last executing test programs:

30.025692511s ago: executing program 3 (id=124):
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}}, 0x4010)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000280)={<r2=>0x0, 0x6, 0x1, [0x1, 0x0, 0x3, 0x1, 0x6], [0x10000, 0x400, 0x6, 0x7, 0x8, 0x1000, 0x8, 0x4, 0x7f, 0x1000, 0x0, 0x4, 0x40, 0xfffffffffffffffc, 0xcc1, 0x0, 0xaddb, 0x0, 0xfffffffffffffff9, 0xe, 0xb6c, 0x8, 0x9, 0x7fffffffffffffff, 0x2, 0x7f, 0x7f, 0x2, 0xddd, 0x3, 0x7e, 0x7d97, 0x8, 0x140000, 0x4, 0x2, 0x7, 0xe, 0x2, 0x4, 0x2, 0x2, 0x7000000000, 0x6, 0x8, 0x4, 0x2, 0x100, 0x8, 0xbfc8, 0x0, 0x5, 0x2, 0x8, 0x9, 0x5, 0x200, 0x0, 0x4, 0x2, 0x1, 0xfffffffffffffccd, 0x3, 0x800000000, 0xec2709c, 0xa, 0xfffffffffffffffc, 0x2, 0xffffffffffffff01, 0x8, 0x0, 0x10001, 0xd6, 0xf, 0x1, 0x2, 0x2, 0xfffffffffffffff7, 0x7ff, 0x5, 0x1, 0x800, 0xd, 0x58e, 0x0, 0x1, 0x0, 0xa943, 0x4, 0x3, 0x6, 0x401, 0xfffffffffffffff9, 0x401, 0x1000, 0x7, 0x5, 0x7, 0x1, 0x8000, 0x3, 0x7f, 0x1, 0x6, 0x4, 0x6, 0x9, 0x6, 0x8, 0x8001, 0x0, 0xffffffffcbb60253, 0x8, 0x0, 0x8, 0x4, 0x84f, 0x28cd5a8d, 0x4, 0x80000000, 0x4]})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000006c0)={0xb, 0x6, {0x5, @struct={0x2, 0x2}, 0x0, 0xfffffffffffffffe, 0x3, 0x5, 0xf692, 0x82, 0xa6, @usage=0x5, 0x9, 0x8, [0x1, 0xef, 0x64, 0x4e3, 0xfffffffffffffff4, 0xc]}, {0x8000, @struct={0x4, 0x3}, 0x0, 0x7, 0x1, 0xfffffffffffffff8, 0x55, 0x7, 0xc, @struct={0x148e, 0x1ff}, 0xffffffc0, 0x7d4, [0x9, 0x8001, 0x3ae, 0x2, 0x7ff, 0x3]}, {0x0, @struct={0x4, 0xffffff00}, <r3=>0x0, 0x8, 0x1, 0x0, 0x66e083f4, 0x5, 0x44, @usage=0x3ff, 0x9, 0xffffffff, [0x7082, 0x7f, 0x0, 0x0, 0x8, 0x1800]}, {0x1, 0x1, 0x2}})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r4, 0x0, 0xb, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000ac0)={<r5=>0x0, 0xe, 0x0, [0x800, 0x100000000, 0x8, 0x6, 0x81], [0x2, 0x100000001, 0xb, 0x1, 0x4, 0xe, 0x9, 0x100000001, 0x7, 0xd8, 0x9, 0x9, 0xffffffff, 0xf3dbd17, 0xfffffffffffffe00, 0x4, 0x3, 0x100000000, 0x5c, 0x10000, 0x3, 0x0, 0x8000000000000000, 0x1, 0x3, 0x0, 0x4, 0x7, 0x3a, 0x401, 0x9, 0x6, 0x10, 0x7ff, 0x4, 0xfcb, 0x0, 0x6, 0xf176, 0x4, 0xa, 0x5, 0x0, 0x4, 0x8, 0x2, 0x8, 0x10000, 0x2, 0x4, 0x28c0, 0x100, 0x8c, 0x7fffffff, 0x4, 0x81, 0x1, 0x1, 0x8000, 0x4ab8, 0x8db5, 0x58, 0x65, 0x0, 0x9, 0x5, 0x7fffffff, 0xff, 0x800, 0x9, 0xc6, 0x9, 0x8, 0x1ff4b0ac0, 0x4, 0x1000, 0x9fd, 0x4, 0xfffffffffffffffc, 0x5, 0x4, 0x7, 0x0, 0xfc00000000000000, 0x3, 0xe, 0x5, 0x3, 0xfd0e, 0x5, 0x2, 0x9, 0x2, 0x9, 0x4, 0x1, 0x5, 0x0, 0x6, 0x8000000000000000, 0x1, 0x8000, 0x6, 0x649, 0xd33, 0x8, 0x2, 0x200, 0x2, 0x2, 0x40, 0x3f2, 0x9, 0x4, 0xfb5, 0x100, 0x6, 0x100000000, 0xe26, 0x80000000, 0x247]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000f00)={0x14, 0x3, {0x9, @struct={0x4, 0x3}, r2, 0x63, 0xe2cb, 0x100, 0xacaf, 0x8, 0x80, @struct={0xd, 0x2800000}, 0x9, 0x3, [0x2, 0x9, 0x2, 0x8d, 0x1, 0x5]}, {0x1, @struct={0x337, 0xffff}, r3, 0x6a5, 0xfffffffffffffffc, 0x81, 0x7, 0x1e7, 0x88, @usage=0x9, 0x6, 0x10000, [0xfffffffffffffffc, 0x3, 0x3, 0x4, 0x1, 0x4f]}, {0x8000000000000000, @usage, r5, 0x0, 0x8, 0x8000000000000000, 0x0, 0x9, 0x80, @struct={0x9, 0x7fffffff}, 0x0, 0x2e4, [0x9, 0x101, 0x2, 0x3, 0x6, 0x4]}, {0xfffffffffffffffd, 0x10000}})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
socket(0x11, 0x800, 0x10)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}}}})
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
recvmmsg$unix(r10, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, &(0x7f00000010c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6})
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
pipe2$9p(&(0x7f00000003c0)={<r12=>0xffffffffffffffff}, 0x84800)
readv(r12, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/113, 0x71}], 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r13 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RNDADDTOENTCNT(r13, 0x40045201, 0x0)
recvmmsg(r11, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584c}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xf6}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)

29.854225464s ago: executing program 3 (id=127):
timer_create(0x3, &(0x7f0000000000)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffb, 0x3, 0xd, 0x400, 0x7d34, <r1=>0xffffffffffffffff})
process_vm_readv(r1, &(0x7f0000001700)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/99, 0x63}, {&(0x7f0000001200)=""/227, 0xe3}, {&(0x7f0000001300)=""/151, 0x97}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/147, 0x93}], 0x9, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/108, 0x6c}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/243, 0xf3}], 0x3, 0x0)
timer_create(0x4, &(0x7f0000001b40)={0x0, 0x1e, 0x3, @thr={&(0x7f0000001a80), &(0x7f0000001ac0)="7ff4c34fa5fbb721019508b1f6dae2408ea020d26af0cc2947eaac664802f845aaf516489f2751cdd0707974e955869b0dd12d548792b605d669eaa60bdcb0dcbbbd93ab8efbe040255f71a640fc79b8ebffba2b558e"}}, &(0x7f0000001b80)=<r2=>0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x200000, 0x6)
symlinkat(&(0x7f0000001bc0)='./file0\x00', r3, &(0x7f0000001c40)='./file0\x00')
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001c80), 0x121181, 0x0)
timer_settime(r2, 0x1, &(0x7f0000001cc0)={{}, {0x0, 0x3938700}}, &(0x7f0000001d00))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r5, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)}], 0x1, &(0x7f0000001dc0)=""/163, 0xa3}, 0x40000062)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000001ec0), &(0x7f0000001f40)=0x6e, 0x80000)
sendto$unix(r6, &(0x7f0000001f80)="5ae6d9be226f4a5a3b2789f8b1afb8fbf292b27001d10855fb022c9f15988f4381895e97370f717b4b04754fa0ecb8dd6f04ec1ed31e4e2e3ffd38c55c8bb1f1b30d77c8bbc0c3e6444aee3f02ad5466b36b1a4f1daa34f41388cc155cf367856166adad71c149c12a6446c494565dfcf89bc028ec742ab55c4af04dccbf1dece9575fd1eff95d9c290f7f0d62b9f440890e99652b6e162d68c4807259004bc7406afd1ca7a818685b8bb30fdba3b4bcd04ca9", 0xb3, 0x40040040, 0x0, 0x0)
r7 = inotify_init()
read(r4, &(0x7f0000002040)=""/172, 0xac)
syz_clone(0x2a00, &(0x7f0000002100)="5116c9d72f38f09a1d1c93c29229bc97dbbb59ce4f0a35cd6c401dd2b5f333b54779360cf79c1383e316679fc7198b058231555ffb926a8906fc4f9ef089c9d0446ac60f761dbc01f12aa72f48e315ad1c70960fbb84c2997131378d0f4d8a17f486f10c1acd47af84138c40010f4197b5065c8e4e5bdebecb075e0354f65c47a0cdce635ff35867d7926051b6139504cfd2e64d225b36be", 0x98, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240))
ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0xffffffffffff3861)
lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x1000)
getresgid(&(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)=<r10=>0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002540)={<r11=>0x0, 0x0, <r12=>0x0}, &(0x7f0000002580)=0xc)
statx(r5, &(0x7f00000025c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000002280)='./file0/file0\x00', &(0x7f00000022c0)='system.posix_acl_access\x00', &(0x7f0000002700)={{}, {0x1, 0x3}, [{0x2, 0xf048f773e07aa3eb, r8}, {0x2, 0x5, r9}], {0x4, 0x6}, [{0x8, 0x8, r10}, {0x8, 0x3, r12}, {0x8, 0x1, r13}], {0x10, 0x5}, {0x20, 0x2}}, 0x4c, 0x1)
ptrace$setregs(0xd, r11, 0x7, &(0x7f0000002780)="fb5093d1531964f26d8628de069cd5a5fc851e3ccb500ba7463be66d9a75fd2c1ffff323be8e38e2171a13468092da4799c4cbc17ae2f1297ce91ebbd78728667feb2f75ef0edb91c0c97c80d319c346d236b53d760731dcbc375fbfe427c4fae80b86e34a4ed1e8014e2516982d292b10cfacd0d43adb899ff264fd1342142d16abe102c7f2feeb46eac581e812eb2bf708f6e2880cb2842dafd2f228d7a4f1f1d9feeba1150a9a23c79f10270479c3574141552e8f8011da3d07f82aa4351ea624e0")
sendfile(r7, r6, &(0x7f0000002880)=0x4, 0x7)
r14 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r14, 0x5000940e, &(0x7f00000028c0)={{r5}, "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"})
socket$packet(0x11, 0x0, 0x300)
removexattr(&(0x7f00000038c0)='./file0/file0\x00', &(0x7f0000003900)=@known='security.selinux\x00')
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004000)={0x24, &(0x7f0000003ec0)={0x40, 0x14, 0x53, {0x53, 0x24, "227dbc09a7384b6b1f93a796152688b527af014c83ecf208534d39a8d03c23d058ef6dddeca01f3f05d051f6c4c8bd189114035114454e2442d7e37e95bc4f1ce0a8bb3b02d36ad0188ebb217e672c66d0"}}, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe917ec855f5b5489}}, &(0x7f0000003f80)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "b52c"}]}}, &(0x7f0000003fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x5, 0x1, {0x22, 0x758}}}}, &(0x7f0000004240)={0x2c, &(0x7f0000004040)={0x40, 0x14, 0x43, "b39abdafc45514e2e68b06d7a93df7bf5c9f4b442746b1ebda6327783ae2168913b983c935818db037b7b572bbb839aed4c4d18695c1ed8edd823bd0e0d485737f0069"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000004140)={0x20, 0x1, 0xa5, "e8b98d07274871aa38ddaed97be261781c53a749453fe906c652e0b364c30d0b9703db0fba943bfddddd2345c35a20e2232cb5ffac89f104d29f357d362300ae3f845d72e42524973ccac981132839f58769497c3672ddf2f1443f1bd3d4834db7b0c74e53a6ae48a4d33a6799892f4e250017ae758a1f55135912d093753582bdf25e90d2a5b7532ff2a6dcd4df65b98eca5c456a2fdd405685880da141f6d1110e3eebe8"}, &(0x7f0000004200)={0x20, 0x3, 0x1, 0x10}})

29.306395453s ago: executing program 3 (id=130):
r0 = syz_usb_connect(0x3, 0x30, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xa6, 0x86, 0xd8, 0x8, 0x1a0a, 0x101, 0xd11e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x6, 0xa, 0x0, 0xca, [{{0x9, 0x4, 0xab, 0x8, 0x1, 0x8d, 0xd9, 0x37, 0x1, [], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0x7, 0xfe, 0x10, [@generic={0x3, 0x9, '+'}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000dc0)={0x14, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0057e3000000d3751f37"]}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40000)
r1 = syz_open_dev$usbfs(&(0x7f00000008c0), 0xffffffffffffffff, 0x241)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000900)=0x27c)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="0022e2000000e2093a55af311232dd731959fdfc4194c24c3cf1310888c62ff9cf1d2ffd03965960ac17d80c3771951f0c20357ac61d591168a29686214680d8c68581b57087ba9730888c4748c6ee6896bed5357d3ea5274ca802e64089363f65997f75f1a7f83899bdcb42273bc7bb6e5cbed9d850143e58d5d54ec11848c15242acda13edca2f2581f1c6a780ed9d947c2f87d3e6820c56ed6ce92277ee61f755c259c3146b6dcf8bdea9faa428c56e6535e74d461a7c9c05a4f792ea4b75240f497b9022ee8c9ada4e6e1b393824e61ccab8286e0d189d138d1c3160a8fda45cdeb271091e79c0517ab9000000000000"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x20, 0xf, 0xbd, "239d2930c2cf46d67a2d9d1acb0325a03226ea1971b5f86b687b0f59d4cb94e7adec7f69923f07275d3e068a63edaa83b863af160017ddaf304a9690a9b4098c087276ff100f1019dfb070cf478e294d3032f24027710743453502ea851a27ebe3beeff03115e91785fd9b33658335fdd769189a8e072094ca011fc037e17d7618d9bff8e1ba7250798578f2dca93ac7b8df38ea5193bfa653bf7126e73b80f15104947dd8363f6c18864719844ddcbc6ae7090b2c0ed356c7f6812f9b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

27.622464349s ago: executing program 3 (id=156):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xa5a51d7c8f6b7e3b)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="bf86b37515d0fe41dfa0331fb5943bf784cdc549f04aa63d579d759bc14d02b1ec12316701117ec88b4bdbda2f064d83e36da87d778cbc7fac3155f1d1f1b10e785430394c0645d678f42b97b571bf99f0749c538b5800f6a85bf6b398dce945c28561d0d02b7f763911e7969836089d5ae8613861bd8ea26391e1e544c7e7630375f792474d89b2147dcf1837ab796eb7d40186", 0x94}], 0x1}}], 0x1, 0x48080)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x1)
mknodat(r1, &(0x7f0000000200)='./file0\x00', 0x800, 0x91a7)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001800290200000000000000000a"], 0x20}}, 0x20010000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

27.594849969s ago: executing program 3 (id=160):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x1, 0x1}, 0x20)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)={0x200})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341d040000000000000109022400010000000109045597010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00#\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='.\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
fadvise64(r5, 0xffffffffffffffff, 0x0, 0x4)

27.450455192s ago: executing program 3 (id=164):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = eventfd2(0x58, 0x80000)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
write$eventfd(r1, &(0x7f0000000040)=0x4, 0x8)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r4, 0x400, 0x2)
fcntl$setlease(r4, 0x400, 0x2)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = socket(0x10, 0x803, 0x0)
socket$key(0xf, 0x3, 0x2)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000980)=""/155, 0x9b}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000003c0)=""/70, 0x46}], 0xa}, 0x85}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/135, 0x87}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/112, 0x70}], 0x3, &(0x7f0000000640)=""/241, 0xf1}, 0x10000}, {{&(0x7f0000000a40), 0x80, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/187, 0xbb}, {&(0x7f0000000b80)=""/164, 0xa4}], 0x2, &(0x7f0000004240)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000001180)=""/247, 0xf7}, {&(0x7f0000001340)=""/87, 0x57}, {&(0x7f0000000cc0)=""/140, 0x8c}, {&(0x7f0000000e00)=""/231, 0xe7}, {&(0x7f00000016c0)=""/193, 0xc1}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000880)=""/55, 0x37}, {&(0x7f00000015c0)=""/255, 0xff}], 0xa, &(0x7f00000013c0)=""/24, 0x18}}], 0x7, 0x2102, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

27.346613143s ago: executing program 32 (id=164):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = eventfd2(0x58, 0x80000)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
write$eventfd(r1, &(0x7f0000000040)=0x4, 0x8)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r4, 0x400, 0x2)
fcntl$setlease(r4, 0x400, 0x2)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = socket(0x10, 0x803, 0x0)
socket$key(0xf, 0x3, 0x2)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000980)=""/155, 0x9b}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000003c0)=""/70, 0x46}], 0xa}, 0x85}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/135, 0x87}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/112, 0x70}], 0x3, &(0x7f0000000640)=""/241, 0xf1}, 0x10000}, {{&(0x7f0000000a40), 0x80, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/187, 0xbb}, {&(0x7f0000000b80)=""/164, 0xa4}], 0x2, &(0x7f0000004240)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000001180)=""/247, 0xf7}, {&(0x7f0000001340)=""/87, 0x57}, {&(0x7f0000000cc0)=""/140, 0x8c}, {&(0x7f0000000e00)=""/231, 0xe7}, {&(0x7f00000016c0)=""/193, 0xc1}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000880)=""/55, 0x37}, {&(0x7f00000015c0)=""/255, 0xff}], 0xa, &(0x7f00000013c0)=""/24, 0x18}}], 0x7, 0x2102, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

12.226411719s ago: executing program 2 (id=367):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)

12.225600569s ago: executing program 2 (id=368):
r0 = userfaultfd(0x801)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2100, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
utime(&(0x7f0000000200)='.\x00', 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xfffffffd, 0x25dfdbfd, {{@in=@multicast2, @in=@local, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0xbdf}, {0x7fffffff, 0x3, 0xb}, 0x70bd27, 0x3ffc, 0x2, 0x2, 0x0, 0x16}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
lseek(r1, 0x4000006, 0x1)
getdents(r1, 0x0, 0x58)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

12.19700638s ago: executing program 2 (id=369):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000003, 0x20031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
timer_create(0x4, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x54, 0x0, 0x20, 0x50bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x7}}]}, 0x54}}, 0xc000)
ftruncate(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT], 0x1c}, {&(0x7f0000000e00)={0x488, 0x17, 0x410, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x34, 0x86, 0x0, 0x0, @binary="e79a8984fed6a428ffdc2cd2c05ab2462cbf79646a13e1e0ce3025732795b3ee4287bd0467a66d59ba1eac699bdbacdb"}, @generic="6748a367502a1c0f3f622b1addb667779a75c0925a637223a12395cbf1dc90e74c10b341937d1c6f19d1d19027b5fdd7c187475a66ce79856e392133b1c8ce3ae690f7a7eb8190f5c5e0974604f4a1d18b53bc2fac036c579dd64ed508110615ec9947c922ab", @nested={0x11b, 0xeb, 0x0, 0x1, [@nested={0x4, 0x129}, @typed={0x4, 0x35}, @generic="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", @nested={0x4, 0x27}, @typed={0x8, 0x107, 0x0, 0x0, @pid}, @nested={0x4, 0xb4}]}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="a9d9b5f97c72", @nested={0xb5, 0x121, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x87}, @generic="6238ebb50783710ca5ac0e0f1c6e041c4df03c8fc93cd268959d21d775bde12e99a5c6558e0cd3f093e7e3897711194d70d18d7153796e5fb63486ee395d0ff85b479378b834c4e95f12e8accb88ebbd4205a76d35690b94602fa64c616fd6f83b7ff1e1bb0ca2094ae33c63f1ce4d4e635f3b15e5efcb121ba733ac097c78528bb41ddb429e7b57a1051b1d29", @typed={0xc, 0xa5, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x13a}]}, @nested={0xe0, 0x6a, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x331}, @generic="18af48ee2ee1484925dbd4505c4c5937a86a0874df085b5eb96ccff1698f068215fc2aaabd30ec0798d50175ca2c77d7646c6068c80c41cdec563b7d0a8d91cb36e3aa28ef8ceaab86efa0c57742f0b15f514c49", @nested={0x4, 0x80}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xa9, 0x0, 0x0, @pid}, @typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="210d4be13e3a4735760cf38b1c56cb168a27e66f2ec5413f5a2bb025730f973ce4392835ee87ff8927d7062e3cb9bcc8029d245d6fc565ac98a77baaaf2b8ae5ca73824f031ad221", @nested={0x4, 0x70}, @nested={0x4, 0x1e}, @nested={0x4, 0xfc}]}, @nested={0xc, 0x98, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @u32=0x83c}]}, @generic="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"]}, 0x488}], 0x2, 0x0, 0x0, 0x4000000}, 0x10040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0x40000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0505405, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x0, 0xfffffffffffffffe})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000'])
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGICOUNT(r7, 0x5409, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x69, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f8563614d21ec008a11a9275d11"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x3280, 0xffffffffffffffff})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)

11.326496313s ago: executing program 2 (id=373):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r4, {0x1}}, 0x18) (async)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc}, {@in6=@dev, 0x4d4, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000004}, {0x407, 0xa, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffe}, 0x3c, 0x0, 0xa, 0x3, 0x3, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384-ce\x00'}}}]}, 0x13c}}, 0x10) (async)
syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x8, 0x6)
r6 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r6, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) (async)
io_destroy(r0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000000000000000000000000000000000000d0035"], 0x30}], 0x1}, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r8)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)={0xe4, r9, 0x309, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d395ebc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ca}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r11 = dup(r10) (async)
modify_ldt$write(0x1, &(0x7f0000000080)={0x2, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)

11.151600776s ago: executing program 2 (id=374):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080"], 0x30}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0x1)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r5 = dup3(r4, r0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})

11.069559937s ago: executing program 2 (id=376):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
fstatfs(r0, &(0x7f0000000300)=""/219) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async)
r2 = syz_io_uring_complete(0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x5a, 0x8, 0x400, 0x6}) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, 0x0) (async, rerun: 64)
ioctl$TIOCSPGRP(r2, 0x5410, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0xd8, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x86, 0xb4, 0x17, 0x10, 0x424, 0x12c, 0x636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x5, 0x5, 0x20, 0x41, [{{0x9, 0x4, 0xa0, 0x81, 0x5, 0x2, 0x64, 0xed, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x3, 0x10, "fb"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x3], 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x6, 0xd, 0x400, 0x81, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x303, 0x3, 0x9, 0xfff, 0x9, 0x16}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, '\n'}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x6a, 0x4, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x0, 0x73, [@generic={0x51, 0x11, "069ef67dd0e8673db37861eecbad9bfef90155f64539990038c71827493e34ec51280d87240edf5f306b0abe18ffe592955c54a9a8e8b714ff379a13e2431524ea48496420c5e5cbf27e7bda7766aa"}]}}, {{0x9, 0x5, 0x0, 0x1a, 0x10, 0x16, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xc3, 0x2, 0x2f}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x8, 0x2, 0x7}}]}}]}}]}}, 0x0)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x5c, 0x0, &(0x7f0000000040)="de547e22bade76f1c13b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e85b32ce7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbbf9ffffff0e64d34b52c5330847cc27a03f34d22cab"})
r6 = socket$inet6(0xa, 0x802, 0x0)
open$dir(0x0, 0x48240, 0x0) (async)
r7 = openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$RNDADDENTROPY(r7, 0x40085203, 0x0)
getsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0})
r9 = dup(r4)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) (async, rerun: 32)
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)

10.990664389s ago: executing program 33 (id=376):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
fstatfs(r0, &(0x7f0000000300)=""/219) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async)
r2 = syz_io_uring_complete(0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x5a, 0x8, 0x400, 0x6}) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, 0x0) (async, rerun: 64)
ioctl$TIOCSPGRP(r2, 0x5410, 0x0) (async, rerun: 64)
syz_usb_connect(0x5, 0xd8, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x86, 0xb4, 0x17, 0x10, 0x424, 0x12c, 0x636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x5, 0x5, 0x20, 0x41, [{{0x9, 0x4, 0xa0, 0x81, 0x5, 0x2, 0x64, 0xed, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x3, 0x10, "fb"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x3], 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x6, 0xd, 0x400, 0x81, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x303, 0x3, 0x9, 0xfff, 0x9, 0x16}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, '\n'}]}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x6a, 0x4, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x0, 0x73, [@generic={0x51, 0x11, "069ef67dd0e8673db37861eecbad9bfef90155f64539990038c71827493e34ec51280d87240edf5f306b0abe18ffe592955c54a9a8e8b714ff379a13e2431524ea48496420c5e5cbf27e7bda7766aa"}]}}, {{0x9, 0x5, 0x0, 0x1a, 0x10, 0x16, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xc3, 0x2, 0x2f}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x8, 0x2, 0x7}}]}}]}}]}}, 0x0)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x5c, 0x0, &(0x7f0000000040)="de547e22bade76f1c13b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e85b32ce7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbbf9ffffff0e64d34b52c5330847cc27a03f34d22cab"})
r6 = socket$inet6(0xa, 0x802, 0x0)
open$dir(0x0, 0x48240, 0x0) (async)
r7 = openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$RNDADDENTROPY(r7, 0x40085203, 0x0)
getsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0})
r9 = dup(r4)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) (async, rerun: 32)
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)

6.918133552s ago: executing program 0 (id=420):
syz_usb_connect(0x1, 0x61d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x4a, 0x4d, 0xf7, 0x50, 0x10c4, 0x8156, 0x71d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60b, 0x2, 0x8, 0x1, 0xf0, 0x2, [{{0x9, 0x4, 0xda, 0x2, 0x4, 0xec, 0x5, 0xfd, 0xc, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x200, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x9, 0xb}, @mdlm={0x15, 0x24, 0x12, 0x7f}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x8, [0x1, 0x0, 0x8, 0x1, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0xe6, 0x6, "12"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd, 0x4, 0x0, 0x4, "50fa54214b08e5a2"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x5, 0x7f}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x2, 0xfd, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xee, 0x4}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xb7, 0xf7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xe}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3602521c87bf85fc, 0xf, 0x80, 0xac, [@generic={0x63, 0xa, "28b18e77a8b559ca39da543444de36548230496786dd961ec8898dd9e8ac4c478c5f999fc94d98002450ce33e3b3071a169798793211070c47d43254915d182ede3b2a7b3eaff9896a030daafdd690153e792d8d01892d1a318222a10e84c50b34"}, @generic={0xf2, 0x4, "e70d03b83e63347f89b66a973531b48ea491137dc280a8cffa5b3583182f879d582ecc3954dafd301bbef42c470e32c17812942b62ecb5b54aa759ee7197c865d39a4e2bf3bcc4cec324b14fc24bb72eeaf95503e9fdaf0298b81fa66ad8a261125a9dd9c12ba82d03372207f6c3f504d0311014ef1bc298604a2c5d39ba243415f7241116ecd401d2ec9ae76f30da0858d0be5a3f993be78e0cd70e09b3c299a0420954605d54cf735c05b5062aa93278d80f863f87ddd66c0631a8d282b865afaaad78dde2b9c3327096f3eea28b925d483317123fece69d95097c6866d84eb8f781a4eec5df7c1f522ba687c9b3bb"}]}}]}}, {{0x9, 0x4, 0x76, 0xc, 0x9, 0xd1, 0xf5, 0xfe, 0x7, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, ','}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x35, 0x40, 0x9, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0xb6f5, 0x3, 0x1, 0xdd, 0x7, 0xa}, @mdlm_detail={0xe6, 0x24, 0x13, 0xd, "a65859f47d386e989134db5ba5a952b426a054fdd60cdad1d77575aa51f484c4dbd30d8b57158a0e13a5b7f2ec9f601a5b1c580d3a8338d2e62cbde0c70606e2e2ce5875a8d0e01b50783e24063eb57e5fdaf923b564d3190637ad40eaf6f75ea61defae91d26dca3675f67dd94b59a3ecf50e9c10672ba30ee9b2978767e4bb131290b6ffd642b71a8422634e466c293edf667791561fc829e91964fa15726998e4bd794ab9bba687ed900b96fae10052028e10a4e7d7fed462399e8d510184b130fd7ca266c856e9b9e9e3e4cee8d22e5c6e5cbc293ed2a76b8199e1b266f4924f"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5e54df77f164"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x1ff, 0x5, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x800}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xc5, 0x8ac0}, @obex={0x5, 0x24, 0x15, 0x4}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3986, 0xb2, 0x80, 0x11, 0x200, 0xff}]}], [{{0x9, 0x5, 0x9, 0x14, 0x200, 0xd5, 0x3, 0xc0, [@generic={0x6f, 0x1, "8400839e1918fa5661ec104b010ba9847a66202b275edbaace40d03524843d16dfa7291b43ab0faceb5a7ad8bd8a5dc0b9b790d33b7ebf8d0816a25e1bcccde0082a7c9eef24335b97438f9bceec29363580f8534b7b96f722111b27a3a1e8589109c58d74ccca23d922bffec8"}, @generic={0xb5, 0x21, "ccbbcd793ee7b2c2e6e13159b4e74d036811b32177445cc6678e3d59fb00551d2831d5f0d0272e687e78d4ff59851d344641a66af15f8fd11df5043c1f2b326c54d2bc79e00c280a27a0898b9bfe538a25463db4215ae4543ca30e92885fd779a73e2a5665ce00fb9d38f0fd00c3e6f73d7324871103cac6836d38bdcf57bb2d3da6ca405c4db3b41577fd6aed9b0a059cf0b151621c3368c5431be016d2f069508ef1d33b3869efed01b7218bce4bcf35488e"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x80, 0x7, 0x4}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0xcb, 0x6, 0x8}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x8, 0x4, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9c, 0x3a1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xf, 0xfc, 0xb, [@generic={0x2d, 0xb, "ccb50e93f66798a1b6cf49ea19c93b85ebffa03d7eb56f49bacd5ba066a90b7fdaea89c1c77a6771ca0f2b"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x181}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x3e, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0x2, 0x3d7, 0x10, 0x40, 0xfd, [@generic={0xa7, 0x21, "a0f12731b4808a2e5379b03a65ba5df8196fc006dfcf36f1dfd18ea5369957ebf235bfb6ed2d52f0bcce27de0fcb4a4037f16c5bdbcfc86be634e81db926e0bd9af04c2644dce95198985d76072f57b4106f2acad6c33a3fbd7553732fd7ef36300e210c5ae2719648b9a6785ffbc404fb0ec7060b6dee731819be78dcc7bbb5a762075a64a38ed001ccc10a3d8eac631da9412ab9e18dc1246dfb04ad8f96793d405a51c8"}, @generic={0x3a, 0x22, "4c5dce5a4ddf31a0aee9e1692e7dfdc7f4ecb2d4c577bb0b01b91bd6bf38b73a910b6a211068251aaab06997aa9cf2ef8b53199350172eeb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x9, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x40, 0x8, 0x1d, 0xff}, 0x23, &(0x7f0000000680)={0x5, 0xf, 0x23, 0x2, [@generic={0x14, 0x10, 0x4, "23f717e42805b0290eb97cec9c3c52051a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x5, 0x9}]}, 0x1, [{0x3e, &(0x7f00000006c0)=@string={0x3e, 0x3, "2fe97076c24a158d3f80f9c7a749eba3e361d38cd37c2d65c1273df1e3266b09387297d135bf32c7bb2b062357cf94db740d1138f4903480550ce71b"}}]}) (async)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
setns(r0, 0x40000000) (async)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x1) (async)
syz_usb_connect$uac1(0x6, 0x11a, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x3, 0x1, 0x5, 0x80, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0x4, "42e4"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x6, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x300, 0x2, 0x0, 0x800, 0xc, 0xc7}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x3, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x6, 0x3, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x81, 0x2, "dce7920f5151c880"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x52, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0xc9, 0x0, "7c84", "2045aa"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7fff, 0x0, 0x8, "c6dcd584694f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3c, 0xd, 0x7, {0x7, 0x25, 0x1, 0x2, 0x2, 0xf3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x5b3, 0x4, '%Mt0'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x74, 0x4, 0x7, 0x7, "06b1d2a384b6cc"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x1, 0x40, "0666b8ccf027a193a3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x2, 0x5, "", "36055b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x5, 0x4, "0dd5a0ab986a4d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x8, 0x8, {0x7, 0x25, 0x1, 0x82, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0xe, 0x3, 0x4, 0x20, 0x5}, 0xc, &(0x7f0000000980)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2, 0x1000}]}, 0x7, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x89, &(0x7f0000000a00)=@string={0x89, 0x3, "3eb73f0d4f8dce1749694d3e827c9eeee7326f97695b23882bf6724ad45050229a78f84753dcb98d6bd69344b133cebc3c578707e5c0a7bd2cfc5506cff9bb12d108ef561f06090aa69ef9ca34e11876ad5f46fe208d13dda9a0926e2e8367336107016834a07bf14cf4f6fe15307dc45d71a9b1fc16f9b095499fe3bb9af3b8eeec3275081024"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x41c}}, {0x1c, &(0x7f0000000b40)=@string={0x1c, 0x3, "50833252a10f6c59972f41c525134f46e226a07e530b11bc36c4"}}, {0x31, &(0x7f0000000b80)=@string={0x31, 0x3, "6b1bc3340d14a51c80b099060475b0f9b6e6c102509422b62026cec7307bf16793a32661f5c91aed31effcf7b33351"}}, {0x16, &(0x7f0000000bc0)=@string={0x16, 0x3, "493b234d1a8ae4e76337fd9045688652658efc1c"}}]}) (async)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000c80)=0x5, 0x4)
syz_usb_connect(0x3, 0xbd0, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x1f, 0x1, 0xfa, 0x40, 0x5c6, 0x920d, 0xd362, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbbe, 0x4, 0x8, 0x1, 0x88, 0x7, [{{0x9, 0x4, 0xfc, 0x8, 0x10, 0x72, 0xaf, 0xcd, 0x2, [], [{{0x9, 0x5, 0x7, 0x8, 0x400, 0x4, 0x6a, 0xbc}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xaa, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x7, 0x5, 0x42}}, {{0x9, 0x5, 0x0, 0x10, 0x218, 0x9, 0x7, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x8, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xb}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x7, 0x6, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x208, 0x35, 0xff, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x4, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3319}, @generic={0x5c, 0x1, "7140ab43b02d0eb9a0ddbe645b87b92bb7bec537d2ef65e94e6cf2aff0876384b232eba0fa9392edfccf9992aced833044fca138d5f18334383a9205416959ec1b86de9adbc4574ba214ea9db926c82bb3e2259bedc76656796b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0xd, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1000}]}}, {{0x9, 0x5, 0x1, 0x8, 0x48f09370aab8b8ec, 0xf, 0x1, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x2, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2, 0x80, [@generic={0x91, 0x6, "4132ec228899e63591003513949b0a2ab35c14ed20270b387de83e9a25d4ab69ee437923c96b31d1759565c7c88b1951793917bb372703313cb0f5a07b42c6f5f4a9fe35286a831da8279329f144a3ac44a5c02e87c55237d27296ead25354991fdc8467e172ad38ebb238f30dbfdd0d45facb57f7fd2513a4a0ca390468bb905a1696bd868e608518df393a530f0b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x9, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xffff}, @generic={0x55, 0x23, "b25d8f3742d1a202dfebfefa8008493402c444e3aa9df421f9230c49496b306d72ee9d2af9ffe000445a412e3ef9ef2975c2c351220de552f88eba9d7742875042016c07303ef706c9131bee6b9366bd1ba5ef"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x5, 0x8, 0x9}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x2, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}, @generic={0x89, 0x8, "5843f3dfc9c9a92788f41706db09d4e6bcf9fb582f19bae7d968bebe7c333efad63850e3a9572dfb0591b1eda06e612af0743942074ba7747fd465ff20b06de3611d39bdffd725a79fe7c3616e257be652be36ae907c2e147a3bad1846a9b2b6a9959d35ff1bf125c4f87afb92ec22571da71b0ba358f8f69d16fa02be09de943abc322cf58110"}]}}, {{0x9, 0x5, 0x1, 0x6, 0x8, 0x6, 0xa4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0x5}, @generic={0x70, 0x8, "2fa90c0936936473c7131d66adedaac92faf4d51fc244ab47c5aec52bc6a404d7c6b81b2eb504da69b18173145f69870ad6c1ba1cbc4959ede2ce9b020600cc56e2e6a79f2a84decf114f2332c44301cab2fcc4d7793009fbb86b6df0d1fabdb55a94e879293f615d54b8bc9db33"}]}}]}}, {{0x9, 0x4, 0x2e, 0x1, 0x0, 0x56, 0x39, 0xa0, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xf, 0x6, 0x5}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0xe, 0x4, "845f45be7f67f6d472"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x11, 0x4, 0x1, 0x40, "", "66d6da"}]}, @uac_control={{0xa, 0x24, 0x1, 0x546, 0x1}}]}}, {{0x9, 0x4, 0x74, 0xa, 0xd, 0x93, 0xb1, 0xb5, 0x80, [@generic={0xa, 0xd, "6033111573034d37"}], [{{0x9, 0x5, 0x1, 0xc, 0x200, 0x19, 0x2f, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7a, 0x7ac}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x1, 0xf7, [@generic={0x7b, 0x6, "49a3fea6208eb62e19e101b2656664d8726c689bfd9923adee7a43bea10670a8f08159d2d86d8028590d0ec3fbd9023514baff84cdc5b25b4a5030549742d34a13e5017601d034f06ada5b46deefff7c338a41eb4b9f32f76a27ef55be0817950c38da1a2ce5496904a41d7e1c839fa0cc9be05f5ee47dee18"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x10, 0xa8, 0x7, [@generic={0xe6, 0x7, "024c53766d803f7fc5fe11e46181c9f4f5ca1f5bc82008f87da1042fca40c7dc8bd8908447c34b991ec2ae00a54b529e258997f6bf6d7c23b31eeb2e8377c85739f452e1c0d9e8b7e5d586329c51037bcca3a785262702b0a05de4df42ddd3093ed68e25a66fe0cfe05681bf5859b0f0cd50f11f96efed6e54e83bf02015598e4d8d4804e8636c496195c90acfd4cf598f8e8e3b931a354570128249530610001900788e4f8b7e030928f0efbe1165d104b82322edecf2803d9ff387e12ee06c65eeb90823c44257c2204f6cc04ee3be293c6d7f69813971924a127a1ba015ae819dc7b8"}, @generic={0x71, 0x23, "80e4f50d1905d0d60ef75e0161a3d8fec152b1cecda4ebc15d746972638ec4a487f5cb051b7d7f1f34f03732a93eff8f739f20a3c81882d5267a8dda88f58cc0f697f4fbc51c39c3965c374fe755383b544289297fde589385dc94ba2ba29252ff883624af93e1fb1813206754862d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x3, 0x7, [@generic={0x81, 0x4, "fed9188c9a19462fec6c510f3538b7365e8bfb9176ee00a5811f97567f468b7ef5336f2d0a7b4409d02919c866bab680f07494c62f32e27941b5f2e3db7b94588bbcab897ef33367e18ff362292d204d5ab99b6195befbc7cc1f9d458dd6da4ef18d139619738c9dd301c40dbca52f14f01c70499eec7722fed4e1499dc141"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0xf, 0x7, 0x4}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x91, 0x5b, 0xfc, [@generic={0xec, 0xc, "dc4c85e8046084797b22d2ce85c5a5da65f2100e1c1d3ba6cabf923c503871030a4e7b5893e565666b8eebb0f4fd8aa2ada474e893f5a4696a922327b08b1df61752e614cca22f9a7d2f5151773e15320f069c698f042d20663bae26e23585c9cfc07f69d77c2c057928cff8ae3cd1b1006a31d3daba254b99f85ec37ed39dbd5889e92184d23a5c3bedb23cac78d97012ca57cefd474b651e4162b348e8efddc3e42b3869fedb56e1aa22c0e7a225a8af20b80947351f3fee831a001d8a4a177bc7ae7dd7ea728eb100c2499e88e129a61bac1e4d3c148af5bde1f85a9de9f0da6dcd82d2bb29629cea"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0xe1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xfa, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8f, 0x6}, @generic={0xde, 0x21, "1d6dc595e23123bba7c07366c3e44b92c867c5e8d49fd02c0259706028d7b8318ead06e005a9d63ff5ed2efacc5e08e466a8e021bc6e8e704fc46139c7cbc8479120a0fe36a8de3380039c7ccd5e45bfd7ef824503c28fe94566d5d6dd92eef11e69b17f49d2d1adefd5bfdef7afc74cbc2c91bc7da061b26606e73cbd6dd21c7b159187aaa081766a35d74f777d5aef5be5b8a78c6bc85f9104b18d78077ebd7710ff875b722eb4968aa45b962d76f2a4cd5ef01c07206e83d2602f7511c7c682ed31abb8435980d4df108f29ad7fd425b39adc3d608394afd5a44e"}]}}, {{0x9, 0x5, 0x2, 0x7da360a5e556821d, 0x200, 0x2, 0x4, 0xe4}}, {{0x9, 0x5, 0x0, 0x11, 0x20, 0x5, 0xbf, 0x9, [@generic={0x3, 0x21, 'Q'}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x2, 0xd3, 0xb}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x9, 0x6, 0xa}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x6, 0x9, 0x2}}]}}, {{0x9, 0x4, 0xa7, 0x7, 0xe, 0xdf, 0x47, 0x9c, 0x80, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x9, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xfd, 0x3, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x8, 0xfbff}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xc5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfff8}, @generic={0x4f, 0x3c, "54cbc74d012eee425c324e9084a27f0741155f20b77d88be5e6ca900da8c296282e526839a7daa5ae80deb3672e86c72c15f71dbbb6541b177cc2d8c179134db68d078054397487f3d394f64cd"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x3, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0x99, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x4}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x6, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x100}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x5c, 0xf, 0x8, [@generic={0xd, 0x11, "415c2d2408aaac16da09bd"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xc, 0x8, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x10}, @generic={0xeb, 0x3, "18f46af4dd3e402f4f0ec2a8f32b1308e4e85213a9e52acd6f9930191836fbf3e9e1fbf99d16594921f2d2077cf1890c89a415bb141f6ab6fa8e7eeaf976f8bda49f69075b67195872191c1dd4d52b3fc5186286a33ecb24205f7c27974b59ff2f6b4d6bfee6a966acb8fa4e492272d5e07e6f48bf648dc0ce0f36624514e48dba8846122eabea09b8fe49bb5ef715d86fdeb4aa924482b07b8f9c32d65333b2747896f09523d86a672a5acfa8964832ba04fe28e9d9c044de57ef1aaec6ce3fae8807f73f75e6c70c2db1b67fa737d576f07467fe88b74a8f897e30d5961e599141dd839c8fd15221"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4, 0x81, 0x9, [@generic={0x7f, 0x11, "976a6a4efdd9805e930cf69d10f09736874656756cf493b0273f2d8f51ada1d694689ce9bb882300993e70a48d4fb1d6da96f7c017fe2786e0ca27d649e42caaedc5eb31b7fb3c37d0e9d0785db3665312648f29e508f582eed6af6aece263e8146616d5e6d7cd4e7ece1a11be68724a966070bd911c1766bd27a4409e"}, @generic={0x1d, 0x23, "c55faa958eebd212b89dd19d6456168b88d202f1335854c83ce76f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x1, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6e, 0x6}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x19, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x65, 0xf}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x1, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x40, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x43, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x8, 0x1, 0x2, [@generic={0xd6, 0x9, "29cf7e39d911d6ec09dfde5f471c4567fb6656786b86d4d56b06e1be683316eabe5b946da22a10ba45ad9514dac729c98674249bf63b99b1532bcdb62c2ca6c8a02d8dec32c89c74959182e24eadadb29cefbc1764af318be7278f4db6d1e3d6f364bc5b9ca0f70c68e2e7ee9c6cd3510d57d63f8c44dc56600a59661aeb23b1c934afb2cfd4d14f41304afaa2609dd6fea775ebb63f55b72ea7f3cc895dbd0883b98766c0b26dbad6cf3f16607dedc18c25dbaec678e7039af284886408444e3cc91134924ee11c85a12c1c4d438eff0657422a"}]}}]}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x310, 0x1, 0xfb, 0x7, 0x40, 0x1}, 0x37, &(0x7f0000001900)={0x5, 0xf, 0x37, 0x1, [@generic={0x32, 0x10, 0xa, "ed33ee58209938f4dcc29c605d3e08d3f2c187de27a6cbf1dceb79e48f90b5df988020e78e06e77bcd8cd06a2177d7"}]}, 0x2, [{0xfe, &(0x7f0000001940)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x280a}}]}) (async)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0xae, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x7, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0xb99d9edef093c086, 0x4, 0xd, 0x1}}]}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x100, 0x0, 0x8, 0x59, 0x10, 0xfe}, 0x2d, &(0x7f0000001b40)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0x0, 0xd, [0x30, 0xff, 0xffc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6348aea99155258f, 0x7, 0xa, 0x4}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7a, &(0x7f0000001c00)=@string={0x7a, 0x3, "cc40d9510561054ee2854b8ec0e077eebad88549adddcf29e342f34ceaa8bdb3a1f0860155036a69f445590b3972237831b7f9574af1c8f581545b54aff641b71bb3dcd40a02c915c28f9d76e317e80acb73f251ad2ffe64affb7fc99e63d7113a2157bfa4c78cee0848e90e3452af581183c54b7385dc66"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x44f}}, {0x47, &(0x7f0000001cc0)=@string={0x47, 0x3, "e6cd6472cd42055e0f592c257aa4e942cec2195fcfd41f17a15ef8d98eef983368c8efcb31a1ea6c6b57646adc77f564f239d8372d6ba869732717059a68e1b79f96b32592"}}, {0xf3, &(0x7f0000001d40)=@string={0xf3, 0x3, "dfb9494bb2b9b4b1e6ad8fd0b8a45df2d51c257fdf5bea19b1acc7a536640ddaef8da4430344062ee6a3d195a69eee0f0da1aa7ecaaaf79ec89ff090050de70c6dacabee8042ec36bc618a1f20a9e67d5712bd4a68915fce23fd058dfaeb92a52a17a4101703d09089b0aefb72bed22c9861cb57124576ed85d007a3e49fb2ad2a30d0dcf7e2c15aa10608c4a9c91b2d644b9f565097c825cdf7eedaa82b32452f10d2066265d97eb8e48c9f379adf1ffa1bddde7b9bc8bb486df8ce5b6bd5e37aadaf8aaece10d1bc813679dcfdfc12d566e38e5d1650e598c273d3d031aa0e4fba22a5fbb706c484029a377545ffcd08"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x42b}}, {0x39, &(0x7f0000001e80)=@string={0x39, 0x3, "6043c8d280bfabe97aabbea94dc8d57dc7f1aa337ddf4f442c68af75a15ab24f9dd72d18376fc2b232b4d813d26b6f6a4a5156545a29cb"}}, {0x1c, &(0x7f0000001ec0)=@string={0x1c, 0x3, "7074158adc00f675ebb1702df77f3cd101b2face929755ec43c6"}}]})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) (async)
syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000001fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0xd, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x5, 0xa, 0xf, 0xa], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x8, 0x2, {0x7, 0x25, 0x1, 0x3, 0x1, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa62, 0x6, 0x6, "d64bd658"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x1001}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0xff, 0x9, "d2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4, 0x7, {0x7, 0x25, 0x1, 0x80, 0x9}}}}}}}]}}, &(0x7f00000021c0)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x300, 0x4, 0x1, 0x9, 0x10, 0x8}, 0x5, &(0x7f00000020c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x444}}]})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002200), 0x301001, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000002240))
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000002280), {[{{@arp={@loopback, @remote, 0x0, 0x0, 0x9, 0xf, {@mac=@local, {[0xff, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0xfff, 0x7, 0x4, 0xa, 0x3, 'ip6gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @broadcast, @rand_addr=0x64010101, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@broadcast, @multicast1, 0xff, 0xffffffff, 0xf, 0x4, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x7, 0x3, 0x3a5, 0xa918, 0xf, 'veth0_to_bond\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @loopback, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000002700)={0x0, <r3=>r0, 'id1\x00'})
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000002780)={0x8, 0x0, [{0x285, 0x0, 0x101}, {0xa18, 0x0, 0x9}, {0x88, 0x0, 0x400}, {0x203, 0x0, 0xc00000}, {0x6b1, 0x0, 0x10001}, {0xc0011022, 0x0, 0x5cd7}, {0x48d, 0x0, 0x7}, {0x40000020, 0x0, 0x6}]}) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), r1)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000028c0)={@initdev, <r5=>0x0}, &(0x7f0000002900)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000029c0)={'syztnl1\x00', &(0x7f0000002940)={'ip_vti0\x00', <r6=>0x0, 0x8000, 0x40, 0x7, 0x1, {{0xc, 0x4, 0x2, 0x22, 0x30, 0x65, 0x0, 0xb, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xf9, [@private=0xa010102, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x86, 0x8, "e4edad1c036a"}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002ac0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x68, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async)
close(r0)
mount$9p_fd(0x0, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0x2100080, &(0x7f0000002b80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@fscache}, {@version_L}, {@nodevmap}, {@debug={'debug', 0x3d, 0x35}}, {@nodevmap}, {@msize={'msize', 0x3d, 0x9b14}}, {@privport}], [{@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}]}})
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000002c80)) (async)
r7 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000002cc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x50, 0x10, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0xc, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002d00)={0xa, 0x6, 0x110, 0x2, 0xe, 0x40, 0x10, 0x4}, 0xf, &(0x7f0000002d40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x5, 0x7fff}]}, 0x5, [{0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x40f}}, {0x66, &(0x7f0000002e40)=@string={0x66, 0x3, "3fa8d2e9217a3e37489417d114257b132c914490e2f892dce2fdc15087e03021acea2b5dd37f7de5c1dbdc3dea38d2e90290cd0a939cf18cd08aaf4a60eec4a8c6191c23ad9178f65a533281d77d3cfe9369b65456c211f2ab2f5cc44c5e2e3afb37ca0b"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io$printer(r7, &(0x7f0000003040)={0x14, &(0x7f0000002f80)={0x0, 0xb, 0x3f, {0x3f, 0x7, "ad939b13302712cf836895e9b387286d15d2f2714b8fb27c13d5b81ecab6777a9242e985df67532a6b9b9b3b0349e6618a6e6f315475a8af044c41cb92"}}, &(0x7f0000003000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x143a}}}, &(0x7f00000032c0)={0x34, &(0x7f0000003080)={0x40, 0x14, 0xdb, "c25738e75287e436e9f33a0aad5fc173053423bbdb8382c6e2274c8650beb557a4f24bff6ff900b5cbe841928a589598bac97cf413caa5e3f7955ac67acce94ad1c936ea051648bc3d070ba51cdd21f29831ca8e7e9313a013c88b01c4fd1aa065470ee80ff66fc00a20e0b77a3016d95c41b4148b4bfbdc5c26f1f7e5f81f4ee29afbf3cfc8523f317740e4364341a51af55f04f0e6db21c9d8d5461f9d2523fa04eeeed9be2c1938d3dbec11ea5fc9b1ac404dae57447e69cdd83f61fbc5e7664b5d75b5128949b0205d51eeaabe439e0a9a252ba77ad5b8da2f"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003200)={0x20, 0x0, 0x5, {0x3, "aee017"}}, &(0x7f0000003240)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000003280)={0x20, 0x0, 0x1, 0xb}}) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000003300)=0x100220, 0x4) (async)
readv(r1, &(0x7f00000048c0)=[{&(0x7f0000003340)=""/115, 0x73}, {&(0x7f00000033c0)=""/245, 0xf5}, {&(0x7f00000034c0)=""/25, 0x19}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/53, 0x35}, {&(0x7f0000004540)=""/123, 0x7b}, {&(0x7f00000045c0)=""/202, 0xca}, {&(0x7f00000046c0)=""/123, 0x7b}, {&(0x7f0000004740)=""/121, 0x79}, {&(0x7f00000047c0)=""/210, 0xd2}], 0xa)
sendto$inet6(r3, &(0x7f0000004980), 0x0, 0x440c0, &(0x7f00000049c0)={0xa, 0x4e22, 0x1, @private2}, 0x1c)
syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000004a00)="61a5343cf3c8c8c56764ed8f455332836ecb9dfca515bf7ef28727b3c70f828a")
write$P9_RLCREATE(r0, &(0x7f0000004a40)={0x18, 0xf, 0x1, {{0x40, 0x4, 0x3}, 0x6c}}, 0x18)

6.854503703s ago: executing program 0 (id=421):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r1, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10000, &(0x7f00000004c0)={[{@none}]})
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

6.854012623s ago: executing program 0 (id=422):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_on}]})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r3, r0, 0x0, 0x80000000)

6.029728066s ago: executing program 0 (id=426):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000f3"], &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "30bc0af1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x5b4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0x6b, "dd7bb2bee7522b85b3fa9038740774f455b478da1b6523db584dcb4679fec339758bfe0ec4bf03d8c97ce517d4ebaafc067883f106f95c3bb7d1c25ab2ae203230e124f2609ed5e9f66600f0971942a466bc72047ed8a613d8008cc4696f0f8fb7284105640ffb925eb3a3"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)=ANY=[@ANYBLOB="2001c40000002ad0fdf5da3eae7e8a80673a60e1537890da775bd5605d9f8bf734e57b53cc4ca67e0e6e7d4f48390fae2bcd6b86f2c5bb4f9e3c2596f798bab656f44fcbbd7014efb92a1a37871352a6042266893a478449eccf6c044aebf3a53d4f6e01b57dbdce607104254b4b6c47d14dffa9b7822a98b95e9e7c7b701bffb4cd5859233b7818d5ae575e0917314c1b9d86b7afee0a971e73cfaf59115a8c345f968318dbee711fe1f1a2430677d924fb33ddbf01aeda102a99d3d75d285c10246bcb48a8a472e12c"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

4.461615361s ago: executing program 4 (id=432):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)
unshare(0x12000080)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f0000000080)=[{r1, 0x8080}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x4040, 0x5c)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async)
fcntl$setlease(r0, 0x400, 0x1) (async)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async)
unshare(0x12000080) (async)
signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async)
ppoll(&(0x7f0000000080)=[{r1, 0x8080}], 0x1, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000080)='./file1\x00', 0x4040, 0x5c) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r2, 0x22e7c000) (async)

4.326073903s ago: executing program 4 (id=436):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.988693534s ago: executing program 0 (id=459):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0)
userfaultfd(0x80001) (async)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4)
socket$nl_generic(0x11, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x6308c0, 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0)
ioctl$BLKRRPART(r8, 0x125f, 0x0) (async)
ioctl$BLKRRPART(r8, 0x125f, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x300090, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x300090, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000340)=r7)
umount2(&(0x7f0000000240)='./file0\x00', 0x1)

2.022573549s ago: executing program 0 (id=468):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000f3"], &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "30bc0af1"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x5b4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0x6b, "dd7bb2bee7522b85b3fa9038740774f455b478da1b6523db584dcb4679fec339758bfe0ec4bf03d8c97ce517d4ebaafc067883f106f95c3bb7d1c25ab2ae203230e124f2609ed5e9f66600f0971942a466bc72047ed8a613d8008cc4696f0f8fb7284105640ffb925eb3a3"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)=ANY=[@ANYBLOB="2001c40000002ad0fdf5da3eae7e8a80673a60e1537890da775bd5605d9f8bf734e57b53cc4ca67e0e6e7d4f48390fae2bcd6b86f2c5bb4f9e3c2596f798bab656f44fcbbd7014efb92a1a37871352a6042266893a478449eccf6c044aebf3a53d4f6e01b57dbdce607104254b4b6c47d14dffa9b7822a98b95e9e7c7b701bffb4cd5859233b7818d5ae575e0917314c1b9d86b7afee0a971e73cfaf59115a8c345f968318dbee711fe1f1a2430677d924fb33ddbf01aeda102a99d3d75d285c10246bcb48a8a472e12c"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

1.732548964s ago: executing program 5 (id=473):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x232601, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'ip6gre0\x00', @remote})
close_range(r3, 0xffffffffffffffff, 0x0)

1.661271574s ago: executing program 5 (id=474):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
futex_waitv(&(0x7f00000047c0)=[{0x6, &(0x7f0000004680)=0x6, 0x2}, {0x5, &(0x7f00000046c0)=0x5, 0x82}, {0x100, &(0x7f0000004700), 0x2}], 0x3, 0x0, 0x0, 0x1)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

1.597835846s ago: executing program 5 (id=475):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000500)) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x4044844) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x12080, 0x0)
ioctl$BLKRASET(r3, 0x1262, &(0x7f0000000240)=0x1fce2752) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000040801010000000000000000020000030900010073797a310000000005000300060000000900010073797a30000000000600024088be00000c000c8008000140000000064c00048008000240000000060800014000010000080001400000004008000140509323fa080002404102400000000908000140000000040800014000a1e02b17f1955fb7640000000500030021000000c2a3af440000b9c4c5d6f015cb007c73ec760059462319a222c6c5e4ffe9c4ab41914c2d9ad3cd6e0df8f44906ff7802465270fd50c984a7ad762bd1d032d3f2c8b47346248d462ee3f831f20bc575af87d7e9bdb9200c70ecfa88deafde3ba4a6d709a6f8cd1e11921d2e2e6ccab7eaf5a24e79163fab9da935228cb2423953c100"/294], 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x880) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x1, 0x2e}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fda={0x66646185, 0x9, 0x0, 0x3e}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}], 0x459, 0x0, &(0x7f0000000540)="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"}) (async)
fcntl$setsig(r3, 0xa, 0x2f) (async)
socket$tipc(0x1e, 0x5, 0x0)

1.597317796s ago: executing program 5 (id=476):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x16, 0x6, 0x7, 0x23, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d6, 0xf9, 0x7, 0xe4, 0x3, 0x80000000}, @sadb_lifetime={0x4, 0x1, 0xffffff76, 0x6, 0x0, 0x59e}, @sadb_key={0x14, 0x1, 0x4b8, 0x0, "3e0559f711ea3070e250b969888f31ee3da0b02e603401ccaad92863ccf3a868da5e9dcb2f5a99e9ff730da481615d1ddb4962ce19dde89dac2bc9a59ab2b6203dc0c5da3c8e09f8ae77c0d99220265fa973e3dda336a971b3d7cea6daef53d90ba00b10b7b1e0c8355965b63cbe733664ce5a63e16356782def3a1b016c5150dc92769b6286be0d9f1a76507a8e06a8fe178bda7b5010"}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_ident={0x2, 0xb, 0xb0a, 0x0, 0x1}]}, 0x118}}, 0x800) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3`\x97\xb9b\x85\xe7\xf9:\xdew\x9d\xcc\xb6\x7f\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1f\x01\x00\x00\x00\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\xa6L\xd9A\x81S\xbd \x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x04\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\x04n\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000ff7f02000000000002003e00eefffbff94020000000000004000000000000000cf000000000000000f0000002c8f3800010000000200000003000000970f0000045b0b43c8ad9adbb400000000000000c801000000000000e6"], 0x78) (async)
close(r2)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) (async)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) (async)
pread64(r0, &(0x7f0000001c40)=""/4096, 0x1000, 0x5)
utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001200)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5.\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\x03\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

1.588692446s ago: executing program 5 (id=477):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x2, 0xfffc}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24601, 0x0)
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x2b, 0x1ff, 0x1db7a81f4849ec1b, 0x1001, 0x3, 0x2, 0x4a47, 0x0, 0x0, 0x0, 0x3}}, 0x50)

1.195672722s ago: executing program 4 (id=478):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket(0x1, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB])
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)

1.138405743s ago: executing program 4 (id=479):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f00000001c0)=ANY=[], 0x32)

1.117498283s ago: executing program 4 (id=481):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1008, 0x3})
r1 = syz_io_uring_setup(0x3a6c, &(0x7f0000000000)={0x0, 0x2904, 0x10, 0x0, 0x107}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0xff7ffffd, 0x20, 0x1, 0x8000000, 0x0, r1}, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, 0x0, 0x0)
ppoll(&(0x7f00000005c0)=[{r0, 0x2000}, {r2, 0x10}], 0x2, &(0x7f0000000600), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @request_death], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
close(r3)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000140)=0x9)

1.046303974s ago: executing program 4 (id=483):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x20040080)
syz_usb_control_io(r0, 0x0, 0x0)
socket(0x29, 0xa, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x1})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000080)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)

739.828569ms ago: executing program 5 (id=486):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

451.180813ms ago: executing program 1 (id=488):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x888, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/46, 0x8d) (fail_nth: 1)

174.207268ms ago: executing program 1 (id=489):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f00000001c0)=ANY=[], 0x32)

118.432988ms ago: executing program 1 (id=490):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @enter_looper, @acquire_done={0x40106309, 0x3}], 0x806, 0x0, &(0x7f0000000600)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00')
write$eventfd(r4, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

84.150659ms ago: executing program 1 (id=491):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0)
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x888, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/46, 0x8d)

18.44425ms ago: executing program 1 (id=492):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in=@rand_addr=0x64010100, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x53, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x0, 0x2, 0x2f}, @flat=@handle={0x73682a85, 0x1101, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=493):
r0 = syz_open_dev$usbmon(&(0x7f0000002680), 0xfffffffffffffffa, 0x101042)
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0xf)
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0xa) (async)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) (async)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0xfffffff7, 0xf}) (async)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async)
r3 = epoll_create1(0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x149)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x6, 0x80, 0x7f, 0xf9, 0xc6, 0x5}, 0xc) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}], [{@obj_role={'obj_role', 0x3d, '&.]$.\xf3-^$'}}]}})
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdnd=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts.
[   23.343737][   T36] audit: type=1400 audit(1753515641.440:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.345326][  T281] cgroup: Unknown subsys name 'net'
[   23.366456][   T36] audit: type=1400 audit(1753515641.440:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.393883][   T36] audit: type=1400 audit(1753515641.460:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.394343][  T281] cgroup: Unknown subsys name 'devices'
[   23.575998][  T281] cgroup: Unknown subsys name 'hugetlb'
[   23.581665][  T281] cgroup: Unknown subsys name 'rlimit'
[   23.777005][   T36] audit: type=1400 audit(1753515641.870:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.800400][   T36] audit: type=1400 audit(1753515641.870:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.817185][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.825530][   T36] audit: type=1400 audit(1753515641.870:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.857314][   T36] audit: type=1400 audit(1753515641.930:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.867609][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.882964][   T36] audit: type=1400 audit(1753515641.930:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.917173][   T36] audit: type=1400 audit(1753515641.950:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.944139][   T36] audit: type=1400 audit(1753515641.950:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.864903][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.872085][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.879500][  T290] bridge_slave_0: entered allmulticast mode
[   24.885918][  T290] bridge_slave_0: entered promiscuous mode
[   24.897584][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.904670][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.911791][  T288] bridge_slave_0: entered allmulticast mode
[   24.918317][  T288] bridge_slave_0: entered promiscuous mode
[   24.928312][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.935435][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.942640][  T290] bridge_slave_1: entered allmulticast mode
[   24.949137][  T290] bridge_slave_1: entered promiscuous mode
[   24.958534][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.965718][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.972946][  T288] bridge_slave_1: entered allmulticast mode
[   24.979341][  T288] bridge_slave_1: entered promiscuous mode
[   24.985445][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.992755][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.000109][  T289] bridge_slave_0: entered allmulticast mode
[   25.007259][  T289] bridge_slave_0: entered promiscuous mode
[   25.021345][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.028600][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.035818][  T289] bridge_slave_1: entered allmulticast mode
[   25.042106][  T289] bridge_slave_1: entered promiscuous mode
[   25.115703][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.122775][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.130381][  T291] bridge_slave_0: entered allmulticast mode
[   25.136780][  T291] bridge_slave_0: entered promiscuous mode
[   25.143818][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.150877][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.157993][  T291] bridge_slave_1: entered allmulticast mode
[   25.164372][  T291] bridge_slave_1: entered promiscuous mode
[   25.281171][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.288276][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.295654][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.302786][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.328431][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.335538][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.342853][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.349937][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.360812][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.367900][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.375215][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.382599][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.428051][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.435971][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.443231][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.450624][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.458320][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.465893][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.487232][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.494412][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.506885][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.514185][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.537460][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.544591][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.565289][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.572459][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.582183][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.589284][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.599915][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.607017][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.621359][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.628495][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.643394][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.650536][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.695583][  T290] veth0_vlan: entered promiscuous mode
[   25.707579][  T289] veth0_vlan: entered promiscuous mode
[   25.734562][  T288] veth0_vlan: entered promiscuous mode
[   25.741423][  T289] veth1_macvtap: entered promiscuous mode
[   25.751778][  T290] veth1_macvtap: entered promiscuous mode
[   25.764252][  T291] veth0_vlan: entered promiscuous mode
[   25.789053][  T288] veth1_macvtap: entered promiscuous mode
[   25.813138][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   25.831883][  T291] veth1_macvtap: entered promiscuous mode
[   25.911465][  T316] rust_binder: 2: no such ref 1
[   25.918106][  T316] rust_binder: 2: no such ref 2
[   25.943391][  T317] tipc: Failed to remove unknown binding: 66,1,1/0:3309199078/3309199080
[   26.043377][  T323] rust_binder: 321 RLIMIT_NICE not set
[   26.286937][   T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   26.486299][   T64] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   26.513534][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.521684][   T64] usb 2-1: Product: syz
[   26.533505][   T64] usb 2-1: Manufacturer: syz
[   26.538168][   T64] usb 2-1: SerialNumber: syz
[   26.742366][   T64] rust_binder: 315: removing orphan mapping 0:1048
[   26.783913][  T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.813833][  T336] 9pnet_fd: Insufficient options for proto=fd
[   27.707916][  T384] bridge0: port 3(syz_tun) entered blocking state
[   27.714431][  T384] bridge0: port 3(syz_tun) entered disabled state
[   27.721225][  T384] syz_tun: entered allmulticast mode
[   27.727074][  T384] syz_tun: entered promiscuous mode
[   27.732622][  T384] bridge0: port 3(syz_tun) entered blocking state
[   27.739097][  T384] bridge0: port 3(syz_tun) entered forwarding state
[   27.761884][  T386] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   27.937657][  T402] rust_binder: Failed copying remainder into alloc: EFAULT
[   27.937695][  T402] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   27.945249][  T402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   27.953795][  T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:60
[   28.181036][  T410] bridge0: port 3(syz_tun) entered blocking state
[   28.196693][  T410] bridge0: port 3(syz_tun) entered disabled state
[   28.205897][  T410] syz_tun: entered allmulticast mode
[   28.211767][  T410] syz_tun: entered promiscuous mode
[   28.217360][  T410] bridge0: port 3(syz_tun) entered blocking state
[   28.224020][  T410] bridge0: port 3(syz_tun) entered forwarding state
[   28.434911][   T36] kauditd_printk_skb: 134 callbacks suppressed
[   28.434931][   T36] audit: type=1400 audit(1753515646.530:208): avc:  denied  { ioctl } for  pid=411 comm="syz.0.25" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4461 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   28.473904][   T36] audit: type=1400 audit(1753515646.570:209): avc:  denied  { getopt } for  pid=411 comm="syz.0.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.588040][  T421] =======================================================
[   28.588040][  T421] WARNING: The mand mount option has been deprecated and
[   28.588040][  T421]          and is ignored by this kernel. Remove the mand
[   28.588040][  T421]          option from the mount to silence this warning.
[   28.588040][  T421] =======================================================
[   28.593918][   T36] audit: type=1400 audit(1753515646.680:210): avc:  denied  { remount } for  pid=420 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   28.643545][  T421] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   28.675484][  T423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   28.688365][  T426] rust_binder: Write failure EFAULT in pid:74
[   28.688441][  T425] rust_binder: Write failure EFAULT in pid:74
[   28.692351][   T36] audit: type=1400 audit(1753515646.780:211): avc:  denied  { read append } for  pid=424 comm="syz.0.30" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   28.761033][   T36] audit: type=1400 audit(1753515646.780:212): avc:  denied  { open } for  pid=424 comm="syz.0.30" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   28.786644][   T36] audit: type=1400 audit(1753515646.780:213): avc:  denied  { connect } for  pid=424 comm="syz.0.30" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.811966][   T36] audit: type=1400 audit(1753515646.780:214): avc:  denied  { write } for  pid=424 comm="syz.0.30" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.836046][   T36] audit: type=1400 audit(1753515646.790:215): avc:  denied  { ioctl } for  pid=422 comm="syz.2.29" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   28.863708][   T36] audit: type=1400 audit(1753515646.930:216): avc:  denied  { watch } for  pid=432 comm="syz.2.33" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   28.890619][   T36] audit: type=1400 audit(1753515646.980:217): avc:  denied  { mounton } for  pid=432 comm="syz.2.33" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   28.939692][  T324] usb 2-1: USB disconnect, device number 2
[   28.977742][  T444] input: syz0 as /devices/virtual/input/input4
[   29.033812][  T451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'.
[   29.172216][  T459] tmpfs: Unknown parameter 'hu.–Ó£J	ge'
[   29.473559][  T324] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   29.623533][  T324] usb 1-1: Using ep0 maxpacket: 16
[   29.634925][  T324] usb 1-1: unable to get BOS descriptor or descriptor too short
[   29.653641][  T324] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config
[   29.673875][  T324] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   29.684519][  T324] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   29.703971][  T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.712033][  T324] usb 1-1: Product: syz
[   29.723554][  T324] usb 1-1: Manufacturer: syz
[   29.728273][  T324] usb 1-1: SerialNumber: syz
[   29.937111][  T305] rust_binder: 455: removing orphan mapping 0:1048
[   30.013251][  T488] fuse: Bad value for 'group_id'
[   30.018322][  T488] fuse: Bad value for 'group_id'
[   30.056550][  T493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'.
[   30.057091][  T492] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   30.069244][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.074212][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.089280][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.090502][  T324] usb 1-1: invalid UAC_HEADER (v1)
[   30.096232][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.108910][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.109907][  T324] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   30.116415][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.132029][  T324] usb 1-1: USB disconnect, device number 2
[   30.148940][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.169515][  T499] binder: Unknown parameter 'contextÀ'
[   30.266590][  T521] Zero length message leads to an empty skb
[   30.331482][  T530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   30.354221][  T530] tmpfs: Unknown parameter 'huys-'
[   30.401952][  T532] 9pnet_fd: Insufficient options for proto=fd
[   30.482982][  T548] FAULT_INJECTION: forcing a failure.
[   30.482982][  T548] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   30.511725][  T548] CPU: 0 UID: 0 PID: 548 Comm: syz.0.72 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040
[   30.511766][  T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   30.511790][  T548] Call Trace:
[   30.511798][  T548]  <TASK>
[   30.511807][  T548]  __dump_stack+0x21/0x30
[   30.511850][  T548]  dump_stack_lvl+0x10c/0x190
[   30.511878][  T548]  ? __cfi_dump_stack_lvl+0x10/0x10
[   30.511908][  T548]  dump_stack+0x19/0x20
[   30.511934][  T548]  should_fail_ex+0x3d9/0x530
[   30.511963][  T548]  should_fail+0xf/0x20
[   30.511989][  T548]  should_fail_usercopy+0x1e/0x30
[   30.512018][  T548]  _copy_to_user+0x24/0xa0
[   30.512052][  T548]  simple_read_from_buffer+0xed/0x160
[   30.512077][  T548]  proc_fail_nth_read+0x19e/0x210
[   30.512103][  T548]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   30.512128][  T548]  ? bpf_lsm_file_permission+0xd/0x20
[   30.512155][  T548]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   30.512188][  T548]  vfs_read+0x278/0xb60
[   30.512217][  T548]  ? inode_to_bdi+0x6d/0x100
[   30.512242][  T548]  ? __cfi_vfs_read+0x10/0x10
[   30.512265][  T548]  ? __kasan_check_write+0x18/0x20
[   30.512291][  T548]  ? mutex_lock+0x92/0x1c0
[   30.512321][  T548]  ? __cfi_mutex_lock+0x10/0x10
[   30.512351][  T548]  ? __fget_files+0x2c5/0x340
[   30.512386][  T548]  ksys_read+0x141/0x250
[   30.512414][  T548]  ? __kasan_check_write+0x18/0x20
[   30.512442][  T548]  ? __cfi_ksys_read+0x10/0x10
[   30.512472][  T548]  ? __kasan_check_write+0x18/0x20
[   30.512498][  T548]  ? fpregs_restore_userregs+0x11d/0x260
[   30.512522][  T548]  __x64_sys_read+0x7f/0x90
[   30.512551][  T548]  x64_sys_call+0x2638/0x2ee0
[   30.512582][  T548]  do_syscall_64+0x58/0xf0
[   30.512606][  T548]  ? clear_bhb_loop+0x50/0xa0
[   30.512637][  T548]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   30.512667][  T548] RIP: 0033:0x7f43e658d3bc
[   30.512697][  T548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   30.512716][  T548] RSP: 002b:00007f43e7428030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   30.512746][  T548] RAX: ffffffffffffffda RBX: 00007f43e67b5fa0 RCX: 00007f43e658d3bc
[   30.512765][  T548] RDX: 000000000000000f RSI: 00007f43e74280a0 RDI: 0000000000000004
[   30.512780][  T548] RBP: 00007f43e7428090 R08: 0000000000000000 R09: 0000000000000000
[   30.512796][  T548] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[   30.512810][  T548] R13: 0000000000000000 R14: 00007f43e67b5fa0 R15: 00007ffc9e2339b8
[   30.512830][  T548]  </TASK>
[   30.887955][  T556] batadv_slave_1: entered promiscuous mode
[   30.896424][  T555] batadv_slave_1: left promiscuous mode
[   30.920723][  T559] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   30.952280][  T564] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   30.968393][  T565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'.
[   31.143250][  T578] rust_binder: 48: no such ref 2
[   31.261275][  T588] overlayfs: missing 'workdir'
[   31.311441][  T590] 9pnet_fd: Insufficient options for proto=fd
[   31.353725][   T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.523515][   T64] usb 3-1: Using ep0 maxpacket: 32
[   31.529818][   T64] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   31.543532][   T64] usb 3-1: config 0 has no interface number 0
[   31.554939][   T64] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   31.580439][   T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.593783][   T64] usb 3-1: Product: syz
[   31.598099][   T64] usb 3-1: Manufacturer: syz
[   31.606165][   T64] usb 3-1: SerialNumber: syz
[   31.611739][   T64] usb 3-1: config 0 descriptor??
[   31.620345][   T64] smsc95xx v2.0.0
[   31.643525][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.677424][  T601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.677746][  T601] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   31.695262][  T601] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   31.703311][  T601] rust_binder: Read failure Err(EFAULT) in pid:128
[   31.732821][  T601] rust_binder: Error while translating object.
[   31.750391][  T601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.772334][  T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128
[   31.803535][   T10] usb 2-1: Using ep0 maxpacket: 32
[   31.835266][   T10] usb 2-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   31.858746][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[   31.865744][  T604] rust_binder: 131: no such ref 3
[   31.871031][   T10] usb 2-1: language id specifier not provided by device, defaulting to English
[   31.883789][   T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.40
[   31.893107][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.911598][   T10] usb 2-1: Product: syz
[   31.916156][   T10] usb 2-1: SerialNumber: syz
[   32.038436][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   32.049762][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   32.053994][  T610] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   32.070722][  T612] overlay: filesystem on ./bus is read-only
[   32.344364][   T10] usbhid 2-1:1.0: can't add hid device: -71
[   32.353600][   T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   32.368175][   T10] usb 2-1: USB disconnect, device number 3
[   32.661360][  T628] Invalid ELF header type: 2 != 1
[   32.702717][  T628] SELinux: security_context_str_to_sid () failed with errno=-22
[   32.963589][  T673] kvm: kvm [672]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000059) = 0x0
[   32.997987][  T671] 9pnet_fd: Insufficient options for proto=fd
[   33.072084][  T680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'.
[   33.143009][  T686] overlay: filesystem on ./bus not supported as upperdir
[   33.324066][  T692] 9pnet_fd: Insufficient options for proto=fd
[   33.335790][  T696] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.434403][   T12] bridge_slave_1: left allmulticast mode
[   33.440307][   T12] bridge_slave_1: left promiscuous mode
[   33.446076][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.462491][   T12] bridge_slave_0: left allmulticast mode
[   33.474088][   T12] bridge_slave_0: left promiscuous mode
[   33.480277][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.512512][   T36] kauditd_printk_skb: 80 callbacks suppressed
[   33.512531][   T36] audit: type=1400 audit(1753515651.600:298): avc:  denied  { getopt } for  pid=703 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.602289][   T36] audit: type=1400 audit(1753515651.690:299): avc:  denied  { mounton } for  pid=705 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   33.628230][   T12] veth1_macvtap: left promiscuous mode
[   33.634048][   T12] veth0_vlan: left promiscuous mode
[   33.712386][  T705] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.719528][  T705] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.726713][  T705] bridge_slave_0: entered allmulticast mode
[   33.733088][  T705] bridge_slave_0: entered promiscuous mode
[   33.739739][  T705] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.746936][  T705] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.754111][  T705] bridge_slave_1: entered allmulticast mode
[   33.760445][  T705] bridge_slave_1: entered promiscuous mode
[   33.819129][  T705] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.826237][  T705] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.833599][  T705] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.840830][  T705] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.865324][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.873132][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.883230][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.890360][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.902230][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.909341][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.940384][  T705] veth0_vlan: entered promiscuous mode
[   33.954324][  T705] veth1_macvtap: entered promiscuous mode
[   34.029130][  T716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[   34.045904][  T716] rust_binder: Error while translating object.
[   34.045945][  T716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   34.060457][  T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:177
[   34.081218][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[   34.120628][   T64] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   34.130339][   T64] usb 3-1: USB disconnect, device number 2
[   34.161567][  T729] tmpfs: Bad value for 'huge'
[   34.245879][  T747] rust_binder: Write failure EINVAL in pid:197
[   34.249829][   T36] audit: type=1400 audit(1753515652.340:300): avc:  denied  { listen } for  pid=745 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.290677][  T750] mmap: syz.0.141 (750): VmData 16494592 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   34.304134][  T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   34.337247][  T759] binder: Unknown parameter 'sU4Í^Nel'
[   34.463631][  T307] usb 4-1: Using ep0 maxpacket: 8
[   34.469741][  T307] usb 4-1: config 6 has an invalid interface number: 171 but max is 0
[   34.478018][  T307] usb 4-1: config 6 has no interface number 0
[   34.484335][  T307] usb 4-1: config 6 interface 171 has no altsetting 0
[   34.492570][  T307] usb 4-1: Dual-Role OTG device on HNP port
[   34.498803][  T307] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e
[   34.507967][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.516413][  T307] usb 4-1: Product: syz
[   34.520619][  T307] usb 4-1: Manufacturer: syz
[   34.525463][  T307] usb 4-1: SerialNumber: syz
[   34.573547][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   34.631515][   T36] audit: type=1326 audit(1753515652.720:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.2.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4592d8e9a9 code=0x0
[   34.723527][   T31] usb 1-1: Using ep0 maxpacket: 16
[   34.731106][   T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   34.734277][  T767] capability: warning: `syz.2.147' uses 32-bit capabilities (legacy support in use)
[   34.741630][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.758090][   T31] usb 1-1: Product: syz
[   34.762402][   T31] usb 1-1: Manufacturer: syz
[   34.767357][   T31] usb 1-1: SerialNumber: syz
[   34.774292][   T31] r8152-cfgselector 1-1: Unknown version 0x0000
[   34.780617][   T31] r8152-cfgselector 1-1: config 0 descriptor??
[   34.958855][   T36] audit: type=1400 audit(1753515653.050:302): avc:  denied  { write } for  pid=717 comm="syz.3.130" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   34.982188][  T307] usb_ehset_test 4-1:6.171: probe with driver usb_ehset_test failed with error -32
[   35.182935][  T718] exFAT-fs (rnullb0): invalid boot record signature
[   35.189860][  T718] exFAT-fs (rnullb0): failed to read boot sector
[   35.196619][  T718] exFAT-fs (rnullb0): failed to recognize exfat type
[   35.205439][  T599] usb 4-1: USB disconnect, device number 2
[   35.279345][  T307] r8152-cfgselector 1-1: USB disconnect, device number 3
[   35.295956][  T774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.149'.
[   35.315521][  T774] input: syz1 as /devices/virtual/input/input5
[   35.324107][  T774] exFAT-fs (rnullb0): invalid boot record signature
[   35.330937][  T774] exFAT-fs (rnullb0): failed to read boot sector
[   35.337855][  T774] exFAT-fs (rnullb0): failed to recognize exfat type
[   35.367438][   T36] audit: type=1400 audit(1753515653.460:303): avc:  denied  { map } for  pid=775 comm="syz.1.150" path="socket:[7281]" dev="sockfs" ino=7281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.392061][  T776] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   35.392086][  T776] rust_binder: Read failure Err(EFAULT) in pid:34
[   35.410251][   T36] audit: type=1400 audit(1753515653.460:304): avc:  denied  { read } for  pid=775 comm="syz.1.150" path="socket:[7281]" dev="sockfs" ino=7281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.498615][   T36] audit: type=1400 audit(1753515653.590:305): avc:  denied  { write } for  pid=783 comm="syz.2.153" name="ptype" dev="proc" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   35.757673][  T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   35.773019][  T793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'.
[   35.807377][  T797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   35.818027][  T799] rust_binder: Write failure EFAULT in pid:203
[   35.818529][   T36] audit: type=1400 audit(1753515653.910:306): avc:  denied  { read } for  pid=798 comm="syz.0.159" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   35.824315][  T797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7949 sclass=netlink_route_socket pid=797 comm=syz.1.158
[   35.826318][   T36] audit: type=1400 audit(1753515653.910:307): avc:  denied  { open } for  pid=798 comm="syz.0.159" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   35.935140][  T304] bridge_slave_1: left allmulticast mode
[   35.952811][  T304] bridge_slave_1: left promiscuous mode
[   35.963506][  T307] usb 3-1: Using ep0 maxpacket: 32
[   35.971292][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.974820][  T307] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   35.989311][  T304] bridge_slave_0: left allmulticast mode
[   35.993504][  T307] usb 3-1: config 0 has no interface number 0
[   36.001114][  T304] bridge_slave_0: left promiscuous mode
[   36.008185][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.023750][  T307] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   36.034277][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.042440][  T307] usb 3-1: Product: syz
[   36.046717][  T307] usb 3-1: Manufacturer: syz
[   36.051442][  T307] usb 3-1: SerialNumber: syz
[   36.077930][  T307] usb 3-1: config 0 descriptor??
[   36.084012][  T307] smsc95xx v2.0.0
[   36.163732][   T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   36.173481][  T304] veth1_macvtap: left promiscuous mode
[   36.179894][  T304] veth0_vlan: left promiscuous mode
[   36.271263][  T813] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.278630][  T813] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.285784][  T813] bridge_slave_0: entered allmulticast mode
[   36.293368][  T813] bridge_slave_0: entered promiscuous mode
[   36.300308][  T813] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.307569][  T813] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.315225][  T813] bridge_slave_1: entered allmulticast mode
[   36.321632][  T813] bridge_slave_1: entered promiscuous mode
[   36.324698][   T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   36.338546][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.349663][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.359563][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   36.374546][   T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   36.384201][   T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   36.392393][   T31] usb 2-1: Manufacturer: syz
[   36.401941][   T31] usb 2-1: config 0 descriptor??
[   36.422912][  T818] overlayfs: failed to resolve './file1': -2
[   36.472528][  T813] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.479654][  T813] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.487002][  T813] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.492793][  T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   36.494168][  T813] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.516072][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.523509][  T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   36.532803][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.543385][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.550533][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.567046][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.574174][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.577311][  T821] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   36.591227][  T821] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   36.609815][  T821] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   36.623251][  T813] veth0_vlan: entered promiscuous mode
[   36.624144][  T821] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   36.641000][  T813] veth1_macvtap: entered promiscuous mode
[   36.783188][  T829] fuse: Unknown parameter ''
[   36.807608][  T831] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   36.815798][  T831] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   36.824683][  T831] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   36.832908][  T831] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   36.842173][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   36.848886][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   36.857180][  T836] binder: Bad value for 'max'
[   36.862774][  T831] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   36.875197][   T31] usb 2-1: USB disconnect, device number 4
[   36.931376][  T840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=840 comm=syz.1.174
[   36.949632][  T307] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[   36.954962][  T844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[   36.972637][  T307] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   36.982220][  T844] rust_binder: Write failure EFAULT in pid:8
[   36.991300][  T840] rust_binder: inc_ref_done called when no active inc_refs
[   36.996057][  T307] usb 3-1: USB disconnect, device number 3
[   37.012247][  T840] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   37.033510][  T840] rust_binder: Write failure EINVAL in pid:58
[   37.114416][  T852] rust_binder: 846 RLIMIT_NICE not set
[   37.158387][  T855] capability: warning: `syz.1.179' uses deprecated v2 capabilities in a way that may be insecure
[   37.247009][  T860] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.254298][  T860] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.266777][  T860] bridge0: entered promiscuous mode
[   37.272087][  T860] bridge0: entered allmulticast mode
[   37.279070][  T860] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.286171][  T860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.293539][  T860] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.300677][  T860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.524537][  T882] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   37.531759][  T882] rust_binder: Write failure EINVAL in pid:70
[   37.893546][   T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   38.033558][   T64] usb 3-1: device descriptor read/64, error -71
[   38.044025][  T902] rust_binder: 19: no such ref 0
[   38.049326][  T902] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   38.056540][  T902] rust_binder: Write failure EINVAL in pid:19
[   38.078255][  T908] rust_binder: 24: no such ref 1
[   38.089712][  T908] rust_binder: 24: no such ref 2
[   38.201115][  T916] rust_binder: 912 RLIMIT_NICE not set
[   38.237646][  T929] random: crng reseeded on system resumption
[   38.283573][   T64] usb 3-1: device descriptor read/64, error -71
[   38.523647][   T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   38.659461][   T64] usb 3-1: device descriptor read/64, error -71
[   38.903547][   T64] usb 3-1: device descriptor read/64, error -71
[   38.969289][    T9] rust_binder: 907: removing orphan mapping 0:1048
[   38.985175][  T943] rtc_cmos 00:00: Alarms can be up to one day in the future
[   39.013651][   T64] usb usb3-port1: attempt power cycle
[   39.141267][  T946] input: syz0 as /devices/virtual/input/input6
[   39.179071][  T949] rust_binder: Error while translating object.
[   39.179119][  T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   39.185722][  T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:34
[   39.219131][  T952] vcan0: entered allmulticast mode
[   39.220988][  T954] overlay: Unknown parameter 'smackfsroot'
[   39.239435][   T36] kauditd_printk_skb: 21 callbacks suppressed
[   39.239454][   T36] audit: type=1400 audit(1753515657.320:329): avc:  denied  { relabelfrom } for  pid=951 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   39.265202][   T36] audit: type=1400 audit(1753515657.320:330): avc:  denied  { relabelto } for  pid=951 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   39.296358][   T36] audit: type=1400 audit(1753515657.390:331): avc:  denied  { ioctl } for  pid=959 comm="syz.1.213" path="socket:[7156]" dev="sockfs" ino=7156 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.354577][   T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   39.372286][   T36] audit: type=1400 audit(1753515657.440:332): avc:  denied  { watch watch_reads } for  pid=969 comm="syz.1.215" path="/32" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.411687][   T36] audit: type=1400 audit(1753515657.440:333): avc:  denied  { read } for  pid=969 comm="syz.1.215" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.441436][   T36] audit: type=1400 audit(1753515657.440:334): avc:  denied  { open } for  pid=969 comm="syz.1.215" path="/32/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.466553][   T36] audit: type=1400 audit(1753515657.440:335): avc:  denied  { ioctl } for  pid=969 comm="syz.1.215" path="/32/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.493594][   T64] usb 3-1: device descriptor read/8, error -71
[   39.558693][  T985] binder: Bad value for 'max'
[   39.585300][   T36] audit: type=1400 audit(1753515657.680:336): avc:  denied  { read write } for  pid=987 comm="syz.1.223" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.610831][   T36] audit: type=1400 audit(1753515657.680:337): avc:  denied  { open } for  pid=987 comm="syz.1.223" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.635285][   T64] usb 3-1: device descriptor read/8, error -71
[   39.674029][ T1003] rust_binder: 1002 RLIMIT_NICE not set
[   39.679356][   T10] rust_binder: 1000: removing orphan mapping 0:4240
[   39.701458][ T1005] rust_binder: Failed copying remainder into alloc: EFAULT
[   39.701462][ T1006] rust_binder: Failed copying remainder into alloc: EFAULT
[   39.701482][ T1005] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   39.708833][ T1006] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   39.716433][ T1005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   39.724459][ T1006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   39.732795][ T1005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:126
[   39.742088][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:126
[   39.777190][   T36] audit: type=1326 audit(1753515657.870:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430998e9a9 code=0x7ffc0000
[   39.777897][ T1008] rust_binder: 129: no such ref 2
[   39.845648][ T1012] raw_sendmsg: syz.1.231 forgot to set AF_INET. Fix it!
[   39.855013][ T1012] tmpfs: Unknown parameter 'huzeߟ·è!ŸâS'
[   39.883525][   T64] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   39.893520][  T599] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.908929][   T64] usb 3-1: device descriptor read/8, error -71
[   39.926060][ T1016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'.
[   39.935317][ T1016] netlink: 21 bytes leftover after parsing attributes in process `syz.1.233'.
[   39.944310][ T1016] netlink: 'syz.1.233': attribute type 2 has an invalid length.
[   39.952075][ T1016] netlink: 21 bytes leftover after parsing attributes in process `syz.1.233'.
[   40.044508][   T64] usb 3-1: device descriptor read/8, error -71
[   40.053563][  T599] usb 1-1: Using ep0 maxpacket: 32
[   40.064249][  T599] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   40.072406][  T599] usb 1-1: config 0 has no interface number 0
[   40.080460][  T599] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   40.090757][  T599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.098833][  T599] usb 1-1: Product: syz
[   40.103020][  T599] usb 1-1: Manufacturer: syz
[   40.108000][  T599] usb 1-1: SerialNumber: syz
[   40.115296][  T599] usb 1-1: config 0 descriptor??
[   40.123229][  T599] smsc95xx v2.0.0
[   40.153636][   T64] usb usb3-port1: unable to enumerate USB device
[   40.377253][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'.
[   40.451684][ T1036] rust_binder: 49: no such ref 1
[   40.460376][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[   40.461081][ T1037] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.500544][ T1041] rust_binder: 54: no such ref 3
[   40.529508][  T599] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   40.543500][  T599] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   40.880369][ T1067] IPv4: Oversized IP packet from 172.20.20.170
[   40.886821][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.893039][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.900959][ T1067] IPv4: Oversized IP packet from 172.20.20.170
[   40.907388][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.913673][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.923756][ T1067] IPv4: Oversized IP packet from 172.20.20.170
[   40.930146][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.936451][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   40.943774][ T1067] IPv4: Oversized IP packet from 172.20.20.170
[   40.959005][ T1069] rust_binder: Error while translating object.
[   40.959055][ T1069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   40.973756][ T1069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:156
[   41.378217][ T1085] syz.1.257 uses obsolete (PF_INET,SOCK_PACKET)
[   41.701628][ T1091] incfs: Error accessing: ./file0.
[   41.713532][ T1091] incfs: mount failed -2
[   41.900428][ T1097] rust_binder: Got transaction with invalid offset.
[   41.900473][ T1097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.920239][ T1097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   41.963584][ T1098] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.963701][ T1099] rust_binder: Got transaction with invalid offset.
[   41.974474][ T1099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.987049][ T1099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   42.074176][ T1102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.316185][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'.
[   42.381737][  T599] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[   42.393366][  T599] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   42.401914][   T64] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   42.417794][  T599] usb 1-1: USB disconnect, device number 4
[   42.533521][   T64] usb 3-1: device descriptor read/64, error -71
[   42.715707][ T1112] fuse: Bad value for 'fd'
[   42.773562][   T64] usb 3-1: device descriptor read/64, error -71
[   43.013563][   T64] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   43.148808][   T64] usb 3-1: device descriptor read/64, error -71
[   43.393516][   T64] usb 3-1: device descriptor read/64, error -71
[   43.503643][   T64] usb usb3-port1: attempt power cycle
[   43.647109][  T599] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   43.721477][ T1164] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   43.813609][  T599] usb 5-1: Using ep0 maxpacket: 8
[   43.823893][  T599] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.835084][  T599] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   43.845514][   T64] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   43.852797][ T1168] ./cgroup: Can't lookup blockdev
[   43.853257][  T599] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[   43.879859][  T599] usb 5-1: config 1 interface 0 has no altsetting 0
[   43.887841][   T64] usb 3-1: device descriptor read/8, error -71
[   43.894923][  T599] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.904329][  T599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.912360][  T599] usb 5-1: Product: syz
[   43.916599][  T599] usb 5-1: Manufacturer: syz
[   43.921228][  T599] usb 5-1: SerialNumber: syz
[   43.927331][ T1150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   43.934609][ T1150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   44.013583][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   44.029142][   T64] usb 3-1: device descriptor read/8, error -71
[   44.144071][  T599] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[   44.163676][  T599] usb 5-1: USB disconnect, device number 2
[   44.184725][   T10] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[   44.192957][   T10] usb 2-1: config 0 has no interface number 1
[   44.203765][   T10] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   44.223529][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   44.235579][   T10] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[   44.253535][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   44.261585][   T10] usb 2-1: SerialNumber: syz
[   44.267086][   T10] usb 2-1: config 0 descriptor??
[   44.293536][   T64] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   44.314569][   T64] usb 3-1: device descriptor read/8, error -71
[   44.339522][   T36] kauditd_printk_skb: 41 callbacks suppressed
[   44.339541][   T36] audit: type=1400 audit(1753515662.430:380): avc:  denied  { bind } for  pid=1203 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   44.444466][   T64] usb 3-1: device descriptor read/8, error -71
[   44.474887][   T36] audit: type=1400 audit(1753515662.570:381): avc:  denied  { read } for  pid=1165 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   44.526396][ T1166] overlayfs: missing 'lowerdir'
[   44.534142][   T10] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[   44.541472][   T10] usb 2-1: No valid video chain found.
[   44.548467][   T10] usb 2-1: USB disconnect, device number 5
[   44.555268][   T64] usb usb3-port1: unable to enumerate USB device
[   44.613553][   T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   44.661850][   T36] audit: type=1400 audit(1753515662.750:382): avc:  denied  { setopt } for  pid=1206 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   44.764749][   T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   44.773904][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.782499][   T45] usb 1-1: config 0 descriptor??
[   45.115702][   T36] audit: type=1400 audit(1753515663.210:383): avc:  denied  { write } for  pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8796 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   45.182736][   T36] audit: type=1400 audit(1753515663.270:384): avc:  denied  { ioctl } for  pid=1213 comm="syz.2.302" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   45.265184][   T36] audit: type=1400 audit(1753515663.350:385): avc:  denied  { execute } for  pid=1215 comm="syz.2.303" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   45.392026][   T36] audit: type=1400 audit(1753515663.480:386): avc:  denied  { map } for  pid=1243 comm="syz.2.305" path="socket:[10097]" dev="sockfs" ino=10097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   45.415673][   T36] audit: type=1400 audit(1753515663.480:387): avc:  denied  { read } for  pid=1243 comm="syz.2.305" path="socket:[10097]" dev="sockfs" ino=10097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   45.415858][   T45] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   45.468132][   T45] asix 1-1:0.0: probe with driver asix failed with error -61
[   46.022007][ T1260] binder: Unknown parameter 'stató'
[   46.295983][ T1268] fuse: Unknown parameter ''
[   46.321105][ T1273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.321136][ T1273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[   46.347004][ T1276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[   46.362243][ T1276] rust_binder: Error while translating object.
[   46.371954][ T1276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   46.381787][ T1276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:144
[   46.388333][   T36] audit: type=1400 audit(1753515664.470:388): avc:  denied  { bind } for  pid=1277 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.604284][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113
[   46.693541][   T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   46.795538][   T36] audit: type=1400 audit(1753515664.890:389): avc:  denied  { ioctl } for  pid=1294 comm="syz.4.319" path="socket:[8930]" dev="sockfs" ino=8930 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.820526][ T1295] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   46.857757][ T1299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'.
[   46.867079][ T1299] bridge_slave_1: left allmulticast mode
[   46.872913][ T1299] bridge_slave_1: left promiscuous mode
[   46.878951][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.886947][ T1299] bridge_slave_0: left allmulticast mode
[   46.892790][ T1299] bridge_slave_0: left promiscuous mode
[   46.899547][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.915757][   T45] usb 3-1: Using ep0 maxpacket: 16
[   46.922551][   T45] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   46.932092][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.940912][   T45] usb 3-1: config 0 descriptor??
[   46.949377][   T45] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   46.984366][ T1300] overlay: Unknown parameter 'subj_role'
[   47.147041][   T45] usb 3-1: Detected FT232B
[   47.350823][  T599] usb 1-1: USB disconnect, device number 5
[   47.530476][ T1319] FAT-fs (rnullb0): bogus number of reserved sectors
[   47.537297][ T1319] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   47.547559][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148
[   47.548648][   T45] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   47.749158][   T45] usb 3-1: USB disconnect, device number 12
[   47.756587][   T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   47.766751][   T45] ftdi_sio 3-1:0.0: device disconnected
[   47.835221][ T1346] binder: Unknown parameter '18446744073709551615'
[   47.845356][ T1346] syzkaller0: entered promiscuous mode
[   47.851001][ T1346] syzkaller0: entered allmulticast mode
[   47.874289][ T1348] netlink: 44 bytes leftover after parsing attributes in process `syz.1.338'.
[   47.883247][ T1348] netlink: 'syz.1.338': attribute type 6 has an invalid length.
[   47.890944][ T1348] netlink: 'syz.1.338': attribute type 5 has an invalid length.
[   47.898754][ T1348] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   48.013083][ T1366] incfs: mount failed -22
[   48.017673][ T1366] incfs: mount failed -22
[   48.022200][ T1366] incfs: mount failed -22
[   48.026711][ T1366] incfs: mount failed -22
[   48.031232][ T1366] incfs: mount failed -22
[   48.035770][ T1366] incfs: mount failed -22
[   48.040206][ T1366] incfs: mount failed -22
[   48.044758][ T1366] incfs: mount failed -22
[   48.049208][ T1366] incfs: mount failed -22
[   48.053715][ T1366] incfs: mount failed -22
[   48.058431][ T1366] incfs: mount failed -22
[   48.063024][ T1366] incfs: Options parsing error. -22
[   48.069424][ T1366] incfs: mount failed -22
[   48.088711][ T1372] netlink: 84 bytes leftover after parsing attributes in process `syz.4.345'.
[   48.101590][ T1371] netlink: 84 bytes leftover after parsing attributes in process `syz.4.345'.
[   48.675627][ T1388] input: syz0 as /devices/virtual/input/input7
[   48.888348][ T1391] rust_binder: 162: no such ref 2
[   48.949761][ T1397] netlink: 68 bytes leftover after parsing attributes in process `syz.4.353'.
[   48.967299][ T1397] can0: slcan on ttyS3.
[   49.025121][ T1396] can0 (unregistered): slcan off ttyS3.
[   49.089724][ T1416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'.
[   49.143538][  T305] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   49.314708][  T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.335689][  T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.357895][  T305] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   49.384302][  T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.414778][  T305] usb 3-1: config 0 descriptor??
[   49.583554][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   49.723516][   T10] usb 2-1: device descriptor read/64, error -71
[   49.823922][  T305] hkems 0003:2006:0118.0001: unknown main item tag 0x7
[   49.838831][  T305] hkems 0003:2006:0118.0001: item fetching failed at offset 6/7
[   49.855974][  T305] hkems 0003:2006:0118.0001: parse failed
[   49.868594][  T305] hkems 0003:2006:0118.0001: probe with driver hkems failed with error -22
[   49.973546][   T10] usb 2-1: device descriptor read/64, error -71
[   50.184096][   T64] usb 3-1: USB disconnect, device number 13
[   50.223533][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   50.224037][  T305] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.373514][   T10] usb 2-1: device descriptor read/64, error -71
[   50.384946][  T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.395392][  T305] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   50.408670][  T305] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   50.418004][  T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.427328][  T305] usb 5-1: config 0 descriptor??
[   50.434257][  T305] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   50.623520][   T10] usb 2-1: device descriptor read/64, error -71
[   50.674404][ T1460] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   50.684560][   T36] kauditd_printk_skb: 33 callbacks suppressed
[   50.684579][   T36] audit: type=1400 audit(1753515668.780:423): avc:  denied  { relabelto } for  pid=1459 comm="syz.0.364" name="file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   50.733616][   T10] usb usb2-port1: attempt power cycle
[   50.735439][   T36] audit: type=1400 audit(1753515668.810:424): avc:  denied  { associate } for  pid=1459 comm="syz.0.364" name="file0" dev="tmpfs" ino=664 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[   50.775786][   T36] audit: type=1400 audit(1753515668.870:425): avc:  denied  { read write } for  pid=1459 comm="syz.0.364" name="file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   50.803181][   T36] audit: type=1400 audit(1753515668.870:426): avc:  denied  { open } for  pid=1459 comm="syz.0.364" path="/107/file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   50.915911][   T36] audit: type=1400 audit(1753515669.010:427): avc:  denied  { unlink } for  pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   51.009910][   T36] audit: type=1400 audit(1753515669.100:428): avc:  denied  { ioctl } for  pid=1462 comm="syz.0.365" path="socket:[11282]" dev="sockfs" ino=11282 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.101235][ T1467] overlayfs: conflicting lowerdir path
[   51.103585][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   51.144144][ T1469] overlayfs: missing 'lowerdir'
[   51.144703][   T10] usb 2-1: device descriptor read/8, error -71
[   51.214255][ T1473] fuse: Invalid rootmode
[   51.294526][   T10] usb 2-1: device descriptor read/8, error -71
[   51.543551][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   51.575467][   T10] usb 2-1: device descriptor read/8, error -71
[   51.714430][   T10] usb 2-1: device descriptor read/8, error -71
[   51.823602][   T10] usb usb2-port1: unable to enumerate USB device
[   51.945598][ T1485] loop7: detected capacity change from 0 to 7
[   52.096551][ T1488] incfs_lookup_dentry err:-13
[   52.197457][   T36] audit: type=1400 audit(1753515670.290:429): avc:  denied  { unlink } for  pid=288 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.222089][    C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   52.231903][    C1] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   52.259492][ T1490] bridge0: port 3(syz_tun) entered disabled state
[   52.267056][ T1490] syz_tun (unregistering): left allmulticast mode
[   52.275032][ T1490] syz_tun (unregistering): left promiscuous mode
[   52.281564][ T1490] bridge0: port 3(syz_tun) entered disabled state
[   52.319307][   T12] bridge_slave_1: left allmulticast mode
[   52.325067][   T12] bridge_slave_1: left promiscuous mode
[   52.339538][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.364164][   T12] bridge_slave_0: left allmulticast mode
[   52.369874][   T12] bridge_slave_0: left promiscuous mode
[   52.396333][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.567852][   T12] veth1_macvtap: left promiscuous mode
[   52.576399][   T12] veth0_vlan: left promiscuous mode
[   52.852531][ T1505] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.875800][ T1505] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.894513][ T1505] bridge_slave_0: entered allmulticast mode
[   52.912478][ T1505] bridge_slave_0: entered promiscuous mode
[   52.933334][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.940447][ T1505] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.947556][ T1505] bridge_slave_1: entered allmulticast mode
[   52.955089][ T1505] bridge_slave_1: entered promiscuous mode
[   52.989880][  T305] usb 5-1: USB disconnect, device number 3
[   53.080902][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.088024][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.095377][ T1505] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.102582][ T1505] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.134569][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.142340][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.154534][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.161660][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.174199][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.181269][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.242170][ T1505] veth0_vlan: entered promiscuous mode
[   53.267335][   T36] audit: type=1326 audit(1753515671.350:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1525 comm="syz.0.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43e658e9a9 code=0x0
[   53.300721][ T1505] veth1_macvtap: entered promiscuous mode
[   53.345401][   T36] audit: type=1400 audit(1753515671.440:431): avc:  denied  { mounton } for  pid=1505 comm="syz-executor" path="/root/syzkaller.YLJ6um/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   53.472017][ T1540] fuse: Bad value for 'fd'
[   53.505196][ T1543] can0: slcan on ptm0.
[   53.570397][  T305] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   53.605802][ T1533] can0 (unregistered): slcan off ptm0.
[   53.658628][ T1563] netlink: 'syz.5.392': attribute type 27 has an invalid length.
[   53.704426][ T1563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   53.704465][ T1563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:6
[   53.734574][  T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   53.763989][  T305] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   53.786891][  T305] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   53.802526][  T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.815136][  T305] usb 5-1: config 0 descriptor??
[   53.826749][  T305] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   54.003533][   T64] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   54.133614][   T64] usb 2-1: device descriptor read/64, error -71
[   54.150340][   T36] audit: type=1326 audit(1753515672.240:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1590 comm="syz.0.396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43e658e9a9 code=0x0
[   54.204242][ T1592] binder: Bad value for 'stats'
[   54.373534][   T64] usb 2-1: device descriptor read/64, error -71
[   54.613560][   T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   54.723570][  T599] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   54.743533][   T64] usb 2-1: device descriptor read/64, error -71
[   54.873575][  T599] usb 6-1: Using ep0 maxpacket: 32
[   54.879834][  T599] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   54.888160][  T599] usb 6-1: config 0 has no interface number 0
[   54.895825][  T599] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   54.904967][  T599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.912993][  T599] usb 6-1: Product: syz
[   54.917385][  T599] usb 6-1: Manufacturer: syz
[   54.922103][  T599] usb 6-1: SerialNumber: syz
[   54.927611][  T599] usb 6-1: config 0 descriptor??
[   54.933355][  T599] smsc95xx v2.0.0
[   54.983535][   T64] usb 2-1: device descriptor read/64, error -71
[   55.045944][ T1612] binder: Bad value for 'max'
[   55.045947][ T1613] binder: Bad value for 'max'
[   55.093929][   T64] usb usb2-port1: attempt power cycle
[   55.338823][  T599] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   55.349790][  T599] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   55.433750][   T64] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   55.454575][   T64] usb 2-1: device descriptor read/8, error -71
[   55.584548][   T64] usb 2-1: device descriptor read/8, error -71
[   55.823529][   T64] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   55.844629][   T64] usb 2-1: device descriptor read/8, error -71
[   55.978531][   T64] usb 2-1: device descriptor read/8, error -71
[   55.980513][ T1626] SELinux:  policydb version -1476638332 does not match my version range 15-33
[   55.984820][   T36] audit: type=1400 audit(1753515674.070:433): avc:  denied  { load_policy } for  pid=1625 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   55.994411][ T1626] SELinux: failed to load policy
[   56.019580][ T1626] /dev/rnullb0: Can't open blockdev
[   56.056606][   T36] audit: type=1400 audit(1753515674.150:434): avc:  denied  { bind } for  pid=1630 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   56.080941][   T36] audit: type=1400 audit(1753515674.150:435): avc:  denied  { name_bind } for  pid=1630 comm="syz.0.410" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   56.101992][   T36] audit: type=1400 audit(1753515674.150:436): avc:  denied  { node_bind } for  pid=1630 comm="syz.0.410" saddr=172.30.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   56.124400][   T64] usb usb2-port1: unable to enumerate USB device
[   56.164448][   T36] audit: type=1400 audit(1753515674.260:437): avc:  denied  { ioctl } for  pid=1640 comm="syz.0.413" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   56.328450][   T64] usb 5-1: USB disconnect, device number 4
[   56.452102][   T10] rust_binder: 1654: removing orphan mapping 0:1048
[   56.561981][  T599] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   56.572846][  T599] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32
[   56.573341][ T1668] 9pnet_fd: Insufficient options for proto=fd
[   56.673555][   T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   56.791443][  T305] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   56.799838][  T305] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   56.829202][   T36] audit: type=1400 audit(1753515674.920:438): avc:  denied  { map } for  pid=1669 comm="syz.1.423" path="socket:[11647]" dev="sockfs" ino=11647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   56.853508][   T64] usb 5-1: Using ep0 maxpacket: 16
[   56.883266][   T64] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[   56.897074][   T64] usb 5-1: config 0 has no interface number 0
[   56.903228][   T64] usb 5-1: config 0 interface 113 has no altsetting 0
[   56.911957][   T64] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[   56.921554][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.929796][   T64] usb 5-1: Product: syz
[   56.934161][   T64] usb 5-1: Manufacturer: syz
[   56.938842][   T64] usb 5-1: SerialNumber: syz
[   56.951176][   T64] usb 5-1: config 0 descriptor??
[   57.209373][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.218904][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.232174][   T64] usb 5-1: USB disconnect, device number 5
[   57.247581][ T1678] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   57.256274][   T36] audit: type=1400 audit(1753515675.350:439): avc:  denied  { execute } for  pid=1677 comm="syz.4.424" name="file0" dev="ramfs" ino=11660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   57.256322][ T1678] process 'syz.4.424' launched './file0' with NULL argv: empty string added
[   57.287978][   T36] audit: type=1400 audit(1753515675.380:440): avc:  denied  { execute_no_trans } for  pid=1677 comm="syz.4.424" path="/file0" dev="ramfs" ino=11660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   57.323392][ T1680] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   57.331677][ T1680] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   57.340677][ T1680] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   57.348875][ T1680] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   57.587240][  T305] usb 6-1: USB disconnect, device number 2
[   57.604118][  T599] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   57.703535][   T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   57.764592][  T599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   57.775059][  T599] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   57.787979][  T599] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   57.797093][  T599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.806389][  T599] usb 1-1: config 0 descriptor??
[   57.816659][  T599] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   57.853554][   T64] usb 5-1: Using ep0 maxpacket: 16
[   57.861374][   T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.870525][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.878731][   T64] usb 5-1: Product: syz
[   57.883015][   T64] usb 5-1: Manufacturer: syz
[   57.887691][   T64] usb 5-1: SerialNumber: syz
[   57.923552][  T305] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   57.953635][   T31] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[   58.073852][  T305] usb 6-1: Using ep0 maxpacket: 16
[   58.080190][  T305] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.091429][  T305] usb 6-1: config 0 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   58.104688][  T305] usb 6-1: config 0 interface 0 has no altsetting 0
[   58.111512][  T305] usb 6-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00
[   58.120775][  T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.130568][   T31] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   58.139145][  T305] usb 6-1: config 0 descriptor??
[   58.144507][   T31] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   58.153415][   T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   58.164909][   T31] usb 2-1: config 1 has no interface number 0
[   58.171507][   T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   58.182777][   T31] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   58.195845][   T31] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   58.204958][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.256538][   T64] cdc_ncm 5-1:1.0: bind() failure
[   58.263820][   T64] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   58.270663][   T64] cdc_ncm 5-1:1.1: bind() failure
[   58.278220][   T64] usb 5-1: USB disconnect, device number 6
[   58.354903][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.363685][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.419234][   T36] audit: type=1400 audit(1753515676.510:441): avc:  denied  { ioctl } for  pid=1687 comm="syz.1.429" path="socket:[11681]" dev="sockfs" ino=11681 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   58.464844][   T31] usb 2-1: USB disconnect, device number 14
[   58.574257][  T305] wacom 0003:056A:0019.0003: unknown main item tag 0x0
[   58.581279][  T305] wacom 0003:056A:0019.0003: unknown main item tag 0x0
[   58.588315][  T305] wacom 0003:056A:0019.0003: unknown main item tag 0x0
[   58.595336][  T305] wacom 0003:056A:0019.0003: unknown main item tag 0x0
[   58.602441][  T305] wacom 0003:056A:0019.0003: Unknown device_type for 'HID 056a:0019'. Assuming pen.
[   58.612714][  T305] wacom 0003:056A:0019.0003: hidraw0: USB HID v0.05 Device [HID 056a:0019] on usb-dummy_hcd.5-1/input0
[   58.624703][  T305] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0019.0003/input/input8
[   58.814111][  T305] usb 6-1: USB disconnect, device number 3
[   58.861868][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'.
[   58.919061][ T1703] fuse: Bad value for 'fd'
[   58.986030][   T36] audit: type=1400 audit(1753515677.080:442): avc:  denied  { create } for  pid=1706 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   59.019447][ T1712] binder: Unknown parameter '°®d'
[   59.040535][ T1714] __vm_enough_memory: pid: 1714, comm: syz.4.432, bytes: 18014402804453376 not enough memory for the allocation
[   59.040750][ T1715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300
[   59.055160][ T1717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300
[   59.136092][ T1723] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   59.153181][ T1723] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   59.161747][ T1723] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   59.169759][ T1723] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   59.313548][   T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   59.424437][ T1734] fuse: Bad value for 'fd'
[   59.463524][   T64] usb 5-1: Using ep0 maxpacket: 32
[   59.474585][   T64] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   59.482726][   T64] usb 5-1: config 0 has no interface number 0
[   59.495237][   T64] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   59.504436][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.512586][   T64] usb 5-1: Product: syz
[   59.523495][   T64] usb 5-1: Manufacturer: syz
[   59.528187][   T64] usb 5-1: SerialNumber: syz
[   59.533653][   T64] usb 5-1: config 0 descriptor??
[   59.544012][   T64] smsc95xx v2.0.0
[   59.720824][ T1760] fuse: Bad value for 'fd'
[   59.743553][ T1762] binder: Bad value for 'stats'
[   59.771152][ T1764] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.772733][ T1764] rust_binder: inc_ref_done called when no active inc_refs
[   59.943090][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   59.962867][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   60.024190][ T1773] SELinux: ebitmap: truncated map
[   60.029422][ T1773] SELinux: failed to load policy
[   60.381621][   T10] usb 1-1: USB disconnect, device number 6
[   60.455357][ T1788] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.169715][ T1800] overlayfs: failed to resolve './file0/../file0': -2
[   61.183109][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   61.194142][   T64] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[   61.458601][ T1816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'.
[   61.467680][ T1816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'.
[   61.563573][  T305] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   61.671982][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   61.672000][   T36] audit: type=1400 audit(1753515679.760:446): avc:  denied  { ioctl } for  pid=1820 comm="syz.5.473" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   61.737769][  T305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.753206][  T305] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   61.766403][  T305] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   61.775795][  T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.788602][  T305] usb 1-1: config 0 descriptor??
[   61.795097][  T305] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   62.186035][   T10] usb 5-1: USB disconnect, device number 7
[   62.256781][   T36] audit: type=1400 audit(1753515680.350:447): avc:  denied  { getopt } for  pid=1841 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.285052][ T1844] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   62.321541][ T1852] overlayfs: conflicting options: userxattr,verity=require
[   62.613563][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   62.763750][   T10] usb 5-1: Using ep0 maxpacket: 16
[   62.770119][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.781245][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.791128][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   62.804242][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   62.813517][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.822226][   T10] usb 5-1: config 0 descriptor??
[   62.893529][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   62.948219][ T1863] FAULT_INJECTION: forcing a failure.
[   62.948219][ T1863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.961559][ T1863] CPU: 1 UID: 0 PID: 1863 Comm: syz.1.488 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040
[   62.961598][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.961669][ T1863] Call Trace:
[   62.961684][ T1863]  <TASK>
[   62.961694][ T1863]  __dump_stack+0x21/0x30
[   62.961729][ T1863]  dump_stack_lvl+0x10c/0x190
[   62.961757][ T1863]  ? __cfi_dump_stack_lvl+0x10/0x10
[   62.961780][ T1863]  dump_stack+0x19/0x20
[   62.961806][ T1863]  should_fail_ex+0x3d9/0x530
[   62.961834][ T1863]  should_fail+0xf/0x20
[   62.961857][ T1863]  should_fail_usercopy+0x1e/0x30
[   62.961887][ T1863]  _copy_to_user+0x24/0xa0
[   62.961919][ T1863]  simple_read_from_buffer+0xed/0x160
[   62.961944][ T1863]  proc_fail_nth_read+0x19e/0x210
[   62.961969][ T1863]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   62.961994][ T1863]  ? make_vfsgid+0x4d/0xa0
[   62.962020][ T1863]  ? bpf_lsm_file_permission+0xd/0x20
[   62.962069][ T1863]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   62.962093][ T1863]  vfs_read+0x278/0xb60
[   62.962122][ T1863]  ? __cfi_atime_needs_update+0x10/0x10
[   62.962149][ T1863]  ? iterate_incfs_dir+0x290/0x350
[   62.962180][ T1863]  ? __cfi_vfs_read+0x10/0x10
[   62.962204][ T1863]  ? __kasan_check_write+0x18/0x20
[   62.962225][ T1863]  ? mutex_lock+0x92/0x1c0
[   62.962246][ T1863]  ? __cfi_mutex_lock+0x10/0x10
[   62.962278][ T1863]  ? __fget_files+0x2c5/0x340
[   62.962322][ T1863]  ksys_read+0x141/0x250
[   62.962351][ T1863]  ? __cfi_filldir64+0x10/0x10
[   62.962366][ T1863]  ? __cfi_ksys_read+0x10/0x10
[   62.962387][ T1863]  ? __kasan_check_read+0x15/0x20
[   62.962408][ T1863]  __x64_sys_read+0x7f/0x90
[   62.962442][ T1863]  x64_sys_call+0x2638/0x2ee0
[   62.962473][ T1863]  do_syscall_64+0x58/0xf0
[   62.962498][ T1863]  ? clear_bhb_loop+0x50/0xa0
[   62.962520][ T1863]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   62.962542][ T1863] RIP: 0033:0x7f430998d3bc
[   62.962557][ T1863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   62.962580][ T1863] RSP: 002b:00007f430a814030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.962607][ T1863] RAX: ffffffffffffffda RBX: 00007f4309bb5fa0 RCX: 00007f430998d3bc
[   62.962629][ T1863] RDX: 000000000000000f RSI: 00007f430a8140a0 RDI: 0000000000000004
[   62.962646][ T1863] RBP: 00007f430a814090 R08: 0000000000000000 R09: 0000000000000000
[   62.962657][ T1863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.962667][ T1863] R13: 0000000000000000 R14: 00007f4309bb5fa0 R15: 00007ffead284128
[   62.962681][ T1863]  </TASK>
[   63.143513][    T9] usb 6-1: Using ep0 maxpacket: 32
[   63.237226][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.244676][    T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   63.252784][    T9] usb 6-1: config 0 has no interface number 0
[   63.260369][   T10] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max
[   63.272596][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.280263][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.290079][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.297713][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   63.313669][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.321819][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.331894][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.339218][    T9] usb 6-1: Product: syz
[   63.345000][    T9] usb 6-1: Manufacturer: syz
[   63.349676][    T9] usb 6-1: SerialNumber: syz
[   63.354383][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.361645][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.370408][    T9] usb 6-1: config 0 descriptor??
[   63.376152][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.389694][    T9] smsc95xx v2.0.0
[   63.393489][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.400783][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   63.412276][   T10] ==================================================================
[   63.420379][   T10] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0
[   63.428032][   T10] Read of size 4032 at addr ffff888109bdc4c1 by task kworker/0:1/10
[   63.436047][   T10] 
[   63.438425][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040
[   63.438452][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.438471][   T10] Workqueue: usb_hub_wq hub_event
[   63.438510][   T10] Call Trace:
[   63.438519][   T10]  <TASK>
[   63.438530][   T10]  __dump_stack+0x21/0x30
[   63.438558][   T10]  dump_stack_lvl+0x10c/0x190
[   63.438579][   T10]  ? __cfi_dump_stack_lvl+0x10/0x10
[   63.438600][   T10]  ? __cfi__printk+0x10/0x10
[   63.438626][   T10]  print_address_description+0x71/0x220
[   63.438644][   T10]  print_report+0x4a/0x70
[   63.438659][   T10]  kasan_report+0x163/0x1a0
[   63.438686][   T10]  ? mon_bin_event+0x12c1/0x23e0
[   63.438708][   T10]  ? mon_bin_event+0x12c1/0x23e0
[   63.438729][   T10]  kasan_check_range+0x299/0x2a0
[   63.438744][   T10]  ? mon_bin_event+0x12c1/0x23e0
[   63.438765][   T10]  __asan_memcpy+0x31/0x80
[   63.438786][   T10]  mon_bin_event+0x12c1/0x23e0
[   63.438809][   T10]  ? mon_bin_complete+0x50/0x50
[   63.438830][   T10]  ? __kmalloc_noprof+0x1b1/0x450
[   63.438852][   T10]  ? __hid_request+0x1e5/0x410
[   63.438873][   T10]  ? hid_connect+0x49a/0x1a20
[   63.438894][   T10]  ? hid_hw_start+0xcb/0x160
[   63.438916][   T10]  ? ms_probe+0x194/0x460
[   63.438936][   T10]  ? __cfi_mon_bin_submit+0x10/0x10
[   63.438958][   T10]  mon_bin_submit+0x2b/0x40
[   63.438978][   T10]  mon_submit+0x1b9/0x230
[   63.438996][   T10]  usb_hcd_submit_urb+0x12d/0x1a20
[   63.439012][   T10]  ? bus_probe_device+0x18b/0x270
[   63.439032][   T10]  ? usb_probe_device+0x1d4/0x380
[   63.439057][   T10]  ? really_probe+0x2d3/0x890
[   63.439081][   T10]  ? __driver_probe_device+0x198/0x280
[   63.439106][   T10]  ? driver_probe_device+0x54/0x3f0
[   63.439138][   T10]  ? __device_attach_driver+0x2f1/0x4b0
[   63.439175][   T10]  usb_submit_urb+0x111b/0x1800
[   63.439218][   T10]  usb_start_wait_urb+0x11b/0x2f0
[   63.439240][   T10]  ? usb_api_blocking_completion+0xd0/0xd0
[   63.439262][   T10]  ? __kasan_kmalloc+0x96/0xb0
[   63.439289][   T10]  ? __kasan_check_write+0x18/0x20
[   63.439309][   T10]  ? usb_alloc_urb+0x9b/0x200
[   63.439328][   T10]  usb_control_msg+0x25a/0x490
[   63.439351][   T10]  usbhid_raw_request+0x457/0x590
[   63.439371][   T10]  __hid_request+0x1e5/0x410
[   63.439394][   T10]  hidinput_connect+0x241b/0x3340
[   63.439425][   T10]  hid_connect+0x49a/0x1a20
[   63.439448][   T10]  ? usbhid_start+0x1a67/0x2530
[   63.439467][   T10]  ? __cfi_hid_connect+0x10/0x10
[   63.439491][   T10]  hid_hw_start+0xcb/0x160
[   63.439513][   T10]  ms_probe+0x194/0x460
[   63.439544][   T10]  hid_device_probe+0x2c4/0x5d0
[   63.439579][   T10]  ? __cfi_hid_device_probe+0x10/0x10
[   63.439614][   T10]  really_probe+0x2d3/0x890
[   63.439642][   T10]  __driver_probe_device+0x198/0x280
[   63.439667][   T10]  driver_probe_device+0x54/0x3f0
[   63.439693][   T10]  ? __device_attach_driver+0x2db/0x4b0
[   63.439719][   T10]  __device_attach_driver+0x2f1/0x4b0
[   63.439745][   T10]  bus_for_each_drv+0x25d/0x2f0
[   63.439765][   T10]  ? __cfi___device_attach_driver+0x10/0x10
[   63.439791][   T10]  ? __cfi_bus_for_each_drv+0x10/0x10
[   63.439811][   T10]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   63.439832][   T10]  __device_attach+0x2bd/0x3a0
[   63.439856][   T10]  ? device_attach+0x40/0x40
[   63.439879][   T10]  ? _raw_spin_lock+0x8c/0x120
[   63.439896][   T10]  ? __cfi__raw_spin_lock+0x10/0x10
[   63.439915][   T10]  device_initial_probe+0x1e/0x30
[   63.439939][   T10]  bus_probe_device+0x18b/0x270
[   63.439960][   T10]  device_add+0x80c/0xc00
[   63.439984][   T10]  hid_add_device+0x39b/0x560
[   63.440009][   T10]  usbhid_probe+0xde3/0x12b0
[   63.440030][   T10]  usb_probe_interface+0x696/0xc00
[   63.440056][   T10]  ? __cfi_usb_probe_interface+0x10/0x10
[   63.440082][   T10]  really_probe+0x2d3/0x890
[   63.440108][   T10]  __driver_probe_device+0x198/0x280
[   63.440134][   T10]  driver_probe_device+0x54/0x3f0
[   63.440159][   T10]  ? __device_attach_driver+0x2db/0x4b0
[   63.440186][   T10]  __device_attach_driver+0x2f1/0x4b0
[   63.440221][   T10]  bus_for_each_drv+0x25d/0x2f0
[   63.440241][   T10]  ? __cfi___device_attach_driver+0x10/0x10
[   63.440267][   T10]  ? __cfi_bus_for_each_drv+0x10/0x10
[   63.440287][   T10]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   63.440307][   T10]  __device_attach+0x2bd/0x3a0
[   63.440331][   T10]  ? device_attach+0x40/0x40
[   63.440354][   T10]  ? _raw_spin_lock+0x8c/0x120
[   63.440371][   T10]  ? __cfi__raw_spin_lock+0x10/0x10
[   63.440390][   T10]  device_initial_probe+0x1e/0x30
[   63.440415][   T10]  bus_probe_device+0x18b/0x270
[   63.440435][   T10]  device_add+0x80c/0xc00
[   63.440460][   T10]  usb_set_configuration+0x1ad4/0x20b0
[   63.440488][   T10]  usb_generic_driver_probe+0x95/0x160
[   63.440509][   T10]  usb_probe_device+0x1d4/0x380
[   63.440534][   T10]  ? __cfi_usb_probe_device+0x10/0x10
[   63.440559][   T10]  really_probe+0x2d3/0x890
[   63.440585][   T10]  __driver_probe_device+0x198/0x280
[   63.440611][   T10]  driver_probe_device+0x54/0x3f0
[   63.440636][   T10]  ? __device_attach_driver+0x2db/0x4b0
[   63.440673][   T10]  __device_attach_driver+0x2f1/0x4b0
[   63.440711][   T10]  bus_for_each_drv+0x25d/0x2f0
[   63.440731][   T10]  ? __cfi___device_attach_driver+0x10/0x10
[   63.440758][   T10]  ? __cfi_bus_for_each_drv+0x10/0x10
[   63.440778][   T10]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   63.440798][   T10]  __device_attach+0x2bd/0x3a0
[   63.440822][   T10]  ? device_attach+0x40/0x40
[   63.440845][   T10]  ? _raw_spin_lock+0x8c/0x120
[   63.440862][   T10]  ? __cfi__raw_spin_lock+0x10/0x10
[   63.440881][   T10]  device_initial_probe+0x1e/0x30
[   63.440905][   T10]  bus_probe_device+0x18b/0x270
[   63.440925][   T10]  device_add+0x80c/0xc00
[   63.440949][   T10]  usb_new_device+0x9ed/0x1590
[   63.440974][   T10]  ? __cfi_usb_new_device+0x10/0x10
[   63.440996][   T10]  hub_event+0x2c81/0x4270
[   63.441027][   T10]  ? __cfi_hub_event+0x10/0x10
[   63.441050][   T10]  ? __schedule+0x1333/0x1e00
[   63.441072][   T10]  ? kick_pool+0xb9/0x550
[   63.441088][   T10]  process_scheduled_works+0x7d5/0x1020
[   63.441115][   T10]  worker_thread+0xc58/0x1250
[   63.441142][   T10]  kthread+0x2c7/0x370
[   63.441156][   T10]  ? __cfi_worker_thread+0x10/0x10
[   63.441179][   T10]  ? __cfi_kthread+0x10/0x10
[   63.441193][   T10]  ret_from_fork+0x64/0xa0
[   63.441221][   T10]  ? __cfi_kthread+0x10/0x10
[   63.441235][   T10]  ret_from_fork_asm+0x1a/0x30
[   63.441261][   T10]  </TASK>
[   63.441268][   T10] 
[   64.055928][   T10] Allocated by task 10:
[   64.060088][   T10]  kasan_save_track+0x3e/0x80
[   64.064782][   T10]  kasan_save_alloc_info+0x40/0x50
[   64.069906][   T10]  __kasan_kmalloc+0x96/0xb0
[   64.074509][   T10]  __kmalloc_noprof+0x1b1/0x450
[   64.079384][   T10]  __hid_request+0xa9/0x410
[   64.083913][   T10]  hidinput_connect+0x241b/0x3340
[   64.088957][   T10]  hid_connect+0x49a/0x1a20
[   64.093480][   T10]  hid_hw_start+0xcb/0x160
[   64.098081][   T10]  ms_probe+0x194/0x460
[   64.102335][   T10]  hid_device_probe+0x2c4/0x5d0
[   64.107237][   T10]  really_probe+0x2d3/0x890
[   64.111784][   T10]  __driver_probe_device+0x198/0x280
[   64.117120][   T10]  driver_probe_device+0x54/0x3f0
[   64.123067][   T10]  __device_attach_driver+0x2f1/0x4b0
[   64.128528][   T10]  bus_for_each_drv+0x25d/0x2f0
[   64.133416][   T10]  __device_attach+0x2bd/0x3a0
[   64.138205][   T10]  device_initial_probe+0x1e/0x30
[   64.143336][   T10]  bus_probe_device+0x18b/0x270
[   64.148309][   T10]  device_add+0x80c/0xc00
[   64.152672][   T10]  hid_add_device+0x39b/0x560
[   64.157372][   T10]  usbhid_probe+0xde3/0x12b0
[   64.161976][   T10]  usb_probe_interface+0x696/0xc00
[   64.167106][   T10]  really_probe+0x2d3/0x890
[   64.171637][   T10]  __driver_probe_device+0x198/0x280
[   64.176939][   T10]  driver_probe_device+0x54/0x3f0
[   64.181983][   T10]  __device_attach_driver+0x2f1/0x4b0
[   64.187377][   T10]  bus_for_each_drv+0x25d/0x2f0
[   64.192246][   T10]  __device_attach+0x2bd/0x3a0
[   64.197027][   T10]  device_initial_probe+0x1e/0x30
[   64.202074][   T10]  bus_probe_device+0x18b/0x270
[   64.206938][   T10]  device_add+0x80c/0xc00
[   64.211287][   T10]  usb_set_configuration+0x1ad4/0x20b0
[   64.216876][   T10]  usb_generic_driver_probe+0x95/0x160
[   64.222349][   T10]  usb_probe_device+0x1d4/0x380
[   64.227564][   T10]  really_probe+0x2d3/0x890
[   64.232087][   T10]  __driver_probe_device+0x198/0x280
[   64.237392][   T10]  driver_probe_device+0x54/0x3f0
[   64.242440][   T10]  __device_attach_driver+0x2f1/0x4b0
[   64.247838][   T10]  bus_for_each_drv+0x25d/0x2f0
[   64.252699][   T10]  __device_attach+0x2bd/0x3a0
[   64.257477][   T10]  device_initial_probe+0x1e/0x30
[   64.262523][   T10]  bus_probe_device+0x18b/0x270
[   64.267408][   T10]  device_add+0x80c/0xc00
[   64.271842][   T10]  usb_new_device+0x9ed/0x1590
[   64.276616][   T10]  hub_event+0x2c81/0x4270
[   64.281049][   T10]  process_scheduled_works+0x7d5/0x1020
[   64.286606][   T10]  worker_thread+0xc58/0x1250
[   64.291313][   T10]  kthread+0x2c7/0x370
[   64.295389][   T10]  ret_from_fork+0x64/0xa0
[   64.299832][   T10]  ret_from_fork_asm+0x1a/0x30
[   64.304631][   T10] 
[   64.306962][   T10] The buggy address belongs to the object at ffff888109bdc4c0
[   64.306962][   T10]  which belongs to the cache kmalloc-8 of size 8
[   64.320843][   T10] The buggy address is located 1 bytes inside of
[   64.320843][   T10]  allocated 7-byte region [ffff888109bdc4c0, ffff888109bdc4c7)
[   64.334809][   T10] 
[   64.337201][   T10] The buggy address belongs to the physical page:
[   64.343798][   T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109bdc
[   64.352835][   T10] flags: 0x4000000000000000(zone=1)
[   64.358045][   T10] page_type: f5(slab)
[   64.362039][   T10] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122
[   64.370640][   T10] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000
[   64.379225][   T10] page dumped because: kasan: bad access detected
[   64.386096][   T10] page_owner tracks the page as allocated
[   64.391908][   T10] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (init), ts 5437391772, free_ts 0
[   64.409368][   T10]  post_alloc_hook+0x3b9/0x3f0
[   64.414268][   T10]  prep_new_page+0x1c/0x120
[   64.418801][   T10]  get_page_from_freelist+0x46bb/0x4750
[   64.424385][   T10]  __alloc_pages_noprof+0x30d/0x6c0
[   64.429595][   T10]  alloc_slab_page+0x6b/0x1f0
[   64.434311][   T10]  allocate_slab+0x69/0x440
[   64.438838][   T10]  ___slab_alloc+0x59a/0x8b0
[   64.443444][   T10]  __kmalloc_noprof+0x243/0x450
[   64.448338][   T10]  str_read+0x7e/0x290
[   64.452421][   T10]  genfs_read+0x29a/0x1070
[   64.456844][   T10]  policydb_read+0x2121/0x28c0
[   64.461616][   T10]  security_load_policy+0x162/0x12f0
[   64.466955][   T10]  sel_write_load+0x298/0x5e0
[   64.471648][   T10]  vfs_write+0x3c3/0xe80
[   64.475906][   T10]  ksys_write+0x141/0x250
[   64.480256][   T10]  __x64_sys_write+0x7f/0x90
[   64.484862][   T10] page_owner free stack trace missing
[   64.490264][   T10] 
[   64.492597][   T10] Memory state around the buggy address:
[   64.498236][   T10]  ffff888109bdc380: fa fc fc fc fa fc fc fc fa fc fc fc 03 fc fc fc
[   64.506304][   T10]  ffff888109bdc400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   64.514459][   T10] >ffff888109bdc480: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc
[   64.522523][   T10]                                            ^
[   64.528682][   T10]  ffff888109bdc500: 00 fc fc fc fa fc fc fc 00 fc fc fc 04 fc fc fc
[   64.536746][   T10]  ffff888109bdc580: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   64.546147][   T10] ==================================================================
[   64.554395][   T10] Disabling lock debugging due to kernel taint
[   64.573220][   T10] microsoft 0003:045E:07DA.0004: No inputs registered, leaving
[   64.583016][  T768] usb 1-1: USB disconnect, device number 7
[   64.586283][   T36] audit: type=1400 audit(1753515682.660:448): avc:  denied  { create } for  pid=1847 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   64.610776][ T1848] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   64.622904][ T1848] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   64.622898][   T36] audit: type=1400 audit(1753515682.710:449): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   64.622961][   T36] audit: type=1400 audit(1753515682.710:450): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.630660][ T1848] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   64.653433][   T36] audit: type=1400 audit(1753515682.750:451): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.675244][   T10] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   64.681192][   T36] audit: type=1400 audit(1753515682.750:452): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.706206][   T10] microsoft 0003:045E:07DA.0004: no inputs found
[   64.739280][   T36] audit: type=1400 audit(1753515682.750:453): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.746881][   T10] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[   64.761204][   T36] audit: type=1400 audit(1753515682.750:454): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.779739][   T10] usb 5-1: USB disconnect, device number 8
[   64.792792][   T36] audit: type=1400 audit(1753515682.750:455): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.798394][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   64.832611][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   66.048308][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   66.059157][    T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32
[   67.057467][  T768] usb 6-1: USB disconnect, device number 4