last executing test programs:

6.400029952s ago: executing program 1 (id=17):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x0, 0x3, 0x1c, 0x0, 0x0, 0x40007, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket(0x8000000010, 0x2, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x600241, 0x8f)
getdents64(r7, &(0x7f0000000240)=""/160, 0xa0)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'vlan1\x00', 0x1800})
ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async)
dup(r3) (async)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x0, 0x3, 0x1c, 0x0, 0x0, 0x40007, 0x0}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket(0x8000000010, 0x2, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x600241, 0x8f) (async)
getdents64(r7, &(0x7f0000000240)=""/160, 0xa0) (async)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'vlan1\x00', 0x1800}) (async)
ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async)

6.399676002s ago: executing program 1 (id=18):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000002080)={{}, "43dd53bd0289f9e8f42b3f7f5c4a8169466f68ba3af598441c2457d6da41d283b0a6900ba8599c8f63d788fb5169d5b1ff4c427905080c61aac2588c696e12d60df6f92637c29ba17b056c58734438e58ba0d57fbddf106e0cd40485bbd94290f4d38176ed4cc3427b58c15fb1ca67f56c003d2d5916692f0fc559be5ded222476ffb50255482fd2f22e227f653deb17095b9a85d1e72527eba0021215c830c8832982e4177c649eabea3fb88beaf88c79200f0143898c4f3e8320919b063ef322942426108f6886e5487d16f162e099d961672209945e457243b52f1cad39e7f903d714e80f2f64b27fb33de17803d1aae0ef8c2f1f82c4d8d4f7110b48df444787c17bba2d30bb172d61dbc177f924dbdecae6361b5b5fb75cafaed11f971c189435a241a0f7dd1165c792f4f4b46361422efcaffcfb1fc06cce25ced795cc4a22926c995265b46165bd49f85952be0c6cbd06b789194150abb46afd6fee8306ecc80f1f99208a9a115cc5e03805dda371c78e5b9f51a66d06a400d7febc8b3fda814cd5112988d4d5db1913c2b1f097384885f630ce74ee4f60813ef67013430b9b3aeef6074d3707aba223356593690d40edeca012c8a742fd49fee400226c184c32cdf718ff1c9addf29d64e4fe22c5ac168b13e0e98790e97d28c523bb3357aef797b3c662912a9d82ae9979d3cd7b45302f2b36083a3b7181771bf58c62e4cb91ca615c9abd5ce292844e500964a65e9dddd195071f1e129b22be5acf029e342bc0f34a3206e77765eb4ea278223687ba6fca86995833f30ed08a722191c883d02c78ec32ddd452fc9d3c0cb91ddf3ea9cfe4b92364e8ddf0ac3a11959c6029c08fb0710e6d8f2a10b57fd834f26fa60305b8de3daff2e73706b3bbb683347d6fe7f82fb57df501f669adafbcd782548755e272d44b2c6144872598bee7905e7f4892d24a7a5aa8d3c677dbfbb3188b5819fe6513213b8d667b65c55a66ea832d3ab0e38d2168a1ae1466da6c22aa46a548362627c476583ae0c0895afdd8c8015fbae6d317aa0f4eba13dd2c17cddc7fdebcdbb102943db24bdf61fcfc505f5dac93cae1f379f3fd6c6fa86ead72e60e1a57b19b1dddee7d99c342739d88cc6e2c45587a4f9d3504fd0357343169c03ec01f39bd75bb17941324359b7bf94b70c99f2f38190b70d586d45c1c028055b2f0af3cc406d5e65d447c815440df5af8d700a0d050c5c39f67a55eec74664760dbea10296a1d3dfb304d9bf1c92811e8a4fc95f0a37685dc2cbb161df8b2302c6ce318f0214c1bd0cdff79fadf6aefeddabb96d43909765a9ed9e4a52ba497150862d422f52ec5a642b4fae2e77c28aaf23a8800257e016e9e804369cb2d79dfcd8c565094c56879add1f11947a4f61bb672bffbfd9f8f6cfc92b12092455ebe322d2fd423772c4e442a262138b208ca76e50912b9ae3660e8b172cb0a3c3e4cfdbe5c7124f0c3f2e26c921587f9a4b3063356cd35fad08ce27dc16538499e58820d2ee00b381a5dca20be8b8bdf6057f28682cae7133ec52d8cf80316c1297a9b00a869748b8ce7f07b60be01cd121f134d49f921e9686aab9585e5fa9f7c38ca6c07bfef6361e65dc274618aa9920854261d1610e282284ad2c5bd2751e381b32a95ed23968456679edda8e67b835da55915f6c47348b80cdab997da1d13bed194defbbc17f92295af6f8005556526c57a7041b11f3e7b251be9ed518e802d62d07737f20db608215a37c79d499d61d8fc41d34695bbd2275d8dc99c9b2c4cfe29460a275fe41791945198b1f1c5a6500478a92fcb4af2c52026d93ac30b21c9dcf92b4e4614b1c6ae0bd9b68e6979fce14c7ddac69fd758bcd9b5bfce9eedea2c5b1b448e35b14c6bd8be3e004bfd1368e0458b1a86d570a84dd658685e3f14cd38845e24c68aa48f89f453761ed50e66e29be36888f85799ea0d30e7dc2c76c5e867d70f67012ded08236dc70ea97d23e7575d24675ee9b5f6a5cb4be752278de392d22776954d7f6e41b773c1ad21e263aef8936b0a2ac4bbdf283b2e730de11d1bcbaad08c348d2efa773516eabf71652ec17fb660c8f49be3e74db54111d5a4da5eef1b6fc8c00cb21563762429f8c11aae77eae2c338772f79ce750a44f0ec6220616689d2a1576c338b89070794fd80139eb982f1753a7c3d4806cd0824276dd8f5718da7c0020d56626dfe5c51dc1eaa4fb4b3320917d7062f6e37055332e04342404ca849d62159b6ea5560aa2758bbd3fa3143fd8b6b049cbf7e2b423d03bdb769cb0096c985896032d5251de0f1329585ae3b175b933091c31c946ad8068ba65a6a65e9af7206d59be260cd921e62a79b497eef53416d0c1f90b6ac03f2907881327fa84082852ca3d9d9a957cba610eda42245838402e0ed5dadc94cd839857b5c868b82bcad3a5a42c157da3f0533157c21ba732899f46de157c6315491226513223d56268d79550a672eecb5bce11765418d7e3304f9e5294ebee5e4b132ce5180a1e05dabfc2c1a6359e7b1d6681973648b39318a474a5b9be590b9970cc04f3160f640d2a26fcc487866d98d177097a890ad549cd68fd0cfd389cf2c6158d50d69d0b520a490463446267876fe1567aa361272bc8602e87ea6b44fb7a0eb8bc694953d5cc9430f82a3ec6dcf08aa2eeb267003489482fbb11e492e3747464c5c47f011229a0abffde1e8b2cd2a7db2263f9e6e40a5c3860fbbe9d7ac9758e8b456ad9141b90a32f997f28e0d174ef2dacd7e98eae36bb7a7112eb6f06c9a9234ab39d6fb21b6fbc48f642f40c27ed2f67098b3a48a67d107a9beb24e6c34436a2adee1efa79eeb043f1e8f79f9814fc819e2217174cc7c974bc1bedd337665e5afcf35a7c6a6060cb26dde781d3df8153b800998d97039fc8175b25ca7f54e019385b166a03209cd001351394d6d8943cc44dd8d88e480a2ec53c5c8a9863858b443c3b812fab8c890ee374716431b0d85994a8496afd43720a947dadc88e70901a346fd468d097d7c26c8ed7122dc010011d38663974b34aa11c562419551efee34c666b693de4d8e3df37eecfb7955741ef74090d10f122fc12bf40d7726fcfd60f8252bfa23303614a4aaa7c89ce540c2b12d00373675369baf4676e24e88a45207f91db990d48702614b751ad6a98f3f6968be3e4b669c95f0d59a2ce3bba5e29f89406dc89e99c82059eab5b332bd6b4bed0f3755970832ae07fa2b01f7089b684d144ea526ef1667cecad798aa6834d216942453cf598aa763f37ac38398f82e43f31b3290d7c07ae67223170974bc1fa5d4818ad0fe55a5749f6190c699f2d256e2924caf8ea110a6e00fc8c6d6e848bc9d3c4977ae74a06a1568c4bdeee24547b0b1122e1ed27faff44fed7242332d8e48a129ee0d36bed5adc0543df740e376f52fdfc49b839fdcd2d93ee29c42d09df58762b2d75e6954d6c108e3262a3f9bd1d7055639a8382a0a75215d0f6f1d7e271379c9e586cc4595338e307b7d1e7b7010bada61a46bb8f0a5ce75f9a89b9c7c196aaf1eb63aa992c1771d99a06104737e3b2c4e4e631b534d53225a1423444cc67c83887175b8b2d3690ae04ead05f84131ec8a963fc555ec06ce75a1854cb9cbf6b655a606d3695d0b44e43f30f3cc90e8e23389ca69e1c571341c4c9db9abc423db4f890fe61bb58e41e755abc744bf86c9ee8dce9ef6ee2aa9a9bb6446235f2997704c7e431c45f478950c8f0e62a349fce58cecbda70e7e003ef77b1fb8eaad94a3d12e27a5435180f8f39acec1516e2a025f6f0c4337042082d5cd6b5a76d1cc18604b48630b31f22660fbe398ae50f2a10fa58098f2cf8e7c71aed54aa60e26ff808315b2f17e2300566d630c3190f5f0ae733d6772358e414e038112bc4564ec2606ac4d4294bca9c00e522f5b67f9ec113526a40c17eb3c90e0f2d583906bee794370927a49508252394e3f70f7b3972d1b1c804eb8a9cc927cae3c2eb667873addb6a8a475ab217d9ba2054aa07db9b7f17cee3f069a834ea7ee3117f68478235f6596c4811617bbd5dd267363bda470e3fa9bcee84bad3343bbff99578efb9c95c9caf7e6334411097895c88518aed71b491bb5f05dad68222432b672a2868cefe0386a9117f86c3a6f3aea7b85541eb7a14bbc4cc53c18996e504c216d7fa7d30f6dd3fd9e13542baffda625606e29062c572bd108db6e1d9820e126fe674279bbe85dafbd71c2b85f875dd42df87f3077659f64c0572ee4b50436209e2bae8421febbaf2cce25c5f9b1f281e0e78b03d9868b2531ff7a5d03d9910e3e5756660ce8acef3e167b2cb1c9dbd9ca1326a44de6b4d758c0a0d16162b83add396472b1500f7f3426ea0decbef608180cf2f2cd5b76196f53bd1917bc70fabe34f360843e655ca03ae5521b6c6d4445d2db3fb2b2e9e7db2b3a0022a4a3f7eb2e192895cd05d8c99a5a383bfc3085e2253b62ebb6d1c65cd5ca5dc2448b7fdbbfb5ab85a626f9d59cdd5befb41a98a62c51f6d0a5a99fae639626e6345dc6ca0e6404d257d9fe341be8dfdd2ed61510fa4e46c9fd987ca65a789b4f0e273e95adec6d23714ca367146b7c803b69dd0b8a530020c9665dedb4ece1704a35f178fe27a7d6bab6205cb4f1fca607726023fd9bbac75803dc32019c901f6f83bf9a4033d466e4b77e4b92fa5ef6b22983af4dfcd6fffeb83b6cafc5517757d702d94b973b563f64d8d8ae2e03de93f2ad2a8bada1d924859ec1832a6c20a9035bf43f129f4010f033c32f610f49732369e7d0691a0490565199311bd7289efdd932bf164cd12dfb3a6a2d648940939b578f184936a9e486aea55b1608756ab3970d1c02f10b8f2c7ce7d9706d620de4093992b1319ac4adc17d2344cb8d07ab9f10ca8bb68c9526c0b66939734d5a981b6a3af15fa0a13f25ab685ea3de76866511ad901710c1e4cbc1b763f031189440ec6dc93688d962a950cf378faf36ae0c64987a34388b5b7d565aef5c1c5ac5ba4696b6c8f292077b5c744d604cf228dfe0cbd0aa289a55a2f0862d4b8ec694e32dc347602b91b6bf5ab9af927ed7d828eaf2c6b8be5cae76ac2e6724d8d42c05fb597b0ea1f6a3252f0693e40714b491d9d90fcea095d4b26de648231d132be4438042ec25cc3522323e8d65e9da8161c03d377503b1809468145dcda00477c8ed59636432860554fb0affc6ebf8cd7891f38bfb86b863bbd5906903c76b73cba4000fd04d82a99bcfa5f38829d207a23e2df33570ff214efc62765f38fb4bf172ec093e69757d02ebf16a5b17f05184498363872ca57a09c006a19aa00efc688a4c0f7bcee28740a18b142634bd9770ffa1194eddafd337462d2b2744cacf5438b58e4bd9e22a09e1ec80d6907a2090c9aa9b8920cc913c9744542a8e220838da2e119aa8c017fbfc68217d5ab5052a911a306bd178351dd4c53630cee8b5e3b23ef2e78125ba9c2b990fd86e0ec6a404220052c9571600d9210239eb7a74d78e7594d726a37106b409766892a0d2c5247654a9d0dd4b80b42d9c8317125e31afbd143674bbecec442d66d524780651138495baa3965edd03290edd5adea6f8043e9564200b56243ffffc8aaccbc6680ab69f4fe13eb56dcb31b43cfc4c3bee73a747f7c6c751ba7f173a9efd35d47eb08838db6b65b0e830507aabeeb348e09c93b90c6cb3541f64d60e160553a609848d3e1b0bfa5e6f1911f8773319c6d102b0d3b3138a70505a8bf9b82eef69e01fc36c1a"})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

5.488020086s ago: executing program 1 (id=29):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080))
r4 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r4)
syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) (async)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10)
listen(r5, 0x0) (async)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r7 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={0x0, 0x3, 0xa}) (async)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={<r9=>0x0, 0x3, 0xa})
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000c80)={0x4, 0x6, {0x6, @struct={0x7, 0x401}, 0x0, 0xf, 0xd7, 0xaf40, 0x5, 0x7, 0x80, @struct={0x1000, 0xd}, 0x1c00, 0xd9, [0x8, 0x0, 0x81, 0x1, 0xfffffffffffffffa, 0xfffffffffffffff7]}, {0x1, @struct={0x0, 0x6}, r8, 0x125d, 0x0, 0x71b4b948, 0x10, 0x7, 0x4, @usage=0x3fb, 0x6, 0x1ff, [0x2, 0xe57, 0x1, 0x1ff, 0x6, 0x2]}, {0x9, @usage=0xa894, r9, 0x100, 0x3, 0xf3, 0x1ff, 0x2, 0x0, @usage=0x1, 0x2fc4, 0x3, [0x839, 0x1, 0x8, 0x3c, 0x10000, 0x401]}, {0x80, 0x7fffffffffffffff, 0x6}})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902})
ioctl$TUNSETVNETHDRSZ(r10, 0x800454e0, &(0x7f0000000140))
sendto(r7, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) (async)
recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
writev(r6, &(0x7f0000000440)=[{&(0x7f0000000240)='I', 0x1}], 0x1)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
personality(0x1000000)
ioctl$BLKRRPART(r11, 0x125f, 0x0)
socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) (async)
socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0))

4.748063856s ago: executing program 0 (id=36):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x62040200)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109083, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

4.529676884s ago: executing program 0 (id=37):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434)
close_range(r0, 0xffffffffffffffff, 0x0)

4.444413341s ago: executing program 0 (id=38):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x3032, r0, 0x8aeb4000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x21, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
r4 = socket(0xa, 0x1, 0x3a) (async)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) (async)
r6 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca201020301000212000100000000090400000081387f00"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, 'Qe'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = userfaultfd(0x80001) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0xfffffffd}, 0xc) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="400f01310f2205c442e8f34c30072e440f01c4430f015eea42de08c744240002000000c74424022e000000ff2c2466b81e018ed80f01cf430f001b", 0x3b}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040))

2.396996596s ago: executing program 2 (id=49):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
socket(0x0, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000700)=0x1b0, 0x4)
sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015)
setsockopt$sock_int(r1, 0x1, 0x33, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1}, 0x2}], 0x1, 0x2002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072081f03000500000000", 0x39}], 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

2.306799703s ago: executing program 1 (id=50):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
setresuid(0xffffffffffffffff, 0x0, 0xee01)
listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/100, 0x64)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x0)
r9 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000061616161"], 0x48, 0xfffffffffffffffe)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @a}, 0x0, r9})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)

2.253359348s ago: executing program 2 (id=52):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xf)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
setfsgid(0xee00)
r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
unshare(0x44040200)
socket$igmp6(0xa, 0x3, 0x2)
recvmsg(0xffffffffffffffff, 0x0, 0x10020)
rmdir(&(0x7f00000003c0)='./cgroup/../file0/../file0\x00')
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800441, 0x0)
syz_open_procfs(r3, &(0x7f0000000180)='net/unix\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fadvise64(r0, 0xf, 0x3, 0x1)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.133655397s ago: executing program 1 (id=53):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0) (async)
keyctl$read(0xb, r1, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/softnet_stat\x00')
fchdir(r5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0xbc, r7, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "180cebc2b9"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fe3df41452"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "6064f0e4aa9dc6d72a39c3e2a1"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "03fb61fa706f48a4e03a8ef7f5"}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002bbd7000ffdbdf2531000000080001003700000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00R\x00', @ANYRES32=r4, @ANYBLOB="0bae4c35b8f5bd968957b7b50d568372a9b68b2d54d788690a6e728532a20ea038fe3899c05baf59f4d5991fe06175208ca57e2812710cdf4095d94d84d543ff84ed82867dfcd730cb2ec9e0ce5acd2ae17329dfb0b10b084fcc5e1accf73c14bc73c761831441c41d67a0366ebf2f19bdd744e172970fe4b0ee640b9a1c9f7ee035b8ed0eac60d330c80738316e492c7a713ae3a7a7808063f28c04eab6b9b54fff06dd848e82d6"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4008080)

2.045169285s ago: executing program 2 (id=55):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x88a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778c000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778c000)
r1 = eventfd(0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x5)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c0015"], 0xc4}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0)
fchdir(r7) (async)
fchdir(r7)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1020, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1020, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x8) (async)
read$eventfd(r1, &(0x7f0000000040), 0x8)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.439299054s ago: executing program 1 (id=57):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000000c0)={0x7ffb})
ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000200))
ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f0000000400))
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0xa, 0x1, 0x6f, 0x40, 0x2a39, 0x3f8c, 0x9424, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x34, 0x0, 0xff, 0x12, 0x1a}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000084, 0x0, 0xfffffffffffffffb}]})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f00000001c0))

1.352043261s ago: executing program 0 (id=58):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0xfffffffffffffd2d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x13, r1, 0x80000000)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f000001f580)={0x1, 0x2})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17)
lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0x4c, 0x2c, ""/44}, &(0x7f0000000000)=0x4c, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) (async)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0xfffffffffffffd2d) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x13, r1, 0x80000000) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f000001f580)={0x1, 0x2}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) (async)
lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0x4c, 0x2c, ""/44}, &(0x7f0000000000)=0x4c, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)

1.229831391s ago: executing program 0 (id=59):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = signalfd(r0, &(0x7f0000000000)={[0xb]}, 0x8)
ioctl$RTC_UIE_OFF(r1, 0x7004)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2000, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000dc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\x1au\xc1\nG%(.\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18\xe6\v\x00\x00=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\t\x00\x00\x00\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00'/712)

1.11995362s ago: executing program 0 (id=61):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30408000000000000000902240001000040b109040000010300010009210101000122050009058103df030c0000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x3, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x3ff, 0x8000009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x91, 0x82, 0xc, 0x4, 0x80000000, 0x242, 0x7, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x10001, 0x4, 0x2, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0xc, 0x4, 0x10001, 0x40], [0x10000009, 0x800009, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x10001, 0xc8, 0xf9, 0xe, 0x8e, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x8, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4dd, 0x2, 0x4, 0xb, 0x0, 0xb, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x6, 0xfe000000, 0x9, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x8007, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x4, 0x303c, 0x1, 0xb, 0x5, 0x4, 0x2, 0x1, 0x20000008, 0x4, 0x2, 0xd74, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x400803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7fff, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xffffffef, 0x6bd8490e, 0x100, 0x10000, 0x5, 0x7fff, 0x40, 0xa61e, 0x6, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x8, 0x100, 0x9602, 0x200007, 0xaf, 0xb, 0x6, 0x229, 0x4, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x74886000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.104072951s ago: executing program 3 (id=62):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4300fede1545c91a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x1010, r1, 0x45808000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BLKRRPART(r2, 0x125f, 0x0)

1.086671542s ago: executing program 2 (id=63):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1a0d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/217, 0xd9}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/25, 0x19}, {&(0x7f0000000900)=""/8, 0x8}, {&(0x7f0000000940)=""/112, 0x70}], 0x8, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x3f, 0x3f8a8102398b2df0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000700)="b8010000000f01c10fc7be57f60000b8010000000f01d90f090f01cf0f01dc400f01f8410f3066bad104edb9800000c00f3235000100000f30", 0x39}], 0x1, 0x76, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1a0d) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/217, 0xd9}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/25, 0x19}, {&(0x7f0000000900)=""/8, 0x8}, {&(0x7f0000000940)=""/112, 0x70}], 0x8, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x3f, 0x3f8a8102398b2df0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000700)="b8010000000f01c10fc7be57f60000b8010000000f01d90f090f01cf0f01dc400f01f8410f3066bad104edb9800000c00f3235000100000f30", 0x39}], 0x1, 0x76, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async)

936.088984ms ago: executing program 3 (id=64):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00')
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f00000003c0)={0x1, 0x0, 0xfffffeca}, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)
creat(&(0x7f0000000040)='./file0\x00', 0x20)

912.729916ms ago: executing program 3 (id=65):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="bf174f91de179d0ed381f99a2881ac53ebe6a0b09345e538b72617bd3ec6097b27af", 0x22}, {&(0x7f0000000100)="848d0723644e6d59d0f06b18b69499073523fa9afb3430d2a36f0b54c7bf695710155bd1f98ea4846fc7d931e0ac46808e91ab2315fb21a17aecdf3874e129aa1fc7600e5ca8655a4dcebc6651e2b0d64303", 0x52}], 0x2)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

768.862788ms ago: executing program 3 (id=66):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000240)='./file0\x00', 0xd)
r2 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x100000)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000800)={r1, 0x6d4, {0x0, 0x0, 0x0, 0x0, 0x17c, 0x0, 0x0, 0x15, 0x18, "b13b706ce34d59202bf896f4441656598e3bf0b6ee13e175052fa30af662dcd95307a9f613e4d6862b87069f5ffe63756e6c0bfc340a43d9eb49aa44efce506e", "49288955990033d2763cad465367d9e1f606353c1ce77b7e6ebad9eabecd51a4130254e1000263809fe5ad200d3b991dbf0000000000000087cb726f256531e3", "df416e18399908cbe3be2b474902588da98994f0ecc9624560f51f29a925f711", [0x4, 0xfffffffffffffff9]}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000440)="0f01c40f01cf0f01f5ba420066b8c3dacce766ef66b9b10100000f320f0158d10f0766b9570a000066b80600000066ba000000000f300f01d10f00560e", 0x3d}], 0x1, 0xbb, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x8802)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"])
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}]}})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x2c, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10)
write(r11, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24)
r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = syz_pidfd_open(r12, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r13, 0x8008f513, &(0x7f0000000000))
sendmmsg$inet6(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r8, r0, 0x0, 0x80000000)

460.064113ms ago: executing program 3 (id=67):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0x4, 0x4) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe5444000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003ae000/0x400000)=nil)
madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
clock_gettime(0x4, &(0x7f00000004c0))
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async)
recvfrom$inet(r0, &(0x7f00000003c0)=""/186, 0xba, 0x120, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc8040, 0x0) (async)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r4, 0x40187013, &(0x7f0000000040)) (async)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

422.112356ms ago: executing program 3 (id=68):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c059c0b0000000000010902240001008c99b109040000020300010009210101000132050009058103"], 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000080)={0x4, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write(r1, &(0x7f0000002400)="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", 0x1000)

116.761121ms ago: executing program 2 (id=69):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x90)
ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) (async)
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/162, 0xa2) (async)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000140)) (async)
write$P9_RREADDIR(r0, &(0x7f0000000180)={0xe4, 0x29, 0x1, {0xb026, [{{0x10, 0x1, 0x6}, 0x52fc, 0x1, 0x7, './file0'}, {{0x10, 0x3, 0x1}, 0x8eb, 0xe, 0x7, './file0'}, {{0x20, 0x2, 0x8}, 0x4, 0xff, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x2, 0x5b, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x7fff, 0x35, 0x7, './file0'}, {{0x1, 0x4, 0x4}, 0x526, 0x96, 0x7, './file0'}, {{0x4, 0x6, 0x7}, 0x80, 0x3, 0x7, './file1'}]}}, 0xe4)
r1 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x2, 0x100)
symlinkat(&(0x7f0000000280)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00') (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x7) (async)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x4, 0xbd, [0xd2, 0x1ad60000000000, 0x3, 0x5, 0x37eb, 0xa], 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/189}, &(0x7f0000000540)=0x78)
syz_clone3(&(0x7f0000002940)={0x10000100, &(0x7f0000002700), &(0x7f0000002740)=<r2=>0x0, &(0x7f0000002780), {0x4}, &(0x7f00000027c0)=""/10, 0xa, &(0x7f0000002800)=""/215, &(0x7f0000002900)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) (async)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002b40)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002c40)=0xe8) (async, rerun: 64)
read$FUSE(r0, &(0x7f0000002c80)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020) (async, rerun: 64)
r5 = geteuid()
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000004e80)=<r6=>0x0) (async, rerun: 32)
stat(&(0x7f0000004ec0)='./file1\x00', &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}) (async, rerun: 32)
r8 = getgid()
r9 = geteuid() (async)
r10 = getgid() (async)
stat(&(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async)
read$FUSE(r1, &(0x7f0000005040)={0x2020, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
fstat(r1, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}) (async)
statx(r1, &(0x7f0000007100)='./file0\x00', 0x6000, 0x800, &(0x7f0000007140)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}) (async, rerun: 64)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000076c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000077c0)=0xe8) (rerun: 64)
newfstatat(0xffffffffffffff9c, &(0x7f0000007800)='./file1\x00', &(0x7f0000007840)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x4000) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000079c0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000007ac0)=0xe8)
syz_fuse_handle_req(r1, &(0x7f0000000580)="2b74db5a12f82122cfb8eb018ebbecd893ecf9cc21d059bb6e1a7d2209430ca42e258266a74b3ca33c403bb10cda82e55d691411a2f4709821080b452aaa73e04eca5e66f5c5ae9d676a157c0ad85c51ae352a96b08e2be727c0bfeff19a0f74e565c39da7d0d95c9e0c8a697874231f3f573a87dfaa16f107970636de15ab52a9251891c2d08ecdac21c1bf4da13b683101f749281104a8dcc558f2ff61cab934d28be7713bd53a55ce479b57c18284e9696bc0258e698002741cbd6d78a2b28c98827714022423622d2929ff949dbd16b06373cc782185c337304c5eac0019a4f22c559d294c24cce8ed2e5066a10bcbc23c561079af8f0fdceb0ab3bf473431a9d08496352cd25328dd21d0f09333a11aff4c6c10e02fe30e19cc46398732df41f8c6247bc0360f14e6fa7fcd1f46ae8542643fe78644d9a86d29745e89396147911be4f03766094a790779fcb5e69c2c520143f7a7ffa6ab65ffb49c72a975c629bd56ad26a2b19582fde0d70679b0eb8d8e68f8789558928ae2db9d553a4f4f00daf1c73fbbaabecae82055153646ce393d387486ab95ba97cc331f69ff13cbd97041b6fe6d8226be08b3711a8844459726d11e58fb99f54ecfd010071ee4549e785af2f3ff975c0d1296c76a45f74aab9837a38af3c77f3330bc642e36f7e40574aaa056fffca9c053c746b9cf501854f7518e6aa594555d5ec203dd3e1781f110fdf4aa2e873b2fe272b6563733f31b4ced79ba19dcda27cfba473580bb0b5595bf1db9c6769f817253799a39c88aaf6d10ba797ff3787c9e788c2e11dd11e86dbc91c4c6461d43341fb29e33ecc0a7dfd935de9e9b0936461eaaa4e15a778665fa641977b791acf4baa17406966e934b8db06895bd2fb78c40ec7c349e335234d9a49bb4d6944497bd5d83b3a46361a3cf626061c3b604f49394366401a5352e02e611ed15ab37a2a48f7017353d6189fe6c9e252d4215b0a3c2e600ed08e23ef6ab7bf607245fc743f32f46761edc7e2270e3fb979e92ec284219146b0fdb6e69c5713614883e80d1f7cc6038ee2d2d86ae4833c4559cc0b59100eea2db00c63326c9c073dcf1b4204588c6a88242169e6674ada3a4f89d5b1469e2cfb56b2f4e119c1c460503276458044b311e7f220de1a27dfda6ebe01f54933e2cf4e04d975dde4567e1a6cc051997fad31a68f9e66c20d4a33127f6f467e6cfddbd453d15050832c7792a0636b1de46fb59c3f375db93fc86d15ef32d42d454478e35b8c64de678a9a429365a60332abae198921c60e8755d43beb8f64697e4fb357e459307c969ac3dbe7df0497ad29053a77826aae6b8987baaeb3e1639e5de5ffab836250f50bab03ff587aa3c97ec7b974a366e41d48992063a65992e7e9676f9ce45622c8eb96186b3423d7960e3a44d14e2ef7106f1ac54719f3af7df2c125f6fe4841bcb59835e4f31d01945333902d2e58b2162b6c2abc1c427646c1b47fa9c0992660c09b1b78f64c65a602d7b4ea2d3d805639b7935bf8b938ffc30369229c364e19f26befab326d824e45781ec31db0103739bc44069d0e258af7bc42b65ed919aa80fd21499ac4a9e1ac3f80a32b7cf1fe40cef49e54d6b32995151ee82102fa10a9b0743b26dc87b9ddef6fc46723fccdaf02542a1c38971113ca34f5424e0262e93a078de6b957984a5a215587b71a66473e284dc28952ad54916b9a1dc3f229e4a4570648db21cd05372aa87689fbacc7f723c80e203dfdaca3eb071efd2231868cd29c398e84cd2e2f719c930a6c3ef45be55194778a17a0518d350fbf3dd86b2284ef9010f522d1c8e9b5edc82aa490d6f34021217d1074e1677f87d60822886158aefb5f36dda8bf7c51d0ced8dfdaa9b9ddfd17ddac57009e9b768440f1aebdafa07b758f3c8eb5d6319d80b98a5f4c27eb04527c7c6c057471f57a4c2774f8d7960ae58a90031bddbcacc623e3e4d076f70ae162d6ed02f28584454ec65e91016ad3e52b763b7d174fc64b2ac9fb187e762070006a792bf4393a4518534bc97f247bb5b83442ba49d35c045b4ca60ba976d4552655742eae02a5e83a46dde9de9ba8e06db262f0c092e7c703ca86fa9399ea76207645e892a71d54f186370a8a897e0152e9abc62d1ccd1d747805b2785200a30cc4708613dacd0fa0f6f2d033b4662c24a32ceac91f9fae1ac76025c148c103bf4318c1746d283ebd264f94c64bbac4eaebd82e561ae67bf340bbb8d50ef88e372045185c60b7f387b475f314ee01d4adebd69bd1dcba7d94b01c6404c9942af371fda4acd489df4d7f1295312af805f6cfb00c2292dab7807783afa4e3d8712c5c5482c59e55c326f47ef0496d33608765ae91ed2fc3149b788df1fd0a240cd4ee7994afb37614552d35dac3b0e3b2be45e287ff01f95a8c421f9fc00c22a130afe0957098bc75bedc39c755444b7e46c28504c1d98f97d67b05c27833626c09f2d781d8f1a5e1e7bd7b0b35ba66622ffe65a5bcf9db1a2290989b34a6c2052266b3d0bb7f5acf806db21d406f0b583b471ea1db9b81e765f8252b1df63dc8d989448874e6e381c80f6bc73c1a13f2c0b48a3379faf723db852d636cd47bf8c2979fc325650808bd79dd9e551e9d7d5b654fc6a4ef6b14328c005b54a9658bfc5e3d63d0d18bf8460fd29153a4ea995dc54ad76a8a9cb473ee4615d5525c75166ba1278bba78d2da18e8ec5e90331f5ed51bc0d4a66d2ea2f19e38de3675111cee663d2d63a404163a362d92787fa34953945fd64d343f9eb4696dc5c803503f2a5b5709f48c4571f14ae725caf1bd3143cbce521d5ed05993bcb0be5035ae4523d5878a561ece5e251c073d5c189de2457feec1af4cc0bbe2c5f981562a66dc991a59eee73ee36d6e5a07bfa05c7a396520fdb41773a61c26795b8414b421adbf75ccb47173bc2e43d203b6c6d69b7b3c7a152b6cade75c5f09ff511680446916ad1cea874fe8aa129fa7fceae5dee26e6dccdfe2828c80b32c55f055b19a41dbfb539171ef1c0b356c441fbad59a3f19390673608fa6bfa635a3da24a899dc6686bf4482b949eac3831c6190274760ee9a074262266c2395c1cdeb472e7a3fa3ed68318c99f4e328e4a326d01b22fce38a4819e7d148c422ae4af73693632546f84124602c81aeb159aa98bdcdfa2fef267df9d4ac1cbd05a0efcafe4c1e1985c6916ca7e085c4d893f61df1c0cd03f3c5b2a74d6aaa36ec2719016168fd8c5bea2f9237c391edf1cd99aa6518e8bcbf21096be841bb357cfe2a13e2519d2a2a0aa196608d328255edceafdf830af432b4379634194a3724165a472922e09e52be4316c14e95a4c75a3fa9b778b032decc5a16c591728932adc44ebee00845964f193c3ab202ea32d07cb50badfce1507dc6ef1369550430508a4a4d73bf137391aded56f247b61b7d61cdfe17795e66aa00ba3ba684cf0826ffe0dd98e9eef0b1cf7c4a6ad3d6012426dc78c479ef7f6a9247aca0dc70e374395c8c6c07813a475b1995d0175896b3f1efd1cfe128702e52cbb114907fe4c72efce532d465c106a22872b7863595e1ff800e0daaf325569b37c9c693776301723c9312ddab7a30e3165b5170e47d09c9818104a25120bbc06cd6776246575f8351adc5480308162afdf82db3bc706423f505af92d0f5f86cbef530d6d63f06ac2ed57dd83ec9ba4e8da4f2777f433b43a65fb705360e417ff253920a787ac0db95d42e55595d38ab4155a90ed0e34a5d74ab39297d7693f320bfd0de29539e6481793d5bac572d324862df8798e634074120e8feeb8d98cd1a8b4e4e96b01ace784e32808ffb8384880a2450a75ea023dad6bc7b584ccd91b1fed6fb970257147c9e131655dad2fc1426b8bc01ed3783f43226ab10ba30babb994c9fcd8e4a9e16887bac57bf2f62e5850aff63f2f138cf243c93c30fd849145ededb1c0753cd46be884d5ed08d8827d1bea9bc6c16285247c61fc135b24adaf7a4159382c800f024f439f94961e020896816139ff1e8411fa7e52739861fffaa04dab96d603f123123b928978755049f7b05af6a3514adef9281cbf48c618bf85f3953a65c4ca51f5d4361102de3b7c5e58ffc36046b40aebceb147a6694938310ee8bdf0d5e4fc638634378182a53bde2632417223e341474218e608eb36661bd06bbaf307b2064017751a9d0af9e5920e315f0ffb485f10e756f4c559a4a297cbd834522fee2badef2119755f9cc73f1c12e778f0c101a8af476d3a1b21f7d8bccec526771d177e13a2eb2681e11ade0f2bb4af0089c3df1da02f1bfe9ae9c19da079ae2e206681e1b9484cf44938f32b4dc402e30461b2867bcb962c524d8ae3f9d20a562b4ce4f474a1880cbe0bb0efcbc5784b7e2b0162caa17ac2da14529d7faeacefedd73f41db63debae82a7203a70ab5ce03d2fec16de7f32cf1edb22f268b0ec61b7b0cd4dfbfcd7a2bced6933b66d6fedcdb9b1ae642cd08aca2f282be74bc9561915e6cff32a95648cb146cd5eeff2f263ef5909593bd4c71f9494b8922ac34113a1eca2fb48af1c6858d93c59f6f2e6dae7793775a319d2f32053996dd6dc8598b44657c297f796eff3285d90cda2979a2be44c68a59a86b9ad422b24ccdc00854d76375b9405fa24fef514a32069a892ba66dcb7b77f72a95ffc87a2c6097856dece81d5868647e3c2ecb128b7bebdb8b2e37658521671437a7ac9c733549ace59218e428fb576fbed84b01cd4b4a9a4db6960018ad34c652d4adc8af6e5ab305e5c6debd97a91b2ac448ddafc138e231a17c71d8e86fffd61824c31d468a39eb56d3af75c076a90dd84ef6e8ee93eb97dc08e73ae47a29a50f30cb67e6e5002c1f3aaf7c60d010432353bbbe9340a75b10b1df9794a950e918c002abf1f1533979871a0e080e9668aaa4422c74f6130b633b89787aa3b04b7923cd2a63397f6382ada57a386d198d8b05fdf62321d2455af5ac2292c8b19f0d1b42c9e2be26dd28f27c470dffe449c00664246fb1024f97ef497da476c5bd1f5b0b3e3ab9a1ca431c87698571ddbda430278a28a9f6955442dce2b10d06150807ff64ba6a17897b4f50dbe5bd2e5453ba941464f74b5594d9851f441d4e477aa6112844686119615881269a8e4fa561006177b0f81e932385f6f9bb3192dcc764c18bdee29f63125ac4bdcd32a7f20266e8c6004aebec72d29f45a213c334f0d120003e19dfd08c51a97047a286da95daf544b26410018ee9dc2a3f3ae463e0a30268ad8117e79ceb14bd517cd4c3edc0cab87af5c452fbe76f0e3afafb4998d12f51f390721fdf42fb57f2a67187deb489a32840151b7d68ef7383e50f0b10497ab98c84b331b159285678db93c60ce30942f809fc1b6dbe863a947ff92d954929105981ec211ac6a4d46f6afc5350e5fa7a6ca867185dbb76b906b5a3e3f73a0d945281353bfad06b5b5c200c399ae114d98e340cd5ce41daaa8450580276050662d56c4c22b90992c57ee66c3e98c4d917c3cd9408862dd4f91ec5234e6ddc2cc20e35650a7b40de5e5e3a6ec1a7daef3d77b96ecd9a78e0e625e1694f9f9fd91e0fad307d0456fb9a9d11d19b80f29e6c4bd96796668c6956a40ef45a885d8a649e666af5c86ca773d35a65a9abbd53c4a190b2b8640ec4fd2d5153ede7b1dd1042b4e01a25aa5d3084e407d3978eb91de5de274e28c77ddfd21c4c81b7aa1b6f88296c34562de450449428335fcc070dfa34e0c3e291f0bc00c9c5ac860f8ffb344c4375a388cc8f492ae8a4d2d8769e066d8c4f5ca33f1f771fb575761d105eb4ec0beac60335af261f432fe8f53131b625c68f31a7f3fe230ec01a55ddaaf697b41135c84b89e7aa689a1809db2a7613d7bbe3120287373b44a48c99a40314d16497d7240d96596afb82c77f9466546c05cbb94c5823906b655076c8a73faaa88f42e91deb54c5a45335bd0934b43e155a02c55689753fb7ec594b42911ae3d5adf2c9efe7b303e5f4b3565aead53a5cbcfa8d7bbe6662a565362d0d6d4931a740f3c51328cb912fd5445553d077dd5b2ea153edc4f0ff434818f8a5b88ff837c5afb49fd237c58158f7e25cadeeced4992afb1e3257248a29f709d76234b58f111c7caef74f4239d48cb26c50c709f0f89e3e5d1396078a4474807501296a2e798c6c9158fb32c5e9a79429ffc1389ec9088953b577b895362a537862afbeb5695678e859fd6cd9b7d4ccfd5e20a30094d07ff44f861d67a396306233eb83f8fff8d5aab6d7f7a13897f471941f70bc387cf5929bc69c0f0ede79018c29b9d6a140c68ab8b37fb0789fea57dc80cddeb565112bf796d916fc56acc2109689aa627dbbcfe94ff426242bf2101ca8ddb16ab579f6c3e0d1c80843203287ace470c1c675ce591dc59d1426de08fdabc1eb150d8e3ef30ff1739924e4f52dee878a8caba5a9e85f8d1115e398ea4424dad19e5b15400929dcd376b37f3fe7128c353e8ff368c5a52a7ef0d2a3c72b26d54542ca808b73f47c938dc1746449610abed113c3e8ba431beb91180b0e2e1f0e4956c7b5330f37cd4e126a5e3e456f49620bfe5eb63805bb4cbd6a8a207f70a9f2962c390ad916fd359f635adb8d5a54ef430a7307c0dfcf484f476808d8d1f2f1844e5579ead54e1757ad0e1281f2d45cc82342f9c84aedbc523dc76e33bddfde9d30726d7eb6d78d7092f4c802d21882f0ea2e5cb5df4041b1146087ed87a96166458fbe57208a38cab0c596133079424941da878c1d4acc4bd0c2b599db19e93c7b13cef2ea882aed8aef8548a753512eff2a7a93b9b345a8562e18a96b04e28d51022f1f27177a6a61262a0527fa87c4684afcf30d0ed087cc0e6a15226e482fcc0bb1ce274b90b51edf10105cce163808dda956042352d8e21544db27bd395f240088d9b987630389bec39d2656d4f80a67876bd4b82646f4c70c2c1443e38d061c900d5c90e443c741ec553500bb0e13db30591b50d2c251cfaba3964b4d8d8267879ec76914bccfbd6a3243006b7ef1e0ad751c9b38beecd70dd3ba909d645176f87080df23e6a6b52a1df17349351519cc6bea908e613c9053e9a6d3ac526fdf7de2d346e4d8e1769472717fa95a3cf046954ec2c2d0bf2159b684edb2bf3ed4754e292c59abc4d14edf52b2ba2a0205cc81729a01cad8e2cb05168608b63f2b22106ccfb09b55183fae3315665f4921eb7e144e3ba55c7242d2e3d8643d3e5e0eddc4d51713a8ff9517f992300fa59b64ce94c55fb79326dcbcd248e324c747d0b84777bd77bcd8423262b249e405cee8e867cb9d479c7402e878f8f52f0d4a71b148a82fd9c634ae1eb9498272806ee13638da81b6e68e6d132b7a42858e9e4e25d6afdd9436b6190cae551d60516a21cbb9b3fb2dc8deeb89418c56333325f0e5436aaea21c2a1d7d1d1c9c9cc308aefe2bcd9d8d71c7359ac7e309756f20f2e268202ff2bc181dad3d9517b6c6779f5cb11b952c41ea4f65656203f8b0b5da1be4651a70ded1a34c8ae0b5d602389cc03be57e967333040cbf304feb9c6f838259000b93bea0e59e1e9876f3e49be00151ae81c5fcdc06c657957bacef07780b094d19eb6af386734c2621a617c5eb2b289121e7d65d987130e2ceab23738d4f57bfb2eaa6186e840f2376e34f41da8a6c8c2013a5d481ad36443f9be635ee10ffe135fe6dc67a2ae3ffbd5d7a0a3e7ebf1930fbe83049d08c01784f7d313d0982c88f9f96f79fcae141b34b6337f453492887c0a97b9240cae7b44161da43db531db784eb8c7b12e01584619bbb91c59e69b1a26a285731c100a9a2b854160a8e0f1064cf5d1c6a9b82f21c519f790e323be381c267bbb4f98b23991e4d1667c6c6d865eaab1d9366d0e0f5d85e2bf6b71c240648eca55ddc2845074cfaa81da05ecc254c9d51f5800866650468da6e13e8614824118a8b71caeae6d2627eb3483686623c904f774501efb89d359dc7cdcc1dd80dc4aa0a60ffe5607b8d131457813de5b9253dea23ea0dd1b1eff500e958898acd711e850a18dab60f7151465a1c28752ce583b5c39da488bcd2b4035f3a879270b0995e03473dfbbc88e70354d72dd8fa7d474263bd111deae200d2cee17f23c672b37212c5657a9234f03ccb069f4498ecadf4f214ccba104ac2aaa6f06453f9ed75f30bd64592ac0c6cd96ecd4377d71847107a43732a11998b4ee50fc6f7f33c7047e5de0781ba9fc550bd10cf1a37db746a0916ec74043f19cf1ac1f3a043d5355f1fbd04131ac9436e6165bf41306569c27a79c4090ffbf8d4ea3eec3dec823818d98a7ed585f74b438f43da1e6042bfc7218881b15e72bf30cfde62c74d8cf6b4d949f9a06e7751822ce73dfcaab01034eb15d5e799174d4ef9d617b019be31fc1b73d5aa4134724e00f4ec472bb20f3c1d810cbf51ef73a3f4dbe2255232abdb4a3f49939035ddbe507826f186f624e68424ed54c1a7b30f9575be033693ee7725326935907831589180cc253b35f7c39589a8b4bc6cbe5cc9eb1945181a99e43932afb2efff5bc28cdcefd21a731758f3c834bf9cea8a2cf29ec82ba720e8d312f392f15c4fa30d1775af5cef9206518998296ab9aff20e7945d07995c91b3e51be574d4e481a6cedd246de2cbfe81674a41e9fcfab8ee1d81208296988962bc3241b7d5d260587e4fba2bb9a08edd39acca7cf75ff057e7e72c49c851cf6b85344229fff74da85f6a7444c736a1f5c85b93ed1fe996e089f51ee85e9500ded5d301d22e24135eeadc6fb644d6ab4b20482d8da131ca38637623d1159b53e81070867df21d0a3bbd97b3d1eb6a1a9f1dc3af7e6c82efcab8a6e5133b6300184e6698568e2d4bb0b91d25b7728737e126232031a2486781bb01a0b99975aba01dc6f3fb7260eb21879f261452b9ccf5d81debb6c85a302bafc136f6083b4d11a9f30c4f04884eedf031f76c3a9ee634b9123117dd35c2171ef969875cfa2041916ee13bb9ea9ecbd141989686542be0e531d78689711f3c05d51253fcca1b3f4ecba36caab3c85fcae1b89df41b098116e364e2d16e875eb97aaf296f80b50d2b1a14d626e3a4fc38e4e8cfc78fa8700ce3fb926df1844f547ea488822a8c93e1a89cd599b4107d06e5e921eea52138866213a2c1ddb16202c9903e8e686828d3c82585ed15e5f32c912809d53187d5f0a89b9c651e100729a3c428baaac56833ad5da655e1ab02992c86bfce3c665ec9abc501e803023b5e1a88374355a6f9a8537dc444e97d578109d62364ca697d882e82e91a799b1a7f35b17b378d677199ccb714ba1626153332305f557a79a553f8d858598fb948354c222ac579866887efa58a1f505b5b2f2bbbcd4aac6669aa2bfa3cf275c06b6a92e5fa283fe27f84003d06767f3d37f9c4d2440b3e4faa7bd2179d3b53669779b774731002a84aa050127aa7db9f58c604707e229ff5cd96ada0c06116149c8085fc721c69438d8be268c086ef98531c78dc875470bbe3ee238289d052923dfe37688fca7817dd6ac829e97532362fa1bcf559ef1d3591d59e351ce5dd7dddea48eaf06ba49d1d0a42c29b93a2c67f71ade89b6f6c909dc3d79a7d9fecc234f7a804d544cf1b3c21db7de3260b61ed07cdd0dd1dee90c731c5e12f060f21d0cda4daebbeb8a279fe0eac850614a558a223179ce5521c7535394b23a7a9d0decc18456bb26582b81bfc5f6675a53072556af394a20d5aac8bb81147d286d2166cdfd54542e65c8430ae177caddda757fa80b738a3e525ca9d6fc6f550b6aadd0930cada7f485ff99d78111c257a3156d96113bf01f637616ce167efb079e2be423f8bcd6842e1973c87e96abaffe1f5de191c82c6485a28cf6368f241961bae283edcd9517fbffabf81903d4d98a26d1fb6d56c9ac3f92ec0dfab0b57fc80efaa50e654ea941a50bbea745c009ac9a6c2d318a2700414a9f0f5d5208d17f21aee16266ac5ebf0823650ad2421b069d91ae0c9f38a75f791ae457e4fc0d77d64a6a7fc6f357617749f674bde44ec024e61e5aeb02d368ea32289ab0193261bdf0c765bc247aaca502282efa10552bc7a0b52c803a828c44c63d10e477977d09e8ced9236fa58f6f300098c66315fde531032f33a0fac63d4a2b39721f648f8168dbc0bfeb60b56bf975484811b86dbde1f39801044e8fdb3f275d07a9beeb26692fb9be928986ecf41027b87301bc511da0e0cd679debc8bb336c4dbe08b6b4c98b40334b2b8c7ee38fc79ef717ede0572fa72d807911a2bccc72ecb80a4201c149429e56f431e997ed35a42d6f75546f41acf08f4e051b10e5cbad57215275a2cbf45351bb391a08c69c65c00156b0e83caad7aeb71dfeea5c8ea8d86c3ee68008360846b92535259c82ee37207071f11ac01db7c6b17ed12c48431abb2b9fc974ce61a54ca4398e5e5253eb459959d7cf501bb2ed8488e27bd007f9dd787a41210280cd2b364e617d1c42452db64e85c6dbab0258b1038c8f128827553309c07fb2ea1f2b22651d35f489d36aba1aa49a558e140d2809bf8d2783c2afc65a7f664a54285d7a109a051dc561fdc5117c196904de68344ea77625a5e0e022221f1af434fbcc652ed39daa362b987d365dd4ffca719d873655dffe1daa61c5be7363dd4e220679aa7a3edd34445b20b098d38433beba6a47b7ae6b31accc9a5a7868fe8375bd6779e38e7c765d5541af57339321b8d75ec5113f55c17f22bc3934d5093feea9b6c8f6045f6381629310e1ed5f00b5864c1143204c386e002f6b1700800fc7f96cbc3d7872084cc75598cdfbfff561e7964448ebb05a256a67483a3935fc7a72f5a8eded4e1223ff7a09294dc13a272ca55032b9611950bc0301b9058cce0264cffaf9014cf7d6e87a1a281b6ab4be8715548eb8e50dbb3527aae109577909c0b22a32ee8737d8ed76660face684d6b4a2404eaae9945ddf07aedf563dd8a96dd7644e3f3c88baddc654264e4e952fc209b05a0c0fca9bbb1ae5111e93eb2b260981ab9e2710d5171fa7b10c65e29db1e2b8d2d74587f230818adf519117bc44a65f58de66df33681db8fa58356520608622ac50dc3a7e130a0a3b9766de4c44554154d8de4cd86c031369db038ab9ff4b739569f1176dc4645459248cb6f4e66fe4ff78c57aa7e3549eacc3f00f5dcd147ca20825c92a9e3cf863c24e51b19b019f0be550715c7c1b4f84e410e4b39770e0047c95267f61e5fb115f5508f44d62cbedb5a79939c12ef51b79234495b4e3a127414467b20287438ef67c100063c1a3b3e00bd053558eff79312409678d4895a602f580155068b788112db4b00c0304be6bed2fc2132e8d74bb013f315a7164f461c763deede787d3d8396dc0512727e54e96e33455d5be8067ada8f95430c90ed221eabf9c719e0dfc608d3f18c27cbdef9ca785b741fea34855707ff0934dd57d8446bf568a3dd2ee8c3131868f59bf578708d2fb4968de3a62d87cd47bab2153f688ae9e2a7776472a259032aac6b1739e35728e74fd27de584a705f2e27926aa97146423dcc06aa4665", 0x2000, &(0x7f0000007c40)={&(0x7f0000002580)={0x50, 0xfffffffffffffff5, 0x298, {0x7, 0x2b, 0x7, 0xffffffff80000000, 0x4, 0x3, 0x2, 0x400, 0x0, 0x0, 0x10, 0x9}}, &(0x7f0000002600)={0x18, 0x0, 0x2, {0x1}}, &(0x7f0000002640)={0x18, 0x0, 0x2, {0x4}}, &(0x7f0000002680)={0x18, 0x0, 0x2f, {0x40}}, &(0x7f00000026c0)={0x18, 0xfffffffffffffff5, 0xfffffffffffff229, {0x3e4f}}, &(0x7f00000029c0)={0x28, 0x0, 0x9, {{0x9, 0xfff, 0x2, r2}}}, &(0x7f0000002a00)={0x60, 0x0, 0x4, {{0x8000000000000001, 0x7, 0x5, 0xcc85, 0xfff, 0x7ff, 0x7, 0x40}}}, &(0x7f0000002a80)={0x18, 0x0, 0x1, {0xa}}, &(0x7f0000002ac0)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f0000002b00)={0x20, 0x0, 0x8, {0x0, 0x2}}, &(0x7f0000004cc0)={0x78, 0x0, 0x0, {0x2, 0x8, 0x0, {0x3, 0x4, 0x8, 0x5, 0x4, 0x80000000, 0x1ff, 0x8, 0x3, 0x1000, 0x7, r3, r4, 0x9, 0xffffffff}}}, &(0x7f0000004d40)={0x90, 0x0, 0x4720775f, {0x1, 0x3, 0x1, 0x5, 0x9, 0x200, {0x6, 0x9, 0x100000000, 0x7, 0x8, 0x4608c80b, 0x4, 0x7, 0x9, 0x4000, 0x6, 0xffffffffffffffff, 0x0, 0x7, 0x8}}}, &(0x7f0000004e00)={0x78, 0x0, 0x6b, [{0x2, 0x10001, 0xf, 0x9, '.pending_reads\x00'}, {0x1, 0x7, 0x4, 0x6, 'nat\x00'}, {0x3, 0x3, 0x4, 0x7, '\'%$)'}]}, &(0x7f0000007240)={0x470, 0x0, 0x3, [{{0x6, 0x0, 0x4, 0x6, 0x400, 0x1, {0x5, 0x5, 0x5, 0x3, 0x0, 0x7, 0x6, 0x0, 0x2769, 0xc000, 0x1000, r5, 0xffffffffffffffff, 0xa191, 0x5}}, {0x5, 0x1, 0xf, 0x6, '.pending_reads\x00'}}, {{0x5, 0x3, 0xd, 0x5, 0x0, 0x0, {0x2, 0x49f, 0xfffffffffffffff4, 0x3, 0x1000, 0x4, 0x95b4, 0x1000, 0xe, 0xc000, 0x8, r6, r7, 0x401, 0x258}}, {0x2, 0x850, 0x1, 0x0, '+'}}, {{0x3, 0x3, 0x2, 0x1, 0x1, 0x7ff, {0x4, 0x7, 0x50a4227f, 0x8, 0x3, 0x1, 0x2, 0x4, 0x4, 0x1000, 0x2b, 0xee01, r8, 0x7, 0x7fffffff}}, {0x6, 0x3, 0x0, 0xc4e9}}, {{0x0, 0x2, 0x4c, 0x60, 0xf4, 0x708, {0x4, 0x5, 0x3, 0x9, 0x3, 0x4, 0x40, 0x7, 0x8, 0x2000, 0x7, r9, r10, 0x81, 0xcc}}, {0x4, 0x1ff, 0x6, 0x3, '}{^^!\x80'}}, {{0x4, 0x0, 0x80, 0x37f, 0x9, 0x5, {0x2, 0x1ff, 0x2c, 0x8000000000000000, 0x7, 0x80, 0x0, 0x0, 0x9, 0xa000, 0x67b9de23, r11, r12, 0x7, 0x10}}, {0x0, 0x3, 0x4, 0x6, 'nat\x00'}}, {{0x1, 0x1, 0x100, 0xfffffffffffffff7, 0x2, 0x9, {0x2, 0x8, 0x2d, 0xb4e4, 0x9, 0x6, 0x8, 0x4, 0x2, 0x4000, 0x0, r13, r14, 0xffff, 0x2}}, {0x3, 0x101, 0x4, 0x9, 'nat\x00'}}, {{0x6, 0x3, 0x138, 0xfffffffffffffffc, 0x4, 0x6bc1, {0x4, 0x7, 0x4, 0x64f, 0x6beb, 0x208, 0x2, 0x4e8, 0x0, 0x8000, 0x7, 0x0, 0xee00, 0x9}}, {0x4, 0x7, 0x4, 0x4, 'nat\x00'}}]}, &(0x7f00000078c0)={0xa0, 0xfffffffffffffffe, 0x3, {{0x2, 0x3, 0x93, 0x80000000, 0x2, 0x2, {0x4, 0x4, 0x80000001, 0x3ff, 0x8, 0x4, 0xffffff38, 0x6804, 0x2, 0x6000, 0x401, r15, r16, 0xae, 0x80000001}}, {0x0, 0x1}}}, &(0x7f0000007980)={0x20, 0x0, 0x47da, {0x616, 0x4, 0xb, 0x6}}, &(0x7f0000007b00)={0x130, 0x0, 0x8, {0xffffffff7fffffff, 0x6, 0x0, '\x00', {0x2, 0x101, 0x6, 0x7f, r17, 0xffffffffffffffff, 0x1000, '\x00', 0x4, 0x38, 0x3, 0x1, {0x3, 0xff43}, {0xffffffffffff0001, 0x93}, {0x38826eb5, 0x80000001}, {0x6, 0x582e}, 0x5, 0x3, 0x7, 0x8}}}}) (async)
splice(r1, &(0x7f0000007d00)=0xffc0000000000, r1, &(0x7f0000007d40)=0xffffffffffffffff, 0xdc6, 0x6) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000007d80)=0xffffffffffffffff, 0x4)
timerfd_settime(r0, 0x1, &(0x7f0000007dc0)={{0x77359400}, {0x77359400}}, &(0x7f0000007e00))

0s ago: executing program 2 (id=70):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?cH[\xe5\xcf\xe0b&^\xbd\x15\xaecx@`\xe8\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef')
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.236' (ED25519) to the list of known hosts.
[   19.816577][   T36] audit: type=1400 audit(1756035744.419:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   19.817636][  T281] cgroup: Unknown subsys name 'net'
[   19.819609][   T36] audit: type=1400 audit(1756035744.419:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.823342][   T36] audit: type=1400 audit(1756035744.429:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.823530][  T281] cgroup: Unknown subsys name 'devices'
[   19.981367][  T281] cgroup: Unknown subsys name 'hugetlb'
[   19.986949][  T281] cgroup: Unknown subsys name 'rlimit'
[   20.099632][   T36] audit: type=1400 audit(1756035744.699:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.117040][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   20.122831][   T36] audit: type=1400 audit(1756035744.699:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.155980][   T36] audit: type=1400 audit(1756035744.709:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.162966][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.179190][   T36] audit: type=1400 audit(1756035744.739:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.213169][   T36] audit: type=1400 audit(1756035744.739:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.238724][   T36] audit: type=1400 audit(1756035744.769:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.264175][   T36] audit: type=1400 audit(1756035744.769:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.816870][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.823950][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.831032][  T288] bridge_slave_0: entered allmulticast mode
[   20.837183][  T288] bridge_slave_0: entered promiscuous mode
[   20.843661][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.850935][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.858290][  T288] bridge_slave_1: entered allmulticast mode
[   20.864753][  T288] bridge_slave_1: entered promiscuous mode
[   21.024403][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.031902][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.038930][  T292] bridge_slave_0: entered allmulticast mode
[   21.045193][  T292] bridge_slave_0: entered promiscuous mode
[   21.052561][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.059582][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.066667][  T292] bridge_slave_1: entered allmulticast mode
[   21.072803][  T292] bridge_slave_1: entered promiscuous mode
[   21.108707][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.115743][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.123023][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.130049][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.199206][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.206640][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.213722][  T293] bridge_slave_0: entered allmulticast mode
[   21.219961][  T293] bridge_slave_0: entered promiscuous mode
[   21.228683][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.235748][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.242908][  T293] bridge_slave_1: entered allmulticast mode
[   21.249011][  T293] bridge_slave_1: entered promiscuous mode
[   21.278423][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.285465][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.292535][  T297] bridge_slave_0: entered allmulticast mode
[   21.298631][  T297] bridge_slave_0: entered promiscuous mode
[   21.304976][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.312027][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.319047][  T297] bridge_slave_1: entered allmulticast mode
[   21.325265][  T297] bridge_slave_1: entered promiscuous mode
[   21.360012][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.367237][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.388570][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.395610][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.416700][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.423734][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.479591][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.486647][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.497882][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.504931][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.518336][  T288] veth0_vlan: entered promiscuous mode
[   21.538822][  T288] veth1_macvtap: entered promiscuous mode
[   21.587379][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.594437][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.605840][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   21.612892][  T292] veth0_vlan: entered promiscuous mode
[   21.628116][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.635148][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.653694][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.660740][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.673359][  T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   21.674238][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.697220][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.720558][  T297] veth0_vlan: entered promiscuous mode
[   21.738683][  T292] veth1_macvtap: entered promiscuous mode
[   21.746364][  T297] veth1_macvtap: entered promiscuous mode
[   21.763462][  T293] veth0_vlan: entered promiscuous mode
[   21.794178][  T293] veth1_macvtap: entered promiscuous mode
[   21.833553][  T343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'.
[   21.847599][   T46] tipc: Subscription rejected, illegal request
[   21.883207][  T353] batadv_slave_1: entered promiscuous mode
[   21.900074][  T354] FAT-fs (rnullb0): bogus number of reserved sectors
[   21.909260][  T354] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   21.923463][  T352] batadv_slave_1: left promiscuous mode
[   21.981126][  T373] sit0: entered promiscuous mode
[   21.986921][  T373] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   21.994751][  T373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11'.
[   22.331114][  T394] usb usb9: check_ctrlrecip: process 394 (syz.1.16) requesting ep 01 but needs 81
[   22.341271][  T394] usb usb9: usbfs: process 394 (syz.1.16) did not claim interface 0 before use
[   22.429837][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   22.589784][   T31] usb 1-1: Using ep0 maxpacket: 16
[   22.597379][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10
[   22.609769][   T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   22.620239][   T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[   22.632860][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   22.641912][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.649905][   T31] usb 1-1: Product: ࠁ
[   22.654059][   T31] usb 1-1: Manufacturer: ࠇ
[   22.658639][   T31] usb 1-1: SerialNumber: 傟ꂬ狏䚖ﶣ⏋㝻쉽
[   22.884832][   T31] cdc_ncm 1-1:1.0: bind() failure
[   22.902319][   T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   22.936844][   T31] cdc_ncm 1-1:1.1: bind() failure
[   22.959917][   T31] usb 1-1: USB disconnect, device number 2
[   23.205856][  T458] netlink: 8568 bytes leftover after parsing attributes in process `syz.0.25'.
[   23.227978][  T460] 9pnet_fd: Insufficient options for proto=fd
[   23.307517][  T461] overlay: ./file0 is not a directory
[   23.516163][  T479] rust_binder: Failed copying into alloc: EFAULT
[   23.516191][  T479] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   23.523220][  T479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   23.532276][  T479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54
[   23.589263][  T481] =======================================================
[   23.589263][  T481] WARNING: The mand mount option has been deprecated and
[   23.589263][  T481]          and is ignored by this kernel. Remove the mand
[   23.589263][  T481]          option from the mount to silence this warning.
[   23.589263][  T481] =======================================================
[   23.779886][   T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   23.934649][   T31] usb 4-1: not running at top speed; connect to a high speed hub
[   23.949165][   T31] usb 4-1: config 1 interface 0 has no altsetting 0
[   23.960992][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   23.970569][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   23.978689][   T31] usb 4-1: Product: syz
[   23.984728][   T31] usb 4-1: Manufacturer: syz
[   23.989380][   T31] usb 4-1: SerialNumber: syz
[   24.408343][   T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8
[   24.481598][  T501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75
[   24.610711][  T478] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   24.637269][   T10] usb 4-1: USB disconnect, device number 2
[   24.647073][   T10] usblp0: removed
[   24.719800][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   24.870248][   T36] kauditd_printk_skb: 677 callbacks suppressed
[   24.870264][   T36] audit: type=1400 audit(1756035749.479:751): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.872488][   T31] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[   24.876492][   T36] audit: type=1400 audit(1756035749.479:752): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.902774][   T31] usb 1-1: can't read configurations, error -22
[   24.909902][   T36] audit: type=1400 audit(1756035749.479:753): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.964658][   T36] audit: type=1400 audit(1756035749.479:754): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.989193][   T36] audit: type=1400 audit(1756035749.479:755): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.013697][   T36] audit: type=1400 audit(1756035749.509:756): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.038194][   T36] audit: type=1400 audit(1756035749.539:757): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.062726][   T36] audit: type=1400 audit(1756035749.539:758): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.087232][   T36] audit: type=1400 audit(1756035749.619:759): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.089799][   T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   25.119671][   T36] audit: type=1400 audit(1756035749.719:760): avc:  denied  { ioctl } for  pid=500 comm="syz.0.38" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.181641][  T505] rust_binder: 12: no such ref 0
[   25.226846][  T507] /dev/rnullb0: Can't open blockdev
[   25.269931][   T31] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[   25.278366][   T31] usb 1-1: can't read configurations, error -22
[   25.299095][   T31] usb usb1-port1: attempt power cycle
[   25.380248][  T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16
[   25.380651][  T509] rust_binder: Write failure EINVAL in pid:16
[   25.392437][  T510] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   25.488194][  T516] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   25.575310][  T519] rust_binder: 26: no such ref 0
[   25.580389][  T519] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   25.580404][  T519] rust_binder: Read failure Err(EFAULT) in pid:26
[   25.594507][  T519] rust_binder: pid 519 performed invalid decrement on ref
[   25.649783][   T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   25.672096][   T31] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[   25.680641][   T31] usb 1-1: can't read configurations, error -22
[   25.747581][  T524] overlay: Unknown parameter 'fsuuid'
[   25.809773][   T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   25.832544][   T31] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[   25.841032][   T31] usb 1-1: can't read configurations, error -22
[   25.847341][   T31] usb usb1-port1: unable to enumerate USB device
[   26.270832][  T527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   26.592644][  T534] SELinux: failed to load policy
[   26.599348][  T538] sit0: entered promiscuous mode
[   26.606048][  T538] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   26.617093][  T538] netlink: 9 bytes leftover after parsing attributes in process `syz.2.49'.
[   26.630649][  T535] 9pnet_fd: Insufficient options for proto=fd
[   26.811176][  T551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.826560][  T549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'.
[   26.857892][  T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   26.877938][  T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   26.920827][  T561] netlink: 'syz.2.55': attribute type 10 has an invalid length.
[   26.938582][  T558] netlink: 'syz.2.55': attribute type 10 has an invalid length.
[   27.999780][  T488] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.049785][  T339] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   28.119780][  T563] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.162343][  T593] Invalid logical block size (1748)
[   28.169290][  T488] usb 2-1: config 0 interface 0 has no altsetting 0
[   28.190936][  T488] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[   28.200005][  T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.207985][  T488] usb 2-1: Product: syz
[   28.210554][  T339] usb 1-1: no configurations
[   28.213456][  T488] usb 2-1: Manufacturer: syz
[   28.217225][  T339] usb 1-1: can't read configurations, error -22
[   28.221683][  T488] usb 2-1: SerialNumber: syz
[   28.233822][  T488] usb 2-1: config 0 descriptor??
[   28.269784][  T563] usb 3-1: Using ep0 maxpacket: 8
[   28.277958][  T563] usb 3-1: unable to get BOS descriptor or descriptor too short
[   28.287518][  T563] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   28.295669][  T563] usb 3-1: config 0 has no interface number 0
[   28.303689][  T563] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   28.315477][  T563] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024
[   28.322224][  T593] /dev/loop0: Can't open blockdev
[   28.327613][  T563] usb 3-1: config 0 interface 88 has no altsetting 0
[   28.350498][  T339] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   28.358662][  T563] usb 3-1: string descriptor 0 read error: -22
[   28.364935][  T563] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   28.373978][  T563] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   28.383328][  T563] usb 3-1: config 0 descriptor??
[   28.398036][  T563] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4
[   28.507059][  T339] usb 1-1: no configurations
[   28.519759][  T339] usb 1-1: can't read configurations, error -22
[   28.541014][  T339] usb usb1-port1: attempt power cycle
[   28.543004][  T488] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[   28.592245][  T488] usb 2-1: USB disconnect, device number 2
[   28.693848][  T432] usb 3-1: USB disconnect, device number 2
[   28.726381][  T455] udevd[455]: Error opening device "/dev/input/event3": No such device
[   28.753836][  T455] udevd[455]: Unable to EVIOCGABS device "/dev/input/event3"
[   28.761611][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.772972][  T455] udevd[455]: Unable to EVIOCGABS device "/dev/input/event3"
[   28.881750][  T339] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   28.889293][   T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   28.941313][  T339] usb 1-1: no configurations
[   28.946323][  T339] usb 1-1: can't read configurations, error -22
[   29.072931][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   29.083991][  T339] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   29.091600][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.091632][  T619] ------------[ cut here ]------------
[   29.102717][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.106804][  T619] WARNING: CPU: 0 PID: 619 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[   29.120512][   T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0b9c, bcdDevice= 0.00
[   29.129712][  T619] Modules linked in:
[   29.141868][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.142608][  T619] CPU: 0 UID: 0 PID: 619 Comm: syz.2.70 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f
[   29.150616][  T339] usb 1-1: no configurations
[   29.161840][  T619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   29.161858][  T619] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0
[   29.168313][  T339] usb 1-1: can't read configurations, error -22
[   29.176501][  T619] Code: 7e 3b e8 44 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 21 0c 6a 00 <0f> 0b e9 e4 fc ff ff e8 15 0c 6a 00 0f 0b e9 0e fd ff ff e8 09 0c
[   29.186115][  T339] usb usb1-port1: unable to enumerate USB device
[   29.189188][  T619] RSP: 0018:ffffc9000d1179c0 EFLAGS: 00010293
[   29.189209][  T619] RAX: ffffffff811bd81f RBX: ffff8881196b0000 RCX: ffff88811bbc1300
[   29.210153][   T31] usb 4-1: config 0 descriptor??
[   29.215175][  T619] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   29.242201][  T619] RBP: ffffc9000d117c70 R08: ffff88811bbc1307 R09: 1ffff11023778260
[   29.250195][  T619] R10: dffffc0000000000 R11: ffffed1023778261 R12: ffff888132a53000
[   29.258169][  T619] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881196b0078
[   29.266186][  T619] FS:  00007f07ff5446c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   29.275139][  T619] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.281745][  T619] CR2: 0000000000000000 CR3: 00000001322c0000 CR4: 00000000003526b0
[   29.289722][  T619] Call Trace:
[   29.293029][  T619]  <TASK>
[   29.295962][  T619]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   29.301982][  T619]  ? __futex_wait+0x218/0x2a0
[   29.306666][  T619]  ? should_fail+0xf/0x20
[   29.311030][  T619]  ? __cfi_wait_rcu_exp_gp+0x10/0x10
[   29.316332][  T619]  ? ioctl_has_perm+0x1aa/0x4d0
[   29.321221][  T619]  ? __cfi_autoremove_wake_function+0x10/0x10
[   29.327293][  T619]  ? ioctl_has_perm+0x3e0/0x4d0
[   29.332182][  T619]  ? has_cap_mac_admin+0xd0/0xd0
[   29.337126][  T619]  ? synchronize_rcu+0x77/0x2e0
[   29.342009][  T619]  ? __cfi_synchronize_rcu+0x10/0x10
[   29.347290][  T619]  ? futex_wait+0x29a/0x7a0
[   29.351832][  T619]  ? __kasan_check_write+0x18/0x20
[   29.356952][  T619]  kvm_vcpu_ioctl+0x96f/0xee0
[   29.361665][  T619]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   29.366878][  T619]  ? do_futex+0x309/0x500
[   29.371228][  T619]  ? __cfi_do_futex+0x10/0x10
[   29.375906][  T619]  ? __fget_files+0x2c5/0x340
[   29.380614][  T619]  ? bpf_lsm_file_ioctl+0xd/0x20
[   29.385558][  T619]  ? security_file_ioctl+0x34/0xd0
[   29.390693][  T619]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   29.395898][  T619]  __se_sys_ioctl+0x132/0x1b0
[   29.400600][  T619]  __x64_sys_ioctl+0x7f/0xa0
[   29.405188][  T619]  x64_sys_call+0x1878/0x2ee0
[   29.409890][  T619]  do_syscall_64+0x58/0xf0
[   29.414310][  T619]  ? clear_bhb_loop+0x50/0xa0
[   29.418984][  T619]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   29.424902][  T619] RIP: 0033:0x7f07fe78ebe9
[   29.429318][  T619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.448942][  T619] RSP: 002b:00007f07ff544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   29.457379][  T619] RAX: ffffffffffffffda RBX: 00007f07fe9b6090 RCX: 00007f07fe78ebe9
[   29.465369][  T619] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   29.473355][  T619] RBP: 00007f07fe811e19 R08: 0000000000000000 R09: 0000000000000000
[   29.481345][  T619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   29.489309][  T619] R13: 00007f07fe9b6128 R14: 00007f07fe9b6090 R15: 00007fff5528e398
[   29.497285][  T619]  </TASK>
[   29.500319][  T619] ---[ end trace 0000000000000000 ]---
[   29.598616][   T31] usb 4-1: string descriptor 0 read error: -71
[   29.605619][   T31] usbhid 4-1:0.0: can't add hid device: -22
[   29.624667][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[   29.634931][   T31] usb 4-1: USB disconnect, device number 3
[   29.961258][   T36] kauditd_printk_skb: 656 callbacks suppressed
[   29.961275][   T36] audit: type=1400 audit(1756035754.570:1417): avc:  denied  { read write } for  pid=297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   29.991693][   T36] audit: type=1400 audit(1756035754.570:1418): avc:  denied  { read write open } for  pid=297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.016602][   T36] audit: type=1400 audit(1756035754.570:1419): avc:  denied  { ioctl } for  pid=297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.802641][   T36] audit: type=1400 audit(1756035755.410:1420): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.827114][   T36] audit: type=1400 audit(1756035755.410:1421): avc:  denied  { read write open } for  pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.852234][   T36] audit: type=1400 audit(1756035755.410:1422): avc:  denied  { ioctl } for  pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1