 0x7f, 0x8000)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000007c0)={0x2, 0x2, 0x7, 0xfff, 0xffffffffffffffff})
mount$overlay(0x0, &(0x7f0000007f80)='./bus\x00', &(0x7f0000007fc0), 0x80, &(0x7f0000008040)={[{@index_on}, {@index_on}, {@index_off}, {@xino_auto}, {@nfs_export_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ip6gre0\x00'}}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x800)
lseek(r3, 0x200, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r3, r4, 0x0, 0x1dd00)

05:43:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:30 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:30 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  912.330173][ T5645] binder: 5643:5645 ioctl c0306201 0 returned -14
[  912.340488][ T5647] binder: 5638:5647 ioctl c0306201 20001480 returned -14
05:43:30 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:30 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:30 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:31 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  913.721333][   T27] audit: type=1804 audit(1688017412.127:351): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3236451533/syzkaller.ZU1JwM/442/bus" dev="sda1" ino=1950 res=1 errno=0
[  913.758625][   T27] audit: type=1800 audit(1688017412.157:352): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1950 res=0 errno=0
05:43:32 executing program 2:
socketpair(0x2, 0x5, 0x2, &(0x7f0000002480))

05:43:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:32 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:32 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:32 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

[  914.029278][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
05:43:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:32 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:32 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  914.222267][ T5689] binder: 5686:5689 ioctl c0306201 20001480 returned -14
[  914.243132][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
05:43:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x401000000001, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
copy_file_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0)
getpid()
close(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0)
sendfile(r4, r5, 0x0, 0xffffdffa)

05:43:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:32 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:32 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:32 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:32 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

[  914.388354][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  914.413763][ T5701] binder: 5700:5701 ioctl c0306201 20001480 returned -14
[  914.541741][   T27] audit: type=1800 audit(1688017412.937:353): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
05:43:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:33 executing program 2:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x1, 0x0, {0x7}}}}}}}]}}, 0x0)

05:43:33 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:33 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  915.306772][ T5717] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  915.346093][ T5719] binder: 5718:5719 ioctl c0306201 20001480 returned -14
05:43:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:33 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:33 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:33 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:34 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  915.516546][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  915.542948][ T5734] binder: 5728:5734 ioctl c0306201 20001480 returned -14
[  915.654454][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  915.686269][ T5740] binder: 5736:5740 ioctl c0306201 20001480 returned -14
05:43:34 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat$null(r1, &(0x7f0000000000)='./bus\x00', 0x0, 0x103)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)

05:43:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:34 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:34 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:34 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

05:43:34 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=<r3=>0x0)
prlimit64(r3, 0xa, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x0)
syz_clone3(0x0, 0x0)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
r5 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0xa, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getpid()
close(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0)
sendfile(r5, r6, 0x0, 0xffffdffa)

[  915.860205][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  915.882424][ T5752] binder: 5749:5752 ioctl c0306201 20001480 returned -14
05:43:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:34 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:34 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:34 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:34 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

[  916.060305][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  916.106190][ T5766] binder: BINDER_SET_CONTEXT_MGR already set
[  916.249082][   T27] audit: type=1800 audit(1688017414.637:354): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0
[  916.610695][ T5766] binder: 5765:5766 ioctl 4018620d 20000000 returned -16
05:43:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=<r3=>0x0)
prlimit64(r3, 0xa, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x0)
syz_clone3(0x0, 0x0)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
r5 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0xa, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getpid()
close(r5)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0)
sendfile(r5, r6, 0x0, 0xffffdffa)

05:43:35 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  916.875807][ T5775] binder: 5768:5775 ioctl c0306201 20001480 returned -14
05:43:35 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  917.004726][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  917.149142][   T27] audit: type=1800 audit(1688017415.537:355): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
05:43:36 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:36 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r0, 0x4b4e, 0x0)

[  917.837430][ T5794] binder: 5793:5794 ioctl c0306201 20001480 returned -14
05:43:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:36 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

05:43:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:36 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:36 executing program 2:
r0 = syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000010280)='./bus\x00', 0x10, &(0x7f0000007f80)=ANY=[], 0x1, 0x7e64, &(0x7f0000000100)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfd)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
fsync(0xffffffffffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06)
openat$dir(0xffffffffffffff9c, 0x0, 0x400800, 0x30)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000081c0)={'ip6tnl0\x00', &(0x7f0000008140)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x4, 0x9, 0x3b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x8000, 0xd, 0xbca}})
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0)
syz_open_dev$vcsn(&(0x7f0000008280), 0x7f, 0x8000)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8, 0x80000)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000007c0)={0x2, 0x0, 0x7, 0xfff, 0xffffffffffffffff})
mount$overlay(0x0, &(0x7f0000007f80)='./bus\x00', &(0x7f0000007fc0), 0x80, &(0x7f0000008040)={[{@index_on}, {@index_on}, {@index_off}, {@xino_auto}, {@nfs_export_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ip6gre0\x00'}}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/4178], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffe98}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r2, r3, 0x0, 0x1dd00)

05:43:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  918.024096][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  918.060962][ T5806] binder: BINDER_SET_CONTEXT_MGR already set
05:43:36 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  918.082561][ T5806] binder: 5804:5806 ioctl 4018620d 20000000 returned -16
[  918.096173][ T5808] binder: 5805:5808 ioctl c0306201 20001480 returned -14
05:43:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:36 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:36 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  918.243464][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
05:43:36 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c00160008000100020000000800", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  918.348435][ T5822] binder: BINDER_SET_CONTEXT_MGR already set
[  918.366651][ T5821] binder: BINDER_SET_CONTEXT_MGR already set
[  918.391805][ T5821] binder: 5819:5821 ioctl 4018620d 20000000 returned -16
[  918.398633][ T5822] binder: 5820:5822 ioctl 4018620d 20000000 returned -16
[  918.425144][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
05:43:36 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  918.447532][ T5828] binder: 5820:5828 ioctl c0306201 20001480 returned -14
05:43:37 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0))

05:43:37 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010002000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

[  918.943542][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  918.949319][ T5832] binder: BINDER_SET_CONTEXT_MGR already set
[  918.958754][ T5832] binder: 5831:5832 ioctl 4018620d 20000000 returned -16
[  920.105340][   T27] audit: type=1804 audit(1688017418.507:356): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3236451533/syzkaller.ZU1JwM/450/bus" dev="sda1" ino=1953 res=1 errno=0
[  920.146504][   T27] audit: type=1800 audit(1688017418.537:357): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
05:43:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)

05:43:38 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:38 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010002000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:38 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, 0x0)

05:43:38 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  920.388905][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  920.398858][ T5846] binder: BINDER_SET_CONTEXT_MGR already set
[  920.405585][ T5848] binder: BINDER_SET_CONTEXT_MGR already set
[  920.411931][ T5848] binder: 5845:5848 ioctl 4018620d 20000000 returned -16
[  920.424169][ T5846] binder: 5839:5846 ioctl 4018620d 20000000 returned -16
05:43:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c0016000800010002000000080004", @ANYRES32=r2, @ANYBLOB="0600150007"], 0x38}}, 0x0)

05:43:38 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r0, 0x4b67, 0x0)

05:43:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  920.457122][ T5852] binder: 5839:5852 ioctl c0306201 20001480 returned -14
05:43:38 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:38 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:38 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:39 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r0, 0x5608, 0x0)

[  920.559114][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
05:43:39 executing program 0:
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300))
syz_clone3(0x0, 0x0)
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
r3 = socket$inet6(0xa, 0x401000000001, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
close(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0)
sendfile(r3, r4, 0x0, 0xffffdffa)

05:43:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:39 executing program 2:
open(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0)

[  920.662345][ T5867] binder: BINDER_SET_CONTEXT_MGR already set
[  920.695514][ T5867] binder: 5861:5867 ioctl 4018620d 20000000 returned -16
[  920.729818][ T5872] binder: 5861:5872 ioctl c0306201 20001480 returned -14
[  920.763412][   T27] audit: type=1800 audit(1688017419.167:358): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1978 res=0 errno=0
[  920.767026][ T5875] fuse: Bad value for 'fd'
05:43:39 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, 0x0)

05:43:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:39 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r0, 0x5601, 0x0)

05:43:39 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x16}]})

05:43:39 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  921.243165][ T5882] binder: 5880:5882 ioctl c0306201 20001480 returned -14
05:43:39 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  921.320914][   T27] audit: type=1326 audit(1688017419.727:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9da668c389 code=0x0
[  921.457127][ T5893] binder: 5892:5893 ioctl c0306201 20001480 returned -14
05:43:39 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ffad03000009"], 0x0)

05:43:39 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{}, {}, {0x6}]})

05:43:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  921.549349][   T27] audit: type=1326 audit(1688017419.947:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9da668c389 code=0x0
[  921.869067][ T3542] usb 1-1: new high-speed USB device number 8 using dummy_hcd
05:43:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, 0x0)

05:43:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:40 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000240), 0x180000, 0x0)

05:43:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x14552, &(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfd, 0x11d4, &(0x7f00000024c0)="$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")
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007ffb)
r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
getgroups(0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7f06)

05:43:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:40 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  922.019835][ T5909] binder: 5904:5909 ioctl c0306201 20001480 returned -14
05:43:40 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  922.129205][ T3542] usb 1-1: Using ep0 maxpacket: 8
[  922.176748][ T5918] binder: 5917:5918 ioctl c0306201 20001480 returned -14
[  922.279136][ T3542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.390803][ T3542] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  922.401132][ T3542] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  922.411666][ T3542] usb 1-1: Manufacturer: syz
[  922.424048][ T3542] usb 1-1: config 0 descriptor??
[  922.719393][ T3542] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  922.726343][ T3542] usb 1-1: No valid video chain found.
[  922.743103][ T3542] usb 1-1: USB disconnect, device number 8
05:43:41 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ffad03000009"], 0x0)

05:43:41 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:41 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
syz_clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58)

05:43:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
r4 = socket$inet6(0xa, 0x401000000001, 0x0)
socket(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
close(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1105042, 0x0)
sendfile(r4, r5, 0x0, 0xffffdffa)

05:43:41 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:41 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  923.231697][ T5930] binder: 5926:5930 ioctl c0306201 20001480 returned -14
[  923.368689][   T27] audit: type=1800 audit(1688017421.767:361): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  923.539463][   T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd
05:43:42 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  923.919273][   T26] usb 1-1: Using ep0 maxpacket: 8
05:43:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r2)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001c0012000b0001"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x81)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x600408c0}, 0x4000010)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)
mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x10400, &(0x7f00000002c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@name={'name', 0x3d, 'wlan1\x00'}}], [{@subj_role={'subj_role', 0x3d, 'cgroup.controllers\x00'}}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000600)={@private, @local}, &(0x7f0000000640)=0xc)
sendmsg$nl_route_sched(r4, 0x0, 0x8080)

05:43:42 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  924.018686][ T5941] binder: 5940:5941 ioctl c0306201 20001480 returned -14
[  924.049402][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
05:43:42 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0)

[  924.139371][   T26] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  924.162684][   T26] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  924.177803][   T26] usb 1-1: Manufacturer: syz
[  924.185325][   T26] usb 1-1: config 0 descriptor??
[  924.257116][   T27] audit: type=1804 audit(1688017422.657:362): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3236451533/syzkaller.ZU1JwM/461/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
[  924.295495][   T27] audit: type=1804 audit(1688017422.657:363): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3236451533/syzkaller.ZU1JwM/461/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
[  924.469556][   T26] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  924.476479][   T26] usb 1-1: No valid video chain found.
[  924.488710][   T26] usb 1-1: USB disconnect, device number 9
05:43:43 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ffad03000009"], 0x0)

05:43:43 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:43 executing program 3:
syz_clone(0x2200, 0x0, 0x0, 0x0, 0x0, 0x0)

05:43:43 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:43 executing program 2:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000340))

05:43:43 executing program 2:
clock_adjtime(0x0, &(0x7f0000000000)={0x81})

05:43:43 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:43 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  924.977812][ T5957] binder: BINDER_SET_CONTEXT_MGR already set
[  925.009219][ T5957] binder: 5955:5957 ioctl 4018620d 20000000 returned -16
05:43:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0)

05:43:43 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:43 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x164}, 0x48)

[  925.166572][ T5975] binder: BINDER_SET_CONTEXT_MGR already set
[  925.214112][ T5975] binder: 5971:5975 ioctl 4018620d 20000000 returned -16
[  925.282327][   T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  925.550777][   T26] usb 1-1: Using ep0 maxpacket: 8
[  925.679533][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  925.774020][   T26] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  925.783149][   T26] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  925.791363][   T26] usb 1-1: Manufacturer: syz
[  925.797537][   T26] usb 1-1: config 0 descriptor??
[  926.079151][   T26] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  926.086198][   T26] usb 1-1: No valid video chain found.
[  926.095960][   T26] usb 1-1: USB disconnect, device number 10
05:43:44 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ffad03000009"], 0x0)

05:43:44 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000000)={'vcan0\x00'})

05:43:44 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:44 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:44 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:44 executing program 2:
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/142)

05:43:45 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80840, 0x0)
read$dsp(r0, &(0x7f00000000c0)=""/14, 0xe)

05:43:45 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:45 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:45 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  926.584126][ T5982] binder: BINDER_SET_CONTEXT_MGR already set
[  926.620061][ T5982] binder: 5981:5982 ioctl 4018620d 20000000 returned -16
05:43:45 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x105}, 0x14}}, 0x0)

[  926.833432][ T6002] binder: 5999:6002 ioctl c0306201 20001480 returned -14
[  926.919550][ T4060] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  927.189034][ T4060] usb 1-1: Using ep0 maxpacket: 8
[  927.309249][ T4060] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.419976][ T4060] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  927.429101][ T4060] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  927.437176][ T4060] usb 1-1: Manufacturer: syz
[  927.445252][ T4060] usb 1-1: config 0 descriptor??
[  927.719225][ T4060] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  927.726144][ T4060] usb 1-1: No valid video chain found.
[  927.738299][ T4060] usb 1-1: USB disconnect, device number 11
05:43:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:46 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:46 executing program 2:
futex_waitv(&(0x7f0000001540)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x3d, 0x0, 0x0, 0x0)

05:43:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:46 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:46 executing program 0:

05:43:46 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  928.240700][ T6011] binder: 6010:6011 ioctl c0306201 20001480 returned -14
05:43:46 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:46 executing program 0:

05:43:46 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

[  928.310210][ T6013] binder: 6009:6013 ioctl 4018620d 0 returned -22
05:43:46 executing program 0:

[  928.383089][ T6024] binder: 6021:6024 ioctl c0306201 20001480 returned -14
05:43:46 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:46 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:46 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

[  928.609776][ T6031] binder: 6030:6031 ioctl 4018620d 0 returned -22
05:43:47 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:47 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r0, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:47 executing program 0:
syz_usb_connect(0x0, 0x58, 0x0, 0x0)

05:43:47 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:47 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:47 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r0, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  929.076695][ T6042] binder: 6038:6042 ioctl c0306201 20001480 returned -14
[  929.099395][ T6043] binder: 6037:6043 ioctl 4018620d 0 returned -22
05:43:47 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:47 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:47 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:47 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

[  929.323363][ T6056] binder: 6050:6056 ioctl c0306201 20001480 returned -14
05:43:47 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:48 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:48 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:48 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup2(r0, 0xffffffffffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r1, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:48 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:48 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:48 executing program 0:
syz_usb_connect(0x0, 0x58, 0x0, 0x0)

05:43:48 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:48 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  929.857740][ T6067] binder: 6065:6067 ioctl c0306201 20001480 returned -14
05:43:48 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  929.978501][ T6077] binder: 6075:6077 ioctl c0306201 20001480 returned -14
05:43:48 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:48 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:48 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  930.220414][ T6088] binder: 6086:6088 ioctl c0306201 20001480 returned -14
05:43:49 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:43:49 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:49 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
preadv(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f00000003c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000ac0)=""/62, 0x3e}, {0x0}], 0x6, 0x6, 0xffff0000)

05:43:49 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:49 executing program 0:
syz_usb_connect(0x0, 0x58, 0x0, 0x0)

05:43:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:49 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

[  930.709937][ T6097] binder: 6096:6097 ioctl c0306201 20001480 returned -14
[  930.744826][ T6100] binder: 6095:6100 ioctl c0306201 0 returned -14
05:43:49 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:49 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  930.867750][ T6104] binder: 6103:6104 ioctl c0306201 20001480 returned -14
05:43:49 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:49 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  930.922121][ T6113] binder: 6112:6113 ioctl c0306201 20001480 returned -14
[  931.001448][ T6117] binder: 6116:6117 ioctl c0306201 0 returned -14
[  931.300526][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  931.306870][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
05:43:50 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:43:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:50 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

05:43:50 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080))

05:43:50 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[], 0x0)

05:43:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  931.850813][ T6127] binder: 6126:6127 ioctl c0306201 20001480 returned -14
[  931.864645][ T6130] binder: 6129:6130 ioctl c0306201 0 returned -14
05:43:50 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6a)

[  932.016953][ T6137] binder: BINDER_SET_CONTEXT_MGR already set
[  932.029969][ T6137] binder: 6136:6137 ioctl 4018620d 20000000 returned -16
05:43:50 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, 0x0, 0x6a)

[  932.062740][ T6141] binder: 6139:6141 ioctl c0306201 20001480 returned -14
05:43:50 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:50 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  932.129245][ T4060] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  932.313273][ T6147] binder: 6144:6147 ioctl c0306201 20001480 returned -14
[  932.329312][ T4060] usb 1-1: device descriptor read/64, error 18
[  932.332217][ T6148] binder: BINDER_SET_CONTEXT_MGR already set
[  932.352626][ T6148] binder: 6146:6148 ioctl 4018620d 20000000 returned -16
[  932.609166][ T4060] usb 1-1: new high-speed USB device number 13 using dummy_hcd
05:43:51 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:43:51 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, 0x0, 0x6a)

05:43:51 executing program 2:
getrlimit(0x0, &(0x7f0000000040))

05:43:51 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:51 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  932.722557][ T6154] binder: BINDER_SET_CONTEXT_MGR already set
[  932.731795][ T6157] binder: 6155:6157 ioctl c0306201 20001480 returned -14
[  932.736730][ T6154] binder: 6152:6154 ioctl 4018620d 20000000 returned -16
[  932.809268][ T4060] usb 1-1: device descriptor read/64, error 18
[  932.929188][ T4060] usb usb1-port1: attempt power cycle
[  933.351742][ T4060] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  933.549327][ T4060] usb 1-1: device descriptor read/8, error -61
[  933.819055][ T4060] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  934.032863][ T4060] usb 1-1: device descriptor read/8, error -61
[  934.159224][ T4060] usb usb1-port1: unable to enumerate USB device
05:43:53 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[], 0x0)

05:43:53 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000200))

05:43:53 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
write$cgroup_subtree(r1, 0x0, 0x6a)

05:43:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:53 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:43:53 executing program 2:
r0 = socket(0x1d, 0x2, 0x6)
recvmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x10041)

05:43:53 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x84, 0x10, 0x0, &(0x7f0000000200)=0x8)

05:43:53 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  934.861600][ T6167] binder: 6166:6167 unknown command 0
[  934.867602][ T6169] binder: 6168:6169 ioctl c0306201 20001480 returned -14
[  934.883783][ T6167] binder: 6166:6167 ioctl c0306201 20001480 returned -22
05:43:53 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x20000000)

05:43:53 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000200))

05:43:53 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  934.997484][ T6184] sctp: [Deprecated]: syz-executor.1 (pid 6184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  934.997484][ T6184] Use struct sctp_sack_info instead
[  935.065092][ T6181] binder: 6180:6181 ioctl c0306201 20001480 returned -14
[  935.151931][ T6191] binder: 6189:6191 unknown command 0
[  935.206166][ T6191] binder: 6189:6191 ioctl c0306201 20001480 returned -22
[  935.279080][ T3542] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  935.509134][ T3542] usb 1-1: device descriptor read/64, error 18
[  935.799065][ T3542] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  935.999049][ T3542] usb 1-1: device descriptor read/64, error 18
[  936.119232][ T3542] usb usb1-port1: attempt power cycle
[  936.559072][ T3542] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  936.769448][ T3542] usb 1-1: device descriptor read/8, error -61
[  937.049094][ T3542] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  937.229248][ T3542] usb 1-1: device descriptor read/8, error -61
[  937.349751][ T3542] usb usb1-port1: unable to enumerate USB device
05:43:56 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[], 0x0)

05:43:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:56 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x84, 0x1c, 0x0, &(0x7f0000000200))

05:43:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000012c0)={'sit0\x00', 0x0})

05:43:56 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:56 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:43:56 executing program 2:
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_clone(0xca100000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x0)
syz_open_dev$audion(&(0x7f0000000240), 0x8, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x301500, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0)

05:43:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:56 executing program 1:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x6001)

[  937.947999][ T6201] binder: 6194:6201 ioctl c0306201 20001480 returned -14
[  937.957941][ T6199] binder: 6197:6199 unknown command 0
[  937.966678][ T6199] binder: 6197:6199 ioctl c0306201 20001480 returned -22
05:43:56 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  938.045208][ T6211] binder: 6208:6211 ioctl c0306201 0 returned -14
[  938.058120][ T6211] binder: 6208:6211 ioctl c0306201 20001480 returned -14
05:43:56 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x46220, 0x0)

[  938.197440][ T6219] binder: 6215:6219 ioctl c0306201 0 returned -14
[  938.216870][ T6218] binder: 6214:6218 unknown command 0
[  938.253745][ T6218] binder: 6214:6218 ioctl c0306201 20001480 returned -22
[  938.298112][ T6219] binder: 6215:6219 ioctl c0306201 20001480 returned -14
[  938.429380][ T4070] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  938.659345][ T4070] usb 1-1: device descriptor read/64, error 18
[  938.929187][ T4070] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  939.145989][ T4070] usb 1-1: device descriptor read/64, error 18
[  939.269650][ T4070] usb usb1-port1: attempt power cycle
[  939.689130][ T4070] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  939.869112][ T4070] usb 1-1: device descriptor read/8, error -61
[  940.139139][ T4070] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  940.339464][ T4070] usb 1-1: device descriptor read/8, error -61
[  940.469940][ T4070] usb usb1-port1: unable to enumerate USB device
05:43:59 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)

05:43:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:59 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000001004000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0xea9da9d493200f57}, 0x14}}, 0x0)

05:43:59 executing program 2:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x0, 0x0, "37de47e4c025c332ed30c55362f538b8630f33a6c8cd07b9"})

05:43:59 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  940.986170][ T6226] binder: 6225:6226 unknown command 0
[  941.003449][ T6226] binder: 6225:6226 ioctl c0306201 20001480 returned -22
05:43:59 executing program 2:
open(&(0x7f0000000000)='./file0\x00', 0x430731, 0x0)

05:43:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:43:59 executing program 1:
mknod(&(0x7f0000000080)='./file0\x00', 0x8876, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x20007604)

[  941.028300][ T6232] binder: 6224:6232 ioctl c0306201 0 returned -14
[  941.067579][ T6232] binder: 6224:6232 ioctl c0306201 20001480 returned -14
05:43:59 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaff125c00000000", 0x8)
socketpair(0x1f, 0x1, 0x0, 0x0)

05:43:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:43:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  941.154765][ T6243] binder: 6242:6243 unknown command 0
[  941.160340][ T6243] binder: 6242:6243 ioctl c0306201 20001480 returned -22
05:43:59 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
fsync(r0)

[  941.241552][ T6247] binder: 6246:6247 unknown command 25349
[  941.280205][ T6251] binder: 6250:6251 ioctl c0306201 20000080 returned -14
[  941.311529][ T6247] binder: 6246:6247 ioctl c0306201 20001480 returned -22
[  941.343679][ T6251] binder: 6250:6251 ioctl c0306201 20001480 returned -14
[  941.469199][ T4602] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  941.679143][ T4602] usb 1-1: device descriptor read/64, error 18
[  941.952667][ T4602] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  942.159078][ T4602] usb 1-1: device descriptor read/64, error 18
[  942.290233][ T4602] usb usb1-port1: attempt power cycle
[  942.709071][ T4602] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  942.919169][ T4602] usb 1-1: device descriptor read/8, error -61
[  943.189049][ T4602] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  943.359388][ T4602] usb 1-1: device descriptor read/8, error -61
[  943.480227][ T4602] usb usb1-port1: unable to enumerate USB device
05:44:02 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)

05:44:02 executing program 2:
mknod(&(0x7f0000000080)='./file0\x00', 0x8876, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fcntl$getown(r0, 0x5)

05:44:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:02 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:02 executing program 1:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

05:44:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:02 executing program 2:
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000180)={[{@max={'max', 0x3d, 0xffffffff}}], [{@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@dont_appraise}]})

05:44:02 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x19)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6)

05:44:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  944.054865][ T6265] binder: 6256:6265 ioctl c0306201 20000080 returned -14
[  944.086267][ T6265] binder: 6256:6265 ioctl c0306201 20001480 returned -14
[  944.135946][ T6266] binder: 6258:6266 unknown command 25349
[  944.158873][ T6266] binder: 6258:6266 ioctl c0306201 20001480 returned -22
05:44:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  944.183660][ T6274] binder: 6271:6274 ioctl c0306201 20000080 returned -14
[  944.197956][ T6274] binder: 6271:6274 ioctl c0306201 20001480 returned -14
05:44:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  944.309334][ T4070] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  944.362399][ T6280] binder: 6279:6280 unknown command 25349
05:44:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  944.403231][ T6280] binder: 6279:6280 ioctl c0306201 20001480 returned -22
[  944.424765][ T6283] binder: 6282:6283 unknown command 0
[  944.439890][ T6283] binder: 6282:6283 ioctl c0306201 20000080 returned -22
[  944.493812][ T6283] binder: 6282:6283 ioctl c0306201 20001480 returned -14
[  944.501185][ T3596] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  944.519337][ T4070] usb 2-1: device descriptor read/64, error 18
[  944.655757][ T6287] binder: 6285:6287 unknown command 287493
[  944.690611][ T6287] binder: 6285:6287 ioctl c0306201 20001480 returned -22
[  944.729709][ T3596] usb 1-1: device descriptor read/64, error 18
[  944.824386][ T4070] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  944.999170][ T3596] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  945.039264][ T4070] usb 2-1: device descriptor read/64, error 18
[  945.169144][ T4070] usb usb2-port1: attempt power cycle
[  945.219261][ T3596] usb 1-1: device descriptor read/64, error 18
[  945.339239][ T3596] usb usb1-port1: attempt power cycle
[  945.609265][ T4070] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  945.709267][ T4070] usb 2-1: Invalid ep0 maxpacket: 0
[  945.759194][ T3596] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  945.860165][ T4070] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  945.951465][ T4070] usb 2-1: Invalid ep0 maxpacket: 0
[  945.956857][ T4070] usb usb2-port1: unable to enumerate USB device
[  945.969332][ T3596] usb 1-1: device descriptor read/8, error -61
[  946.259186][ T3596] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  946.459159][ T3596] usb 1-1: device descriptor read/8, error -61
[  946.589184][ T3596] usb usb1-port1: unable to enumerate USB device
05:44:05 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)

05:44:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:05 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:05 executing program 2:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x246100, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18)

05:44:05 executing program 1:
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[], [{@smackfshat={'smackfshat', 0x3d, '{${/%.'}}]})

05:44:05 executing program 2:
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x2200810, &(0x7f0000000540)=ANY=[], 0x1, 0x5e95, &(0x7f000000de40)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0)
ftruncate(r0, 0x2007fff)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x0)

[  947.096142][ T6298] binder: Unknown parameter 'smackfshat'
[  947.098894][ T6293] binder: 6290:6293 unknown command 0
[  947.120941][ T6295] binder: 6289:6295 unknown command 287493
[  947.129085][ T6293] binder: 6290:6293 ioctl c0306201 20000080 returned -22
[  947.137247][ T6295] binder: 6289:6295 ioctl c0306201 20001480 returned -22
05:44:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  947.148831][ T6293] binder: 6290:6293 ioctl c0306201 20001480 returned -14
05:44:05 executing program 1:
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0)

05:44:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  947.215042][ T6303] binder: 6302:6303 unknown command 287493
[  947.221435][ T6303] binder: 6302:6303 ioctl c0306201 20001480 returned -22
[  947.261267][ T6306] binder: BINDER_SET_CONTEXT_MGR already set
[  947.286847][ T6306] binder: 6304:6306 ioctl 4018620d 20000000 returned -16
[  947.299352][ T6309] binder: 6308:6309 unknown command 0
[  947.305170][ T6309] binder: 6308:6309 ioctl c0306201 20000080 returned -22
[  947.318871][ T6309] binder: 6308:6309 ioctl c0306201 20001480 returned -14
05:44:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  947.476488][ T6314] binder: 6313:6314 unknown command 0
[  947.523162][ T6314] binder: 6313:6314 ioctl c0306201 20000080 returned -22
[  947.529055][ T4070] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  947.602705][ T6314] binder: 6313:6314 ioctl c0306201 20001480 returned -14
[  947.749032][ T4070] usb 1-1: device descriptor read/64, error 18
[  948.013775][   T27] audit: type=1800 audit(1688017446.417:364): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  948.034783][ T4070] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  948.042589][   T27] audit: type=1804 audit(1688017446.427:365): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3236451533/syzkaller.ZU1JwM/490/bus" dev="sda1" ino=1953 res=1 errno=0
[  948.093795][   T27] audit: type=1800 audit(1688017446.497:366): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  948.289074][ T4070] usb 1-1: device descriptor read/64, error 18
[  948.409671][ T4070] usb usb1-port1: attempt power cycle
[  948.839163][ T4070] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  949.049139][ T4070] usb 1-1: device descriptor read/8, error -61
[  949.319084][ T4070] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  949.489197][ T4070] usb 1-1: device descriptor read/8, error -61
[  949.619639][ T4070] usb usb1-port1: unable to enumerate USB device
05:44:08 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b0000010902460001"], 0x0)

05:44:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:08 executing program 1:
syz_clone(0xc0000000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000029c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)

05:44:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:08 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x14552, &(0x7f0000001740)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05c07001a000100000000897b2a1d84f5c7ffff00000000000067e77dc70b90bbb45efd97899a16f2df4fa2a8f069d9b047389f672eb3080000000000000065890d2d0d1b8d3d62f6d77b0283e166e2ca4c35483d3f00d6bf7da9299e6e81c96daf520300a16cab12d75a852b3e4470420877efbec0ff16cca5c680017e15f9b683e63cfff7c638bca835b33bc18c4ed0351cd285197b0241569048b5b416ba1c57217be5a338392f831637ee8c25bb2183634a33b18c4b455ab222d7060000000000665106000000a803d1b56126efec0225a5433883b0d17cb21dbfd886caf2624e7f00da0ef9893ef57c79a182dceca9c46a9f8b001e53b29c0c698ed30d8942e94ac057bde74e42021d895c22b6400000002b2c604ed73249e80f08bfdcebee7a07856a3a23e0907f3dc0eb52c40f6b21c14832dd9845ee8d8733b53acf9b2e840713cba86d43a570ee3589b7e9000000000000000000000000000000dc85131317c56465978d957d000000000000000000000000000000000000000000000000000000000000000000301171e8e3a2d0c842c20fd293c073b93f7662fad1f4ae3e1fe359aa29a4b8965229fa06b0fb2e23d2644cfbdbd6929aa42151ea48334743ad0c378641e74d55d6cd7b098599190100000055ec9c0c26b71588d6fc97e3098fb0e778be446659cf7f5e7f848d85de70c3c426a539a9a0e92e7bbf77528053dcb3b791b8e3faae507a3b721b670b06b78bb09e82ecc85a4bbc596d8ce02a2cbede5573f8bdc84d61c5634fffa50e74ec0f2da4f3d82c2d2b5a20ec152df14481c3bb59a23e014d07fc070d87f58118f468bf80283e0ce7efda7906f9c53319aef22e01a9ba5649fc10fb5b8132dcf42c47a4b79efb9f720ebd2dcc1634f870cee6201bc0ad9e17c4633a17de505bed8fded3053cb455636132bdae3239b9c8b437256ac21a49c4f03b268c47e9becbaff440728429f9e0b0222485188b745b3c871d01d27eb4e5e00bcd79b956010954a8fa16ab5629b9c40c8e044345a8", @ANYRESOCT], 0xfd, 0x11d4, &(0x7f00000024c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x0, 0x14)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, 0x0)
open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)
r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000036c0)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000d40)={0x78, 0xfffffffffffffffe, 0x0, {0x3, 0x7fffffff, 0x0, {0x0, 0x710, 0x1, 0xbe36, 0x2, 0x0, 0x1, 0x0, 0x0, 0xc000, 0x0, 0xee01, 0x0, 0x2, 0x7fffffff}}}, &(0x7f0000000dc0)={0x90, 0x0, 0x0, {0x6, 0x2, 0x0, 0x0, 0x6, 0xfffffffb, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0x5}}}, 0x0, 0x0, &(0x7f00000012c0)={0xa0, 0x0, 0x7f, {{0x0, 0x1, 0x0, 0x0, 0x60, 0x0, {0x0, 0x3, 0x200, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x321a}}}}, 0x0})
sendfile(r1, r1, &(0x7f0000000240), 0x7f06)

[  950.135683][ T6324] binder: 6321:6324 unknown command 0
[  950.158368][ T6327] binder_alloc: 6318: binder_alloc_buf, no vma
[  950.172598][ T6324] binder: 6321:6324 ioctl c0306201 20000080 returned -22
05:44:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  950.222085][ T6324] binder: 6321:6324 ioctl c0306201 20001480 returned -14
[  950.255111][ T6336] binder_alloc: 6335: binder_alloc_buf, no vma
05:44:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  950.386247][ T6338] binder: 6337:6338 unknown command 0
[  950.416843][ T6338] binder: 6337:6338 ioctl c0306201 20000080 returned -22
05:44:08 executing program 1:
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x3f, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

05:44:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  950.479788][ T6338] binder: 6337:6338 ioctl c0306201 20001480 returned -14
05:44:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  950.569398][ T6424] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  950.661189][ T6350] binder: 6347:6350 unknown command 25348
[  950.710637][ T6350] binder: 6347:6350 ioctl c0306201 20000080 returned -22
[  950.800823][ T6353] binder: 6347:6353 ioctl c0306201 20001480 returned -14
[  950.839261][ T6424] usb 1-1: Using ep0 maxpacket: 8
[  950.939193][ T4070] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  950.959305][ T6424] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  950.970112][ T6424] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  951.059175][ T6424] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  951.068633][ T6424] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  951.090525][ T6424] usb 1-1: Manufacturer: syz
[  951.099721][ T6424] usb 1-1: config 0 descriptor??
[  951.343736][ T3596] usb 1-1: USB disconnect, device number 36
[  951.370806][ T4070] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64
[  951.389048][ T4070] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  951.709296][ T4070] usb 2-1: string descriptor 0 read error: -22
[  951.715571][ T4070] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40
[  951.739007][ T4070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.769591][ T6349] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  951.801596][ T4070] usbhid 2-1:1.0: can't add hid device: -22
[  951.807610][ T4070] usbhid: probe of 2-1:1.0 failed with error -22
05:44:10 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b0000010902460001"], 0x0)

05:44:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:10 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

05:44:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:10 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:10 executing program 2:
syz_clone3(&(0x7f0000000240)={0x20084000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58)

[  951.895717][ T6359] binder: 6356:6359 unknown command 25348
[  951.932398][ T6359] binder: 6356:6359 ioctl c0306201 20000080 returned -22
05:44:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  951.978858][ T6359] binder: BINDER_SET_CONTEXT_MGR already set
[  952.015266][ T4602] usb 2-1: USB disconnect, device number 16
[  952.076911][ T6366] binder: 6356:6366 ioctl c0306201 20001480 returned -14
[  952.102630][ T6359] binder: 6356:6359 ioctl 4018620d 20000000 returned -16
[  952.126255][ T6370] binder: 6368:6370 ioctl c0306201 0 returned -14
05:44:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  952.189721][ T6516] usb 1-1: new high-speed USB device number 37 using dummy_hcd
05:44:10 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20)

[  952.322083][ T6373] binder: 6372:6373 unknown command 25348
[  952.339771][ T6373] binder: 6372:6373 ioctl c0306201 20000080 returned -22
[  952.362100][ T6373] binder: 6372:6373 ioctl c0306201 20001480 returned -14
[  952.439195][ T6516] usb 1-1: Using ep0 maxpacket: 8
05:44:10 executing program 1:
add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @desc1}, &(0x7f0000001280)={0x0, "3ef551d91af10bfa135c6192c328c904869a10545cbb0f41e9a14d4624aa5104b7bc15459adaec2cb19c49c6d16c878cf67d113b79f169be1b604fc04bfd8bc1"}, 0x48, 0xfffffffffffffffb)

05:44:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

05:44:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  952.559162][ T6516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  952.576439][ T6378] binder: 6376:6378 ioctl c0306201 0 returned -14
[  952.588191][ T6379] binder: 6377:6379 unknown command 287492
[  952.592291][ T6516] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  952.629378][ T6379] binder: 6377:6379 ioctl c0306201 20000080 returned -22
[  952.699445][ T6516] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  952.713519][ T6516] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  952.722172][ T6516] usb 1-1: Manufacturer: syz
[  952.733345][ T6379] binder: BINDER_SET_CONTEXT_MGR already set
[  952.762425][ T6516] usb 1-1: config 0 descriptor??
[  952.808488][ T6382] binder: 6377:6382 ioctl c0306201 20001480 returned -14
[  952.826382][ T6379] binder: 6377:6379 ioctl 4018620d 20000000 returned -16
[  953.018638][ T4602] usb 1-1: USB disconnect, device number 37
05:44:11 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)='q', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000280)="87", 0x1}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000680000000000000029000000360000003309000000000000fa4b32eecf95d869178394b06b636935f5aae9eca137cede50db613ba0a83027ecaf404a4181cbde5753a8458358502da12d18f688fc426f6f858649bdb535cca46c0af8f940c5b52b3da33fa700000068000000000000002900000039000000000a020800000000fe80000000000000000000000000002eff01000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000320000000000000000000000000000000020"], 0x288}}], 0x2, 0x41)

05:44:11 executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)="18a0ae9e98008f73856b41ba8753342690e1b06c9298a0a5062da6345f102811bc97e4739af3697a60341f9809d64f0417ceca9ffc07e9fe3906ab5f2d87e9ef777f637fff1acdbcfde9b0c5193c1e9ba843a3d86ca2607083fc31a94828bba0431452090177382d7bc7f319b841", 0x6e}}, 0x0)

05:44:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

05:44:11 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b0000010902460001"], 0x0)

05:44:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:11 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x12, 0x0, 0x0, 0x0, {[@nop={0x2}, @fastopen={0x22, 0x5, "241ea7"}, @md5sig={0x13, 0x12, "2c75fdf02d214f654aa0e4003751752d"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0)

[  953.578371][ T6387] binder: 6386:6387 ioctl c0306201 0 returned -14
[  953.587731][ T6390] binder: 6383:6390 unknown command 287492
[  953.607077][ T6390] binder: 6383:6390 ioctl c0306201 20000080 returned -22
05:44:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

05:44:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:12 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

[  953.653191][ T6390] binder: 6383:6390 ioctl c0306201 20001480 returned -14
05:44:12 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r0}, 0x0)

05:44:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  953.765651][ T6405] binder: 6403:6405 unknown command 287492
05:44:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0)

[  953.807035][ T6405] binder: 6403:6405 ioctl c0306201 20000080 returned -22
[  953.859064][ T6516] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  953.872663][ T6405] binder: 6403:6405 ioctl c0306201 20001480 returned -14
05:44:12 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x29}, 0x0)

05:44:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  954.061060][ T6417] binder: BINDER_SET_CONTEXT_MGR already set
[  954.076656][ T6417] binder: 6416:6417 ioctl 4018620d 20000000 returned -16
[  954.119316][ T6516] usb 1-1: Using ep0 maxpacket: 8
[  954.239259][ T6516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  954.259999][ T6516] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  954.359304][ T6516] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  954.377276][ T6516] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  954.402574][ T6516] usb 1-1: Manufacturer: syz
[  954.409573][ T6516] usb 1-1: config 0 descriptor??
[  954.653687][   T26] usb 1-1: USB disconnect, device number 38
05:44:13 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e01"], 0x0)

05:44:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:13 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000001c0)='G', 0x1}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000680000000000000029000000360000003309000000000000fa4b32eecf95d869178394b06b636935f5aae9eca137cede50db613ba0a83027ecaf404a4181cbde5753a8458358502da12d18f688fc426f6f858649bdb535cca46c0af8f940c5b52b3da33fa700000068000000000000002900000039000000000a020800000000fe80000000000000000000000000002eff01000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000320000000000000000000000000000000020"], 0x288}}], 0x1, 0x0)
getsockname$packet(r0, 0x0, &(0x7f00000000c0))

05:44:13 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0)

05:44:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})

05:44:13 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:13 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x0, "082e6a76eebe3d29b33a361ca576381329214507b0fc07dface82790d8d2a8e25ca898a95396f304aace75568f2db620a4ae341ae0c722e20e94eab2f4b75ba2"}, 0x48, 0xfffffffffffffffe)
pipe2(&(0x7f0000001b00)={<r1=>0xffffffffffffffff}, 0x0)
read$watch_queue(r1, &(0x7f0000000040)=""/61, 0x3d)
add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, r0)

05:44:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})

[  955.217061][ T6429] binder: 6418:6429 ioctl c0306201 20001480 returned -14
05:44:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})

[  955.386203][ T6441] binder: 6440:6441 ioctl c0306201 20001480 returned -14
05:44:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

[  955.509257][   T26] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  955.544204][ T6445] binder: 6444:6445 ioctl c0306201 20001480 returned -14
[  955.779147][   T26] usb 1-1: Using ep0 maxpacket: 8
[  955.909209][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  956.009311][   T26] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  956.018419][   T26] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  956.027272][   T26] usb 1-1: Manufacturer: syz
[  956.053232][   T26] usb 1-1: config 0 descriptor??
[  956.110664][   T26] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  956.117531][   T26] usb 1-1: No valid video chain found.
[  956.313837][ T3596] usb 1-1: USB disconnect, device number 39
05:44:15 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e01"], 0x0)

05:44:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:15 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x88602, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@target={'target ', {'PCI:', '11', ':', '1b', ':', '1c', '.', '1f'}}, 0x17)

05:44:15 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:15 executing program 2:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)={0x0})

05:44:15 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00')
read$FUSE(r0, 0x0, 0x1f)

05:44:15 executing program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
fgetxattr(r0, &(0x7f0000001e40)=@known='trusted.overlay.upper\x00', 0x0, 0x0)

[  956.892770][ T6456] binder: BINDER_SET_CONTEXT_MGR already set
05:44:15 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x202000, 0x0)

05:44:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

05:44:15 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0xc)

[  956.939339][ T6456] binder: 6448:6456 ioctl 4018620d 20000000 returned -16
[  956.974755][ T6456] binder: 6448:6456 ioctl c0306201 20001480 returned -14
05:44:15 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  957.162260][ T6475] binder: BINDER_SET_CONTEXT_MGR already set
[  957.183017][ T6475] binder: 6474:6475 ioctl 4018620d 20000000 returned -16
[  957.201021][ T6475] binder: 6474:6475 ioctl c0306201 20001480 returned -14
[  957.209423][ T6516] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  957.449399][ T6516] usb 1-1: Using ep0 maxpacket: 8
[  957.592640][ T6516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  957.679211][ T6516] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  957.688257][ T6516] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  957.700180][ T6516] usb 1-1: Manufacturer: syz
[  957.711738][ T6516] usb 1-1: config 0 descriptor??
[  957.754253][ T6516] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  957.761268][ T6516] usb 1-1: No valid video chain found.
[  957.952259][ T3596] usb 1-1: USB disconnect, device number 40
05:44:16 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e01"], 0x0)

05:44:16 executing program 2:
r0 = semget(0x0, 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0xff94, 0x1800}], 0x1)

05:44:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}}], 0x0, 0x0, 0x0})

05:44:16 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80141, 0x174)

05:44:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:16 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:16 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fstat(r0, &(0x7f0000000040))

05:44:16 executing program 1:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

05:44:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}}], 0x0, 0x0, 0x0})

[  958.511149][ T6484] binder: BINDER_SET_CONTEXT_MGR already set
[  958.543956][ T6484] binder: 6476:6484 ioctl 4018620d 20000000 returned -16
05:44:17 executing program 2:
r0 = inotify_init1(0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

05:44:17 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_pid(r0, 0x0, 0x8)

05:44:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, 0xffffffffffffffff)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  958.620863][ T6484] binder: 6476:6484 ioctl c0306201 20001480 returned -14
[  958.804154][ T6502] binder: BINDER_SET_CONTEXT_MGR already set
[  958.853319][ T6502] binder: 6501:6502 ioctl 4018620d 20000000 returned -16
[  958.869189][ T4602] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  958.877760][ T6503] binder: 6501:6503 ioctl c0306201 20001480 returned -14
[  959.109193][ T4602] usb 1-1: Using ep0 maxpacket: 8
[  959.229392][ T4602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  959.319430][ T4602] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  959.328590][ T4602] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  959.337076][ T4602] usb 1-1: Manufacturer: syz
[  959.345533][ T4602] usb 1-1: config 0 descriptor??
[  959.394466][ T4602] usb 1-1: Found UVC 0.00 device <unnamed> (06d3:97d4)
[  959.401379][ T4602] usb 1-1: No valid video chain found.
[  959.592615][ T4602] usb 1-1: USB disconnect, device number 41
05:44:18 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ff"], 0x0)

05:44:18 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x162042, 0x19f)

05:44:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}}], 0x0, 0x0, 0x0})

05:44:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0xe94, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17c2796e12bc386e98562b1e353a3bc9e07ce085207340e836013562e3db6375"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d8c3641da01fe41148c96483252c1d05cc14f22ce958cfe42f12a2c353b93b4f"}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31858e45303288a1e9d52ccdd9c10be0ea4c7e24faa151d54194c706e9107181"}]}, {0x3cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}]}, {0x39c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x370, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x368, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d2ab519aa2e1c7ae2b9b47ddd0bdc3a71992d735c1c820bfcf694b616acf3fab"}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xec4}}, 0x0)

05:44:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, 0xffffffffffffffff)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:18 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:18 executing program 1:
syz_open_procfs$namespace(0x0, 0x0)
socket(0x25, 0x0, 0x7ff)

05:44:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, 0x0}}], 0x0, 0x0, 0x0})

05:44:18 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000600))
syz_open_procfs$namespace(0x0, &(0x7f0000001e80)='ns/mnt\x00')

[  960.174702][ T6514] binder: BINDER_SET_CONTEXT_MGR already set
[  960.199104][ T6514] binder: 6511:6514 ioctl 4018620d 20000000 returned -16
05:44:18 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000640), 0x10)

05:44:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, 0xffffffffffffffff)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  960.266299][ T6514] binder: 6511:6514 ioctl c0306201 20001480 returned -14
05:44:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

[  960.327808][ T6526] binder: BINDER_SET_CONTEXT_MGR already set
[  960.334206][ T6526] binder: 6525:6526 ioctl 4018620d 20000000 returned -16
[  960.342733][ T6526] binder: 6525:6526 ioctl c0306201 20001480 returned -14
[  960.409158][ T3596] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  960.472289][ T6533] binder: 6532:6533 ioctl c0306201 20001480 returned -14
[  960.669035][ T3596] usb 1-1: Using ep0 maxpacket: 8
[  960.829147][ T3596] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.923535][ T3596] usb 1-1: New USB device found, idVendor=06d3, idProduct=97d4, bcdDevice= 0.00
[  960.932763][ T3596] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0
[  960.944558][ T3596] usb 1-1: Manufacturer: syz
[  960.951195][ T3596] usb 1-1: config 0 descriptor??
[  961.194919][ T3596] usb 1-1: USB disconnect, device number 42
05:44:20 executing program 0:
syz_usb_connect(0x0, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000036ee3808d306d49700002b00000109024600010000000009040000000e010000082403ff"], 0x0)

05:44:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)

05:44:20 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "de47fb88"}]}}}]}, 0x54}}, 0x0)

05:44:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, 0x0}}], 0x0, 0x0, 0x0})

05:44:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r1, r0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup2(r2, r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @clear_death], 0x0, 0x1000000, 0x0})

05:44:20 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, r5, &(0x7f0000000240)='./file0\x00')
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

05:44:20 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f65db48964960de73d5e09a881ffed6c565813"})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, "b485d453c2863de9c484d1e20fe39a6847aba8"})

05:44:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fda={0x73682a85}, @fd, @fda={0x77622a85}}, 0x0}}], 0x0, 0x0, 0x0})

[  961.761879][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  961.775477][ T6543] binder: 6534:6543 ioctl c0306201 20001480 returned -14
05:44:20 executing program 2:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1a2, &(0x7f0000000440)="$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")
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10103e, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)

[  961.861315][ T6550] 
[  961.863663][ T6550] =====================================================
[  961.870594][ T6550] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  961.878059][ T6550] 6.1.36-syzkaller #0 Not tainted
[  961.883083][ T6550] -----------------------------------------------------
[  961.890040][ T6550] syz-executor.1/6550 [HC0[0]:SC0[2]:HE1:SE0] is trying to acquire:
[  961.898050][ T6550] ffffffff8d0001e0 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook+0x2a/0x2a0
[  961.907217][ T6550] 
[  961.907217][ T6550] and this task is already holding:
[  961.914590][ T6550] ffffffff8e0db448 (noop_qdisc.q.lock){+.-.}-{2:2}, at: netem_change+0x17e/0x1ea0
[  961.923886][ T6550] which would create a new lock dependency:
[  961.929779][ T6550]  (noop_qdisc.q.lock){+.-.}-{2:2} -> (fs_reclaim){+.+.}-{0:0}
[  961.937374][ T6550] 
[  961.937374][ T6550] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  961.946823][ T6550]  (noop_qdisc.q.lock){+.-.}-{2:2}
[  961.946852][ T6550] 
[  961.946852][ T6550] ... which became SOFTIRQ-irq-safe at:
[  961.959657][ T6550]   lock_acquire+0x1f8/0x5a0
[  961.964281][ T6550]   _raw_spin_lock+0x2a/0x40
[  961.968946][ T6550]   net_tx_action+0x752/0x970
[  961.973661][ T6550]   __do_softirq+0x2e9/0xa4c
[  961.978434][ T6550]   do_softirq+0x162/0x240
[  961.982891][ T6550]   __local_bh_enable_ip+0x1b1/0x1f0
[  961.988176][ T6550]   dev_deactivate_many+0x3b4/0xaf0
[  961.993378][ T6550]   dev_deactivate+0x177/0x270
[  961.998145][ T6550]   linkwatch_do_dev+0x104/0x160
[  962.003133][ T6550]   __linkwatch_run_queue+0x448/0x6b0
[  962.008504][ T6550]   linkwatch_event+0x48/0x50
[  962.013180][ T6550]   process_one_work+0x8aa/0x11f0
[  962.018304][ T6550]   worker_thread+0xa5f/0x1210
[  962.020513][ T4602] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  962.023059][ T6550]   kthread+0x26e/0x300
[  962.034727][ T6550]   ret_from_fork+0x1f/0x30
[  962.039234][ T6550] 
[  962.039234][ T6550] to a SOFTIRQ-irq-unsafe lock:
[  962.046250][ T6550]  (fs_reclaim){+.+.}-{0:0}
[  962.046276][ T6550] 
[  962.046276][ T6550] ... which became SOFTIRQ-irq-unsafe at:
[  962.058617][ T6550] ...
[  962.058623][ T6550]   lock_acquire+0x1f8/0x5a0
[  962.065753][ T6550]   fs_reclaim_acquire+0x83/0x120
[  962.070813][ T6550]   slab_pre_alloc_hook+0x2a/0x2a0
[  962.075906][ T6550]   __kmem_cache_alloc_node+0x47/0x260
[  962.081346][ T6550]   kmalloc_trace+0x26/0xe0
[  962.085863][ T6550]   alloc_workqueue_attrs+0x46/0xc0
[  962.091039][ T6550]   wq_numa_init+0x122/0x4b0
[  962.095638][ T6550]   workqueue_init+0x22/0x59d
[  962.100297][ T6550]   kernel_init_freeable+0x40a/0x61f
[  962.105563][ T6550]   kernel_init+0x19/0x290
[  962.109994][ T6550]   ret_from_fork+0x1f/0x30
[  962.114490][ T6550] 
[  962.114490][ T6550] other info that might help us debug this:
[  962.114490][ T6550] 
[  962.124698][ T6550]  Possible interrupt unsafe locking scenario:
[  962.124698][ T6550] 
[  962.132995][ T6550]        CPU0                    CPU1
[  962.138358][ T6550]        ----                    ----
[  962.143717][ T6550]   lock(fs_reclaim);
[  962.147682][ T6550]                                local_irq_disable();
[  962.154416][ T6550]                                lock(noop_qdisc.q.lock);
[  962.161509][ T6550]                                lock(fs_reclaim);
[  962.167994][ T6550]   <Interrupt>
[  962.171430][ T6550]     lock(noop_qdisc.q.lock);
[  962.176174][ T6550] 
[  962.176174][ T6550]  *** DEADLOCK ***
[  962.176174][ T6550] 
[  962.184302][ T6550] 2 locks held by syz-executor.1/6550:
[  962.189746][ T6550]  #0: ffffffff8e094968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00
[  962.199152][ T6550]  #1: ffffffff8e0db448 (noop_qdisc.q.lock){+.-.}-{2:2}, at: netem_change+0x17e/0x1ea0
[  962.208814][ T6550] 
[  962.208814][ T6550] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  962.219200][ T6550] -> (noop_qdisc.q.lock){+.-.}-{2:2} {
[  962.224666][ T6550]    HARDIRQ-ON-W at:
[  962.228627][ T6550]                     lock_acquire+0x1f8/0x5a0
[  962.234769][ T6550]                     _raw_spin_lock+0x2a/0x40
[  962.240902][ T6550]                     __dev_queue_xmit+0xd50/0x3c90
[  962.247516][ T6550]                     tx+0x66/0x100
[  962.252695][ T6550]                     kthread+0x234/0x440
[  962.258409][ T6550]                     kthread+0x26e/0x300
[  962.264113][ T6550]                     ret_from_fork+0x1f/0x30
[  962.269849][ T4602] usb 1-1: Using ep0 maxpacket: 8
[  962.270157][ T6550]    IN-SOFTIRQ-W at:
[  962.279298][ T6550]                     lock_acquire+0x1f8/0x5a0
[  962.285430][ T6550]                     _raw_spin_lock+0x2a/0x40
[  962.291570][ T6550]                     net_tx_action+0x752/0x970
[  962.297789][ T6550]                     __do_softirq+0x2e9/0xa4c
[  962.304014][ T6550]                     do_softirq+0x162/0x240
[  962.309970][ T6550]                     __local_bh_enable_ip+0x1b1/0x1f0
[  962.316797][ T6550]                     dev_deactivate_many+0x3b4/0xaf0
[  962.323538][ T6550]                     dev_deactivate+0x177/0x270
[  962.329848][ T6550]                     linkwatch_do_dev+0x104/0x160
[  962.336334][ T6550]                     __linkwatch_run_queue+0x448/0x6b0
[  962.343253][ T6550]                     linkwatch_event+0x48/0x50
[  962.349480][ T6550]                     process_one_work+0x8aa/0x11f0
[  962.356050][ T6550]                     worker_thread+0xa5f/0x1210
[  962.362369][ T6550]                     kthread+0x26e/0x300
[  962.368072][ T6550]                     ret_from_fork+0x1f/0x30
[  962.374125][ T6550]    INITIAL USE at:
[  962.378001][ T6550]                    lock_acquire+0x1f8/0x5a0
[  962.384095][ T6550]                    _raw_spin_lock+0x2a/0x40
[  962.390146][ T6550]                    __dev_queue_xmit+0xd50/0x3c90
[  962.396632][ T6550]                    tx+0x66/0x100
[  962.401769][ T6550]                    kthread+0x234/0x440
[  962.407380][ T6550]                    kthread+0x26e/0x300
[  962.412995][ T6550]                    ret_from_fork+0x1f/0x30
[  962.418964][ T6550]  }
[  962.421450][ T6550]  ... key      at: [<ffffffff8e0db448>] noop_qdisc+0x108/0x320
[  962.429104][ T6550] 
[  962.429104][ T6550] the dependencies between the lock to be acquired
[  962.429111][ T6550]  and SOFTIRQ-irq-unsafe lock:
[  962.442617][ T6550] -> (fs_reclaim){+.+.}-{0:0} {
[  962.447459][ T6550]    HARDIRQ-ON-W at:
[  962.451418][ T6550]                     lock_acquire+0x1f8/0x5a0
[  962.457556][ T6550]                     fs_reclaim_acquire+0x83/0x120
[  962.464128][ T6550]                     slab_pre_alloc_hook+0x2a/0x2a0
[  962.470784][ T6550]                     __kmem_cache_alloc_node+0x47/0x260
[  962.477784][ T6550]                     kmalloc_trace+0x26/0xe0
[  962.483828][ T6550]                     alloc_workqueue_attrs+0x46/0xc0
[  962.490569][ T6550]                     wq_numa_init+0x122/0x4b0
[  962.496706][ T6550]                     workqueue_init+0x22/0x59d
[  962.502926][ T6550]                     kernel_init_freeable+0x40a/0x61f
[  962.509758][ T6550]                     kernel_init+0x19/0x290
[  962.515717][ T6550]                     ret_from_fork+0x1f/0x30
[  962.521770][ T6550]    SOFTIRQ-ON-W at:
[  962.525733][ T6550]                     lock_acquire+0x1f8/0x5a0
[  962.531869][ T6550]                     fs_reclaim_acquire+0x83/0x120
[  962.538446][ T6550]                     slab_pre_alloc_hook+0x2a/0x2a0
[  962.545103][ T6550]                     __kmem_cache_alloc_node+0x47/0x260
[  962.552108][ T6550]                     kmalloc_trace+0x26/0xe0
[  962.558152][ T6550]                     alloc_workqueue_attrs+0x46/0xc0
[  962.564904][ T6550]                     wq_numa_init+0x122/0x4b0
[  962.571048][ T6550]                     workqueue_init+0x22/0x59d
[  962.577269][ T6550]                     kernel_init_freeable+0x40a/0x61f
[  962.584101][ T6550]                     kernel_init+0x19/0x290
[  962.590067][ T6550]                     ret_from_fork+0x1f/0x30
[  962.596117][ T6550]    INITIAL USE at:
[  962.599999][ T6550]                    lock_acquire+0x1f8/0x5a0
[  962.606054][ T6550]                    fs_reclaim_acquire+0x83/0x120
[  962.612539][ T6550]                    slab_pre_alloc_hook+0x2a/0x2a0
[  962.619114][ T6550]                    __kmem_cache_alloc_node+0x47/0x260
[  962.626048][ T6550]                    kmalloc_trace+0x26/0xe0
[  962.632005][ T6550]                    alloc_workqueue_attrs+0x46/0xc0
[  962.638756][ T6550]                    wq_numa_init+0x122/0x4b0
[  962.644810][ T6550]                    workqueue_init+0x22/0x59d
[  962.650951][ T6550]                    kernel_init_freeable+0x40a/0x61f
[  962.657695][ T6550]                    kernel_init+0x19/0x290
[  962.663571][ T6550]                    ret_from_fork+0x1f/0x30
[  962.669536][ T6550]  }
[  962.672013][ T6550]  ... key      at: [<ffffffff8d0001e0>] __fs_reclaim_map+0x0/0xe0
[  962.679936][ T6550]  ... acquired at:
[  962.683732][ T6550]    lock_acquire+0x1f8/0x5a0
[  962.688393][ T6550]    fs_reclaim_acquire+0x83/0x120
[  962.693924][ T6550]    slab_pre_alloc_hook+0x2a/0x2a0
[  962.699105][ T6550]    __kmem_cache_alloc_node+0x47/0x260
[  962.704629][ T6550]    __kmalloc_node+0xa2/0x230
[  962.709380][ T6550]    kvmalloc_node+0x6e/0x180
[  962.714096][ T6550]    get_dist_table+0x91/0x380
[  962.718840][ T6550]    netem_change+0x947/0x1ea0
[  962.723585][ T6550]    netem_init+0x58/0xb0
[  962.727892][ T6550]    qdisc_create+0x8a1/0x1220
[  962.732669][ T6550]    tc_modify_qdisc+0x9e0/0x1da0
[  962.737676][ T6550]    rtnetlink_rcv_msg+0x776/0xf00
[  962.742769][ T6550]    netlink_rcv_skb+0x1cd/0x410
[  962.747727][ T6550]    netlink_unicast+0x7bf/0x990
[  962.752647][ T6550]    netlink_sendmsg+0xa26/0xd60
[  962.757561][ T6550]    ____sys_sendmsg+0x59e/0x8f0
[  962.762511][ T6550]    __sys_sendmsg+0x2a9/0x390
[  962.767256][ T6550]    do_syscall_64+0x3d/0xb0
[  962.771839][ T6550]    entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  962.777896][ T6550] 
[  962.780205][ T6550] 
[  962.780205][ T6550] stack backtrace:
[  962.786072][ T6550] CPU: 0 PID: 6550 Comm: syz-executor.1 Not tainted 6.1.36-syzkaller #0
[  962.794734][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[  962.804773][ T6550] Call Trace:
[  962.808039][ T6550]  <TASK>
[  962.810961][ T6550]  dump_stack_lvl+0x1e3/0x2cb
[  962.815629][ T6550]  ? nf_tcp_handle_invalid+0x642/0x642
[  962.821079][ T6550]  ? panic+0x75d/0x75d
[  962.825130][ T6550]  ? print_shortest_lock_dependencies+0xee/0x150
[  962.831464][ T6550]  validate_chain+0x4d2e/0x58e0
[  962.836301][ T6550]  ? reacquire_held_locks+0x660/0x660
[  962.841657][ T6550]  ? reacquire_held_locks+0x660/0x660
[  962.847012][ T6550]  ? validate_chain+0x115/0x58e0
[  962.851932][ T6550]  ? unwind_next_frame+0x1a3f/0x2220
[  962.857213][ T6550]  ? mark_lock+0x9a/0x340
[  962.861523][ T6550]  __lock_acquire+0x125b/0x1f80
[  962.866357][ T6550]  lock_acquire+0x1f8/0x5a0
[  962.870840][ T6550]  ? slab_pre_alloc_hook+0x2a/0x2a0
[  962.876021][ T6550]  ? read_lock_is_recursive+0x10/0x10
[  962.881373][ T6550]  ? __lock_acquire+0x125b/0x1f80
[  962.886377][ T6550]  fs_reclaim_acquire+0x83/0x120
[  962.891298][ T6550]  ? slab_pre_alloc_hook+0x2a/0x2a0
[  962.896475][ T6550]  slab_pre_alloc_hook+0x2a/0x2a0
[  962.901482][ T6550]  ? kvmalloc_node+0x6e/0x180
[  962.906138][ T6550]  __kmem_cache_alloc_node+0x47/0x260
[  962.911492][ T6550]  ? kvmalloc_node+0x6e/0x180
[  962.916154][ T6550]  __kmalloc_node+0xa2/0x230
[  962.920724][ T6550]  kvmalloc_node+0x6e/0x180
[  962.925204][ T6550]  get_dist_table+0x91/0x380
[  962.929776][ T6550]  netem_change+0x947/0x1ea0
[  962.934349][ T6550]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  962.940316][ T6550]  ? netem_destroy+0xb0/0xb0
[  962.944901][ T6550]  ? do_raw_spin_unlock+0x137/0x8a0
[  962.950087][ T6550]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  962.955958][ T6550]  ? lockdep_hardirqs_on+0x94/0x130
[  962.961146][ T6550]  ? memset+0x1f/0x40
[  962.965157][ T6550]  ? __hrtimer_init+0x181/0x260
[  962.970008][ T6550]  netem_init+0x58/0xb0
[  962.974146][ T6550]  ? qdisc_peek_dequeued+0x220/0x220
[  962.979414][ T6550]  qdisc_create+0x8a1/0x1220
[  962.983988][ T6550]  ? __mutex_lock_common+0x1578/0x2520
[  962.989430][ T6550]  ? qdisc_notify+0x390/0x390
[  962.994175][ T6550]  tc_modify_qdisc+0x9e0/0x1da0
[  962.999019][ T6550]  ? rcu_lock_release+0x20/0x20
[  963.003858][ T6550]  ? rcu_lock_release+0x20/0x20
[  963.008684][ T6550]  rtnetlink_rcv_msg+0x776/0xf00
[  963.013603][ T6550]  ? print_irqtrace_events+0x210/0x210
[  963.019057][ T6550]  ? rtnetlink_bind+0x80/0x80
[  963.023721][ T6550]  ? __local_bh_enable_ip+0x164/0x1f0
[  963.029074][ T6550]  ? local_bh_enable+0x5/0x20
[  963.033730][ T6550]  ? _local_bh_enable+0xa0/0xa0
[  963.038558][ T6550]  ? __dev_queue_xmit+0x177a/0x3c90
[  963.043747][ T6550]  ? netdev_core_pick_tx+0x320/0x320
[  963.049017][ T6550]  ? ref_tracker_free+0x638/0x7d0
[  963.054063][ T6550]  ? memcpy+0x3c/0x60
[  963.058025][ T6550]  ? refcount_inc+0x80/0x80
[  963.062509][ T6550]  netlink_rcv_skb+0x1cd/0x410
[  963.067252][ T6550]  ? rtnetlink_bind+0x80/0x80
[  963.071910][ T6550]  ? netlink_ack+0xe60/0xe60
[  963.076481][ T6550]  netlink_unicast+0x7bf/0x990
[  963.081232][ T6550]  ? netlink_detachskb+0x90/0x90
[  963.086150][ T6550]  ? __virt_addr_valid+0x22b/0x2e0
[  963.091247][ T6550]  ? __phys_addr_symbol+0x2b/0x70
[  963.096253][ T6550]  ? __check_object_size+0x4dd/0xa30
[  963.101665][ T6550]  ? bpf_lsm_netlink_send+0x5/0x10
[  963.106782][ T6550]  netlink_sendmsg+0xa26/0xd60
[  963.111534][ T6550]  ? netlink_getsockopt+0x5b0/0x5b0
[  963.116709][ T6550]  ? aa_sock_msg_perm+0x91/0x150
[  963.121655][ T6550]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  963.126944][ T6550]  ? security_socket_sendmsg+0x7d/0xa0
[  963.132430][ T6550]  ? netlink_getsockopt+0x5b0/0x5b0
[  963.137609][ T6550]  ____sys_sendmsg+0x59e/0x8f0
[  963.142368][ T6550]  ? __sys_sendmsg_sock+0x30/0x30
[  963.147391][ T6550]  __sys_sendmsg+0x2a9/0x390
[  963.152066][ T6550]  ? ____sys_sendmsg+0x8f0/0x8f0
[  963.156991][ T6550]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  963.163132][ T6550]  ? syscall_enter_from_user_mode+0x2e/0x220
[  963.169095][ T6550]  ? lockdep_hardirqs_on+0x94/0x130
[  963.174272][ T6550]  ? syscall_enter_from_user_mode+0x2e/0x220
[  963.180243][ T6550]  do_syscall_64+0x3d/0xb0
[  963.184645][ T6550]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  963.190521][ T6550] RIP: 0033:0x7f1595e8c389
[  963.194927][ T6550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  963.214616][ T6550] RSP: 002b:00007f1596caa168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  963.223025][ T6550] RAX: ffffffffffffffda RBX: 00007f1595fac050 RCX: 00007f1595e8c389
[  963.231079][ T6550] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000003
[  963.239043][ T6550] RBP: 00007f1595ed7493 R08: 0000000000000000 R09: 0000000000000000
[  963.246996][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.254956][ T6550] R13: 00007fff230b577f R14: 00007f1596caa300 R15: 0000000000022000
[  963.262920][ T6550]  </TASK>
[  963.265993][ T6550] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274
[  963.275442][ T6550] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6550, name: syz-executor.1
[  963.284802][ T6550] preempt_count: 201, expected: 0
[  963.289833][ T6550] RCU nest depth: 0, expected: 0
[  963.294755][ T6550] INFO: lockdep is turned off.
[  963.299605][ T6550] Preemption disabled at:
[  963.299611][ T6550] [<0000000000000000>] 0x0
[  963.308310][ T6550] CPU: 0 PID: 6550 Comm: syz-executor.1 Not tainted 6.1.36-syzkaller #0
[  963.316616][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[  963.326652][ T6550] Call Trace:
[  963.329915][ T6550]  <TASK>
[  963.332846][ T6550]  dump_stack_lvl+0x1e3/0x2cb
[  963.337526][ T6550]  ? nf_tcp_handle_invalid+0x642/0x642
[  963.342980][ T6550]  ? panic+0x75d/0x75d
[  963.347036][ T6550]  ? rcu_is_watching+0x11/0xb0
[  963.351855][ T6550]  __might_resched+0x5cb/0x780
[  963.356645][ T6550]  ? __might_sleep+0xb0/0xb0
[  963.361222][ T6550]  slab_pre_alloc_hook+0x4a/0x2a0
[  963.366235][ T6550]  ? kvmalloc_node+0x6e/0x180
[  963.370914][ T6550]  __kmem_cache_alloc_node+0x47/0x260
[  963.376272][ T6550]  ? kvmalloc_node+0x6e/0x180
[  963.380930][ T6550]  __kmalloc_node+0xa2/0x230
[  963.385509][ T6550]  kvmalloc_node+0x6e/0x180
[  963.390008][ T6550]  get_dist_table+0x91/0x380
[  963.394590][ T6550]  netem_change+0x947/0x1ea0
[  963.399176][ T6550]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  963.405155][ T6550]  ? netem_destroy+0xb0/0xb0
[  963.409729][ T6550]  ? do_raw_spin_unlock+0x137/0x8a0
[  963.414910][ T6550]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  963.420788][ T6550]  ? lockdep_hardirqs_on+0x94/0x130
[  963.425971][ T6550]  ? memset+0x1f/0x40
[  963.429950][ T6550]  ? __hrtimer_init+0x181/0x260
[  963.434790][ T6550]  netem_init+0x58/0xb0
[  963.438928][ T6550]  ? qdisc_peek_dequeued+0x220/0x220
[  963.444211][ T6550]  qdisc_create+0x8a1/0x1220
[  963.448872][ T6550]  ? __mutex_lock_common+0x1578/0x2520
[  963.454329][ T6550]  ? qdisc_notify+0x390/0x390
[  963.459007][ T6550]  tc_modify_qdisc+0x9e0/0x1da0
[  963.463855][ T6550]  ? rcu_lock_release+0x20/0x20
[  963.468694][ T6550]  ? rcu_lock_release+0x20/0x20
[  963.473524][ T6550]  rtnetlink_rcv_msg+0x776/0xf00
[  963.478441][ T6550]  ? print_irqtrace_events+0x210/0x210
[  963.483881][ T6550]  ? rtnetlink_bind+0x80/0x80
[  963.488538][ T6550]  ? __local_bh_enable_ip+0x164/0x1f0
[  963.493889][ T6550]  ? local_bh_enable+0x5/0x20
[  963.498544][ T6550]  ? _local_bh_enable+0xa0/0xa0
[  963.503378][ T6550]  ? __dev_queue_xmit+0x177a/0x3c90
[  963.508558][ T6550]  ? netdev_core_pick_tx+0x320/0x320
[  963.513824][ T6550]  ? ref_tracker_free+0x638/0x7d0
[  963.518918][ T6550]  ? memcpy+0x3c/0x60
[  963.522902][ T6550]  ? refcount_inc+0x80/0x80
[  963.527486][ T6550]  netlink_rcv_skb+0x1cd/0x410
[  963.532234][ T6550]  ? rtnetlink_bind+0x80/0x80
[  963.536890][ T6550]  ? netlink_ack+0xe60/0xe60
[  963.541476][ T6550]  netlink_unicast+0x7bf/0x990
[  963.546240][ T6550]  ? netlink_detachskb+0x90/0x90
[  963.551164][ T6550]  ? __virt_addr_valid+0x22b/0x2e0
[  963.556266][ T6550]  ? __phys_addr_symbol+0x2b/0x70
[  963.561284][ T6550]  ? __check_object_size+0x4dd/0xa30
[  963.566562][ T6550]  ? bpf_lsm_netlink_send+0x5/0x10
[  963.571657][ T6550]  netlink_sendmsg+0xa26/0xd60
[  963.576407][ T6550]  ? netlink_getsockopt+0x5b0/0x5b0
[  963.581599][ T6550]  ? aa_sock_msg_perm+0x91/0x150
[  963.586519][ T6550]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  963.591784][ T6550]  ? security_socket_sendmsg+0x7d/0xa0
[  963.597227][ T6550]  ? netlink_getsockopt+0x5b0/0x5b0
[  963.602407][ T6550]  ____sys_sendmsg+0x59e/0x8f0
[  963.607159][ T6550]  ? __sys_sendmsg_sock+0x30/0x30
[  963.612176][ T6550]  __sys_sendmsg+0x2a9/0x390
[  963.616749][ T6550]  ? ____sys_sendmsg+0x8f0/0x8f0
[  963.621675][ T6550]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  963.627644][ T6550]  ? syscall_enter_from_user_mode+0x2e/0x220
[  963.633717][ T6550]  ? lockdep_hardirqs_on+0x94/0x130
[  963.638908][ T6550]  ? syscall_enter_from_user_mode+0x2e/0x220
[  963.644910][ T6550]  do_syscall_64+0x3d/0xb0
[  963.649324][ T6550]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  963.655214][ T6550] RIP: 0033:0x7f1595e8c389
[  963.659622][ T6550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  963.679211][ T6550] RSP: 002b:00007f1596caa168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  963.687606][ T6550] RAX: ffffffffffffffda RBX: 00007f1595fac050 RCX: 00007f1595e8c389
[  963.695561][ T6550] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000003
[  963.703515][ T6550] RBP: 00007f1595ed7493 R08: 0000000000000000 R09: 0000000000000000
[  963.711469][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.719421][ T6550] R13: 00007fff230b577f R14: 00007f1596caa300 R15: 0000000000022000
[  963.727375][ T6550]  </TASK>