last executing test programs:

2.326694026s ago: executing program 2 (id=51):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})

2.272199756s ago: executing program 2 (id=52):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x16, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"})

2.249389457s ago: executing program 2 (id=53):
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x810, 0xffffffffffffffff, 0x9685a000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
write(r3, &(0x7f0000000400)="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", 0xfffffcf1)

1.964245288s ago: executing program 0 (id=62):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x40000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @transaction_sg={0x40486311, {0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x40}, @fda={0x66646185, 0x3, 0x0, 0x23}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}, 0x1040}, @register_looper], 0x0, 0x0, 0x0})

1.840231229s ago: executing program 0 (id=64):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f00004d3000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r0, 0x74a3a000) (async)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000402000/0x400000)=nil) (async)
madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17)

1.72703969s ago: executing program 0 (id=66):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000064000100000000020000000008000000", @ANYRES32=r2], 0x30}], 0x1}, 0x0)
r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000000))
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501009c"], 0x0)
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314}, @decrefs], 0x0, 0x0, 0x0})

1.069783734s ago: executing program 3 (id=75):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x800, 0x4) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x100000}}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4)
sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="02120705090000002cbd7000fddbdf2507001900000000000a004e20000000090000000000000000000000000000000002000000f1a2284ecd568de700"/72], 0x48}}, 0x20000000) (async)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a26bd7000000000001100000014000980", @ANYRESHEX=r4], 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x40050) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x46240, 0x0) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = dup(r7)
recvfrom$packet(r8, 0x0, 0x0, 0x2002, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x339)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.035377444s ago: executing program 3 (id=76):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x25a5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x5, 0x0, 0x3f}, @fda={0x66646185, 0x9, 0x2, 0x3}, @fd}, 0x0}}], 0x0, 0x0, 0x0})

667.798336ms ago: executing program 2 (id=78):
r0 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x4000, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0x8, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x803, r5})
r6 = eventfd2(0x30f1, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x0, r6}) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) (async)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6})
renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000180)='./file1\x00', 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000007010040"]) (async)
r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r13, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r13, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async)
read(r13, &(0x7f00000021c0)=""/218, 0xda) (async)
renameat2(r7, &(0x7f00000001c0)='./file1\x00', r8, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)

473.732308ms ago: executing program 0 (id=79):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20)
readahead(r0, 0x4, 0x4058)

472.956368ms ago: executing program 2 (id=80):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
copy_file_range(r1, &(0x7f0000000080)=0xfffffffffffffff9, r1, 0x0, 0xfffffffffffffffc, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6484da68, 0x808002)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x31105b90}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1100, 0x3})

472.741797ms ago: executing program 0 (id=81):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x125d, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xbd, 0x5, 0xc, 0xffff67f1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x40, 0x6, 0x7]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4054}, 0x2000000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x125d, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xbd, 0x5, 0xc, 0xffff67f1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x40, 0x6, 0x7]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4054}, 0x2000000) (async)

462.956768ms ago: executing program 0 (id=82):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x43c1)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x3, 0x0, 0x80000a, 0x3})
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x204001, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000240)=0x9)
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000140))
r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200701a962dcff2a34e8bc7b9bc8db4d535c149d878a1d92398a7bc33395dea414c0e4006ec06b3b62fddadcaafb175da51f59331bec523e39c254d228c20e9cd3"], 0x0, 0x0})
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1b)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f00000001c0), 0x4800, &(0x7f00000001c0)=ANY=[])

461.575818ms ago: executing program 2 (id=83):
r0 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300))
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x8000}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
getsockopt$nfc_llcp(r4, 0x118, 0x4df21b1eaa8b37d, &(0x7f0000000440)=""/62, 0x3e)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00')
fstat(r5, &(0x7f0000000780))
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x4}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
accept(r1, &(0x7f00000003c0)=@pppol2tpv3, &(0x7f0000000080)=0x80)
syz_io_uring_setup(0x49af, &(0x7f0000000180)={0x0, 0xbfd6, 0x8000, 0x2, 0xfa}, &(0x7f0000000200), &(0x7f0000000280))
io_cancel(0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
socket$packet(0x11, 0x2, 0x300)

243.613959ms ago: executing program 1 (id=84):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c4c0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080))

191.952339ms ago: executing program 1 (id=85):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$peekuser(0x3, r3, 0x380)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="0201080901000000ea951f040000f7ff020005000000000002000014140000000000000000000300060000ddffff0100"/64], 0x40}}, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)={0x8000})
close_range(r1, r1, 0x0)

191.718079ms ago: executing program 1 (id=86):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040))
timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
gettid()
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r2, r2)
syz_fuse_handle_req(r4, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7, 0x5d})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"])
close_range(r0, 0xffffffffffffffff, 0x0)

188.113209ms ago: executing program 3 (id=87):
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth1_virt_wifi\x00'})
r0 = syz_open_pts(0xffffffffffffffff, 0x8000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r0, 0xb00d0000)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080))
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0xee00, &(0x7f00000000c0)={0x8, 0xc50, 0x1, 0x3})
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x60000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa14}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2634c21e}]}, 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r3 = accept$nfc_llcp(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x60)
setsockopt(r3, 0xc, 0x8000, &(0x7f0000000380)="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", 0x1000)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000001680)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6f, &(0x7f00000015c0)=[{0x517, 0x5, 0x1}, {0x0, 0x4, 0x8}, {0x3ff, 0x7f, 0x8000000000000001}, {0x1ff, 0x1, 0x7}, {0xa, 0x1, 0x10001}, {0x56, 0x81, 0x10}, {0x8, 0x8, 0x3}, {0x8, 0x8000000000000000, 0x1000}], 0x8, 0x4, 0x3a, 0x1, 0x4})
r4 = socket$packet(0x11, 0x2, 0x300)
openat$uinput(0xffffffffffffff9c, &(0x7f0000001700), 0x802, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001740)=0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001780)={<r5=>0x0, 0xfffffffffffffffa, 0x3, 0x1})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001b80)={r5, 0x2, 0x7})
r6 = accept$packet(r4, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001fc0)=0x14)
accept4$packet(r6, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002040)=0x14, 0x800)
sendmsg$AUDIT_USER_TTY(r1, 0xfffffffffffffffd, 0x1)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000002080), 0x40240, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}}, 0x4008850)
sendmsg$nl_xfrm(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)=@getsa={0x60, 0x12, 0x404, 0x70bd2b, 0x25dfdbfc, {@in6=@mcast1, 0x4d6, 0xa, 0x33}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0xa}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44880}, 0x4004001)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000002480)=0x4)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000024c0)=0xe9b)

174.957039ms ago: executing program 3 (id=88):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "31b1c17d7a590230eac53930e71749240aed2bef713a99af086e87264c5aac0e", "e83f71864000000700", "747856f4e55004b9ef85955336475ed136d29e8ebabd61cb1603a2b4e5fc0a8a", "4323a1219c8e6759b87e79f0030539dcfa5eba686cc0451221a66241530ab4c2", "cedae3c9344138856b6f5fabb422a574d6ec020c1a3d1fcf946a5403fc6b0272", "186ee64bfb22f86812b6dde6", 0x5, 0x5, 0x4, 0x32, 0x834}})
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

120.40258ms ago: executing program 3 (id=89):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall()
r1 = socket$inet6(0xa, 0x3, 0x3c)
capset(0x0, &(0x7f0000000080)={0x4, 0x10ffff, 0x3000000, 0xffffffff})
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x2400)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x0, 0x6, 0x3, 0x10001, 0x7f, 0x7f})
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
write(r0, &(0x7f0000000400)="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", 0xfffffcf1)

98.07137ms ago: executing program 1 (id=90):
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000200)={0x800, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, {0x3f}, &(0x7f00000000c0)=""/18, 0x12, &(0x7f0000000100)=""/185, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = epoll_create1(0x80000)
syz_clone3(&(0x7f00000014c0)={0x8000000, &(0x7f00000002c0)=<r6=>0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x32}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/193, &(0x7f0000001480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000001540)={r5, r6, 0xb6f})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0)
read$FUSE(r7, &(0x7f00000015c0)={0x2020}, 0x2020)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x40000, 0xc0, 0x8}, 0x18)
mkdirat(r8, &(0x7f0000003680)='./file0\x00', 0x42)
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f00000036c0), 0x4)
sendmsg(r4, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003700)='<', 0x1}, {&(0x7f0000003740)="3d975ea3569fbd176dbd4d0e4a0e93187298fc33239bc3a1247b457ba5d65f8045e92b2f8ede78e7e321755173016fb1121c37de7ff750f8e54c5f8d232669334a5191cad184cbb4551ace6da6c7ad13da3a58b8a82103c826b88c8f6d573e31f611ce8a51bee74bff5c600e755377b29ffc00ddbe81a4950131f933c4006aad8da1f3998dd49ae10031f473cc01fffe06444d2067ba7fbd21c9526f1f89f9fa96575105d0227278094c7217e0d496e27884ffdeec8ea6b05aa2d956bd85ae78f324fa906b255fe186b2fd46b5b8102751ebbe72f5c2f50023cc10cca4202f14b8703707b6", 0xe5}, {&(0x7f0000003840)="7661f211072896ebbab31978f8b3a2c8dd0e9fd4d2f6995acc7b0b327943afec87460c385155165b979e4ab4a602577bbcdfe3283870ea64e295961bdb6324451db24cc2c0aa73a1fb3189c13ccb279f60206a0f6aecf9332cc443bbccbc937f555d145dd0ccc529ffd886a959973016237bf1197bc30db594ffc407ade7889e6cc4209191b4a817d3788fada6e4673bffe1c98dd8d3d8da7a0b9caf1f4a066475252c5cd0694a12c039c706f247f38b7a48c1be9fbc35cfa0e624bdb5259c34b433b69482", 0xc5}, {&(0x7f0000003940)="9ec6f2477fe86c8c5a03ac37de6885b950a28e51237f121ade3aed2f5b528c704991f4592482590f88d0bad673cbb26f19d3a0df0256963ac838289cc1cd124455fa42b67cc4efabd1fbe003d8ba0ca9dffecaf6928caa46a2d0afeeba87081cdadd98447b2e179a9d843c155737da6c083799a5310af2d91dba780ed159bfd9af92168b2639e475c598d83e6dc766a2aa10ee325196842198a6e2bd4237cc3566cc4791bca4ecb556135e500ffcb202c1", 0xb1}, {&(0x7f0000003a00)="4917ae9dd370893b270edc7f4d9032e8a27089ac19b140c568f135ee01ffa81d8b1fcc4b5c75323c8f4884eaf7b2ea1ca76f42ebb1d5b35083399c94635104998abefb48a649b568864cd0100af99fcddfb8eec2ec41c324ecc16287c26d50440566336be9ba11218a551a24b651804dd3c715134cd76db130c50019123c2a822dbe645a417c4387d773cab8b367f3079a8214b8041aa84826bac7a99ca7ff12d8ee3cf8f74412c1d86e9d842ddedcb684383d04e87c266c736900fb41d56e0369da0f9e4c9acaf1ce675e2c57c6aa8e68260b15a52e871c2f006e7749", 0xdd}, {&(0x7f0000003b00)="b39cff5ad7b7aae06604b22155c488e6e5f35e622f377bb5b3dc9199b071ffc1d46c9074fc624cb0a626574aa00b1222dfa1926b7db698c2ab1173be15e4ac0d4cc6b6a65f65740070dc9331208ac1e4e9b3be2c6bc6849c29887bb1af3a6db7d93bef9748c532831d48639c6deafb5e30bad51ec49862312b9301640fcf004cb568565a860dd355d895d836ff511af7286da1334cb248e9f4632f952f52009f97da2c8a3979343d1b7ad8c052d9421dc9204adea3023be3430d436a9fd824a82d36b6c9ebbbaf2a79b66b666f", 0xcd}, {&(0x7f0000003c00)="fa447a97fca37bf0295d28ed26bb30003696531b3ed5ac82bfffd9498d362e9286c3ea976e07703ebd80d677fff8a5ace5ff61d34ececa49ea4245c3728b9c1591a247d056b7bb829a72ad911f1fba1b738f3a0133df25353dbcf86b7748b67aefec072ef83878a3e781925f8139b1432dd27bb026f5c5691b6aea22502b", 0x7e}, {&(0x7f0000003c80)="303c7b3f38a3e1c7d77e3e410ebc127b6dd557d34e84c7d4f5bde17ef7cb2a5bc5f045aba7164280d04a24fae9c74575df58a88f4dd3894007134ff442b7a2bd3e146f0cc6d3", 0x46}, {&(0x7f0000003d00)="83d936a76fa617f5b9fea87eee", 0xd}, {&(0x7f0000003d40)="4d26471a6ea80ed9c5dd60ecc9b776b70f3b125772cddbc569f028596bc12f131e4d633ea604601bf8a30baedf9becdc3d2ed4c0d3f4e52eaf64520dc505464481df3ea60903c74baa9ff2ac87dc48bf18eb85b7b85b51ea1e2b14b28e48b287398adef300402efab765eef616f103b2ebe26a729e7404ce9b", 0x79}], 0xa, &(0x7f0000003e80)=[{0x50, 0x10f, 0x2, "54b094237e594b989f3db83a40e54c2055fe8a54c8c32a460a45adea262bc8196a38e820dead12f46a89e23409eaf9226e458b1333e9180ae57af8d402ca"}, {0x48, 0x6, 0x3, "a3658f6d537db8a096ec3aeca8f857bc68d71aea300c0ba7e6084bd55f28107f9bb3c62833a04f046873e474d580c74318da3ea464f78c"}], 0x98}, 0x40000)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000003fc0)={'sit0\x00', &(0x7f0000003f80)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@private}]}})
epoll_pwait(r5, &(0x7f0000004000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000004080)={[0x3]}, 0x8)
ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000004100)={0x38b0b7d4, 0x8, [0x7, 0x2, 0x7, 0x81], &(0x7f00000040c0)=[0x0]})
clock_gettime(0x0, &(0x7f00000048c0)={<r10=>0x0, <r11=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000004140)=@hci, 0x80, &(0x7f0000004440)=[{&(0x7f00000041c0)=""/32, 0x20}, {&(0x7f0000004200)=""/144, 0x90}, {&(0x7f00000042c0)=""/25, 0x19}, {&(0x7f0000004300)=""/89, 0x59}, {&(0x7f0000004380)=""/185, 0xb9}], 0x5}, 0xcde3}, {{&(0x7f00000044c0)=@rc, 0x80, &(0x7f0000004740)=[{&(0x7f0000004540)=""/211, 0xd3}, {&(0x7f0000004640)=""/220, 0xdc}], 0x2, &(0x7f0000004780)=""/135, 0x87}}], 0x2, 0x10000, &(0x7f0000004900)={r10, r11+10000000})
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000004940)=0x1)
kcmp(r1, r2, 0x3, r0, r5)
r12 = openat$incfs(r0, &(0x7f0000004980)='.log\x00', 0x8000, 0x8)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x32)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000004a40)={'syztnl0\x00', &(0x7f00000049c0)={'syztnl2\x00', <r13=>0x0, 0x6a, 0x4, 0x2, 0x9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7, 0x20, 0x3f, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000004b80)={'syztnl1\x00', &(0x7f0000004a80)={'erspan0\x00', r13, 0x7800, 0x10, 0x8, 0x1ff, {{0x2e, 0x4, 0x0, 0x7, 0xb8, 0x68, 0x0, 0x2a, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x34, 0x22, 0x3, 0x1, [{@private=0xa010100, 0x80000000}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x10001}, {@loopback, 0x9}, {@private=0xa010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x3ab7}]}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x6, "90b40dc0"}, {0x1, 0xd, "0dc63424035802427148f0"}, {0x0, 0x12, "d1d65db4fed79de9cc52ecb276ca40c8"}, {0x7, 0x7, "db1d612c13"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x1, [{0x5, 0x4, "8022"}, {0x0, 0xb, "65f9539c61ff15c024"}, {0x7, 0x3, "99"}, {0x0, 0x8, "cda03b1283eb"}]}, @end, @timestamp_prespec={0x44, 0x14, 0xdb, 0x3, 0x7, [{@remote, 0x6}, {@multicast2, 0x9243}]}, @ra={0x94, 0x4}]}}}}})
r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000004bc0), 0x2, 0x0)
flock(r14, 0xb)
r15 = timerfd_create(0x8, 0x80000)
syncfs(r15)

65.04584ms ago: executing program 1 (id=91):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffffffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x0, 0x0, &(0x7f00000003c0)})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000380)=""/82, &(0x7f0000000400)=""/107, &(0x7f00000004c0)=""/78, 0x6000})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0})

411.431µs ago: executing program 3 (id=92):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14)
r3 = syz_usb_connect$hid(0x5, 0x99, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000405f141202000000000001090224000100002000090400010103000100092100100601220700090581030000"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002207000000a960eb"], 0x0}, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000180)=0x3)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000040)=0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x3, 0x5, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0xd}]}}}}})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="100000001a000100fdffffff01dccb25"], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r7)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0283000018007d2800000000000000000400030000000000fdffffffffffffff0700000000000000000000000000000005090000000000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff01000000000000000000000000000100000000000000000200130001", @ANYRES16], 0xc0}}, 0x11)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000000)={0x6, 0x5})

0s ago: executing program 1 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1802, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')
poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts.
[   20.379515][   T36] audit: type=1400 audit(1762660170.039:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.380569][  T282] cgroup: Unknown subsys name 'net'
[   20.402176][   T36] audit: type=1400 audit(1762660170.039:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.429453][   T36] audit: type=1400 audit(1762660170.059:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.429613][  T282] cgroup: Unknown subsys name 'devices'
[   20.589804][  T282] cgroup: Unknown subsys name 'hugetlb'
[   20.595390][  T282] cgroup: Unknown subsys name 'rlimit'
[   20.768126][   T36] audit: type=1400 audit(1762660170.429:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.791347][   T36] audit: type=1400 audit(1762660170.429:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.816146][   T36] audit: type=1400 audit(1762660170.429:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.824400][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   20.848049][   T36] audit: type=1400 audit(1762660170.509:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.873608][   T36] audit: type=1400 audit(1762660170.509:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.902715][   T36] audit: type=1400 audit(1762660170.559:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.928283][   T36] audit: type=1400 audit(1762660170.559:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.928530][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.680732][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.687780][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.694957][  T289] bridge_slave_0: entered allmulticast mode
[   21.701336][  T289] bridge_slave_0: entered promiscuous mode
[   21.711971][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.719111][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.726150][  T289] bridge_slave_1: entered allmulticast mode
[   21.732396][  T289] bridge_slave_1: entered promiscuous mode
[   21.785058][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.792139][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.799198][  T290] bridge_slave_0: entered allmulticast mode
[   21.805325][  T290] bridge_slave_0: entered promiscuous mode
[   21.813515][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.820562][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.827600][  T290] bridge_slave_1: entered allmulticast mode
[   21.833864][  T290] bridge_slave_1: entered promiscuous mode
[   21.844986][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.852033][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.859121][  T292] bridge_slave_0: entered allmulticast mode
[   21.865246][  T292] bridge_slave_0: entered promiscuous mode
[   21.881740][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.888791][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.895814][  T291] bridge_slave_0: entered allmulticast mode
[   21.902147][  T291] bridge_slave_0: entered promiscuous mode
[   21.908204][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.915242][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.922452][  T292] bridge_slave_1: entered allmulticast mode
[   21.928662][  T292] bridge_slave_1: entered promiscuous mode
[   21.941533][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.948569][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.955594][  T291] bridge_slave_1: entered allmulticast mode
[   21.961836][  T291] bridge_slave_1: entered promiscuous mode
[   22.091055][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.098118][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.105384][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.112466][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.132106][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.139175][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.146425][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.153480][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.169639][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.176694][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.183991][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.191058][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.205385][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.212456][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.219748][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.226763][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.258663][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.266021][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.273661][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.280964][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.288233][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.295356][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.303044][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.310334][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.326471][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.333521][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.341292][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.348339][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.373474][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.380529][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.388386][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.395396][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.407165][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.414201][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.422157][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.429182][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.452546][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.459846][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.468548][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.475580][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.502633][  T290] veth0_vlan: entered promiscuous mode
[   22.511879][  T291] veth0_vlan: entered promiscuous mode
[   22.524786][  T291] veth1_macvtap: entered promiscuous mode
[   22.550106][  T290] veth1_macvtap: entered promiscuous mode
[   22.557694][  T289] veth0_vlan: entered promiscuous mode
[   22.584862][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   22.585853][  T292] veth0_vlan: entered promiscuous mode
[   22.611422][  T289] veth1_macvtap: entered promiscuous mode
[   22.636017][  T292] veth1_macvtap: entered promiscuous mode
[   22.653873][  T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   22.655348][  T335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   22.680565][  T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2
[   22.742138][  T346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.786332][  T334] rust_binder: Error while translating object.
[   22.786382][  T334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   22.808421][  T334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2
[   22.863534][  T349] SELinux: failed to load policy
[   22.891413][  T357] kvm: user requested TSC rate below hardware speed
[   22.901214][  T358] kvm: user requested TSC rate below hardware speed
[   22.917481][  T361] rust_binder: Write failure EFAULT in pid:6
[   22.987888][  T338] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   23.020750][  T363] tipc: Started in network mode
[   23.025676][  T363] tipc: Node identity 4, cluster identity 4711
[   23.032106][  T363] tipc: Node number set to 4
[   23.100678][  T373] 9pnet_virtio: no channels available for device ./file0
[   23.127872][  T338] usb 1-1: device descriptor read/64, error -71
[   23.367843][  T338] usb 1-1: device descriptor read/64, error -71
[   23.608317][  T338] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   23.738802][  T338] usb 1-1: device descriptor read/64, error -71
[   23.758591][  T390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   23.766566][  T390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   23.775375][  T390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   23.783448][  T390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   23.808323][  T394] rust_binder: Error while translating object.
[   23.808365][  T394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   23.814658][  T394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22
[   23.872477][  T399] rust_binder: Write failure EFAULT in pid:27
[   23.907086][  T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14
[   23.970832][  T410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24'.
[   23.989022][  T338] usb 1-1: device descriptor read/64, error -71
[   23.999481][  T408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.041680][  T418] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   24.066574][  T422] netlink: 'syz.3.28': attribute type 4 has an invalid length.
[   24.080721][  T422] netlink: 'syz.3.28': attribute type 6 has an invalid length.
[   24.088499][  T422] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.28'.
[   24.097951][  T338] usb usb1-port1: attempt power cycle
[   24.101358][  T422] loop7: detected capacity change from 0 to 7
[   24.110089][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.119215][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.127158][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.136292][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.144283][  T343]  loop7: unable to read partition table
[   24.150485][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.159666][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.168079][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.177197][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.185117][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.194481][  T422]  loop7: unable to read partition table
[   24.197878][    T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   24.200349][  T422] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   24.208792][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.230211][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.238928][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.248071][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.256179][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.265308][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.273472][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.282638][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.290742][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   24.299924][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   24.307836][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.358840][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   24.369800][    T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   24.379053][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.388545][    T9] usb 2-1: config 0 descriptor??
[   24.394238][  T406] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   24.404346][  T425] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.413048][  T425] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   24.421888][  T425] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.429824][  T425] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   24.448243][  T338] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   24.459330][   T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[   24.467443][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   24.480793][  T338] usb 1-1: device descriptor read/8, error -71
[   24.481117][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   24.492961][  T429] tmpfs: Unknown parameter ''
[   24.495157][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   24.508899][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   24.517374][   T10] usb 3-1: Product: syz
[   24.521835][   T10] usb 3-1: Manufacturer: syz
[   24.526439][   T10] usb 3-1: SerialNumber: syz
[   24.531577][   T10] usb 3-1: config 0 descriptor??
[   24.537255][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[   24.543219][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[   24.553084][   T10] usb 3-1: selecting invalid altsetting 0
[   24.573506][  T431] rust_binder: 30: no such ref 3
[   24.578553][  T431] rust_binder: inc_ref_done called when no active inc_refs
[   24.578572][  T431] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   24.592915][  T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30
[   24.603404][  T435] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 4096)
[   24.612562][  T435] rust_binder: Error while translating object.
[   24.613700][  T338] usb 1-1: device descriptor read/8, error -71
[   24.623503][  T435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.635787][  T435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[   24.740340][  T416] netlink: 'syz.2.27': attribute type 16 has an invalid length.
[   24.757143][  T416] netlink: 'syz.2.27': attribute type 25 has an invalid length.
[   24.770420][  T416] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.27'.
[   24.806183][  T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   24.814704][  T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   24.824583][    T9] usbhid 2-1:0.0: can't add hid device: -71
[   24.830540][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   24.839212][    T9] usb 2-1: USB disconnect, device number 2
[   24.868147][  T338] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   24.888935][  T338] usb 1-1: device descriptor read/8, error -71
[   24.898614][   T10] usb 3-1: USB disconnect, device number 2
[   25.017877][  T381] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.026229][  T338] usb 1-1: device descriptor read/8, error -71
[   25.137911][  T338] usb usb1-port1: unable to enumerate USB device
[   25.167830][  T381] usb 4-1: Using ep0 maxpacket: 32
[   25.173961][  T381] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[   25.185335][  T381] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   25.194417][  T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.202443][  T381] usb 4-1: Product: syz
[   25.206617][  T381] usb 4-1: Manufacturer: syz
[   25.211207][  T381] usb 4-1: SerialNumber: syz
[   25.216305][  T381] usb 4-1: config 0 descriptor??
[   25.221542][  T442] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   25.430009][   T36] kauditd_printk_skb: 103 callbacks suppressed
[   25.430025][   T36] audit: type=1400 audit(1762660175.089:177): avc:  denied  { mounton } for  pid=441 comm="syz.3.35" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   25.431090][  T442] 9p: Unknown access argument : -22
[   25.482279][   T36] audit: type=1400 audit(1762660175.139:178): avc:  denied  { create } for  pid=441 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   25.487660][  T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   25.502780][   T36] audit: type=1400 audit(1762660175.139:179): avc:  denied  { ioctl } for  pid=441 comm="syz.3.35" path="socket:[4524]" dev="sockfs" ino=4524 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   25.511839][  T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   25.553054][  T381] usb 4-1: USB disconnect, device number 2
[   25.564240][  T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   25.588024][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   25.595570][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   25.748088][   T10] usb 2-1: Using ep0 maxpacket: 16
[   25.754516][    T9] usb 3-1: too many configurations: 177, using maximum allowed: 8
[   25.762962][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   25.771074][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   25.779303][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   25.789681][    T9] usb 3-1: config 14 has no interface number 0
[   25.789817][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.806045][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   25.819439][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   25.826218][   T10] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   25.837438][   T10] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   25.850411][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   25.858687][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   25.869064][    T9] usb 3-1: config 14 has no interface number 0
[   25.875225][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   25.888487][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   25.895959][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   25.904285][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   25.913335][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   25.923664][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.931672][   T10] usb 2-1: Product: syz
[   25.935814][   T10] usb 2-1: Manufacturer: syz
[   25.940489][    T9] usb 3-1: config 14 has no interface number 0
[   25.946642][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   25.959856][   T10] usb 2-1: SerialNumber: syz
[   25.964680][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   25.973321][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   25.981722][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   25.992196][    T9] usb 3-1: config 14 has no interface number 0
[   25.998381][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.011629][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   26.019065][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   26.027241][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   26.037599][    T9] usb 3-1: config 14 has no interface number 0
[   26.043810][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.057189][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   26.065488][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   26.073879][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   26.084283][    T9] usb 3-1: config 14 has no interface number 0
[   26.090485][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.103750][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   26.110541][  T417] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   26.119435][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   26.127626][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   26.138040][    T9] usb 3-1: config 14 has no interface number 0
[   26.144221][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.157696][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   26.165149][    T9] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[   26.173583][    T9] usb 3-1: config 14 has an invalid descriptor of length 248, skipping remainder of the config
[   26.184845][    T9] usb 3-1: config 14 has no interface number 0
[   26.191285][    T9] usb 3-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.204523][    T9] usb 3-1: config 14 interface 21 has no altsetting 0
[   26.213407][    T9] usb 3-1: string descriptor 0 read error: -22
[   26.219619][    T9] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[   26.228766][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[   26.239389][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[   26.268851][  T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.279758][  T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.289537][  T417] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   26.302405][  T417] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   26.311563][  T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.320140][  T417] usb 1-1: config 0 descriptor??
[   26.443070][  T381] usb 3-1: USB disconnect, device number 3
[   26.677096][   T36] audit: type=1400 audit(1762660176.329:180): avc:  denied  { read } for  pid=466 comm="syz.3.43" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.700633][   T36] audit: type=1400 audit(1762660176.329:181): avc:  denied  { open } for  pid=466 comm="syz.3.43" path="net:[4026532468]" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.735452][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.751737][   T36] audit: type=1400 audit(1762660176.399:182): avc:  denied  { map } for  pid=471 comm="syz.3.44" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.774580][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.782236][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.791860][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.799443][   T36] audit: type=1400 audit(1762660176.419:183): avc:  denied  { write } for  pid=471 comm="syz.3.44" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.821059][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.829268][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.836764][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.844364][   T36] audit: type=1400 audit(1762660176.419:184): avc:  denied  { remove_name } for  pid=471 comm="syz.3.44" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.867189][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.875669][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.883571][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.891480][   T36] audit: type=1400 audit(1762660176.419:185): avc:  denied  { unlink } for  pid=471 comm="syz.3.44" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   26.914167][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.921625][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.929267][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.936736][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.944438][  T417] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   26.952317][  T417] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   26.961926][  T417] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   26.976609][  T417] usb 1-1: USB disconnect, device number 6
[   26.990408][  T451] rust_binder: Error while translating object.
[   26.990435][  T451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   26.992730][   T36] audit: type=1400 audit(1762660176.649:186): avc:  denied  { ioctl } for  pid=477 comm="syz.2.46" path="socket:[4000]" dev="sockfs" ino=4000 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.013197][  T451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31
[   27.035002][  T476] fido_id[476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   27.063939][  T480] netlink: 'syz.2.47': attribute type 4 has an invalid length.
[   27.071594][   T10] cdc_ncm 2-1:1.0: SET_CRC_MODE failed
[   27.084683][   T10] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[   27.099989][  T482] rust_binder: Error while translating object.
[   27.100031][  T482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.106199][  T482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[   27.110989][   T10] cdc_ncm 2-1:1.0: bind() failure
[   27.138553][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   27.145378][   T10] cdc_ncm 2-1:1.1: bind() failure
[   27.168088][   T10] usb 2-1: USB disconnect, device number 3
[   27.177755][  T488] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.179124][  T488] rust_binder: 48: no such ref 2
[   27.206808][  T492] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.225660][  T494] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.232681][  T494] rust_binder: Error while translating object.
[   27.239573][  T494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   27.245782][  T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54
[   27.255936][  T494] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.265690][  T494] rust_binder: Failed to allocate buffer. len:72, is_oneway:false
[   27.417869][  T381] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   27.449490][  T499] rust_binder: Write failure EFAULT in pid:6
[   27.482387][  T506] rust_binder: Write failure EFAULT in pid:14
[   27.489229][  T506] rust_binder: Write failure EFAULT in pid:14
[   27.527832][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   27.577855][  T381] usb 4-1: Using ep0 maxpacket: 32
[   27.584789][  T381] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   27.593815][  T381] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   27.603954][  T381] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.615196][  T381] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   27.624662][  T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.624852][  T520] rust_binder: 519 RLIMIT_NICE not set
[   27.632701][  T381] usb 4-1: Product: ⰻ
[   27.642383][  T381] usb 4-1: Manufacturer: ᧒ꕵ뮻꩕쇌⁳菳㬮盋屋֨鱤趌몡অǩ葌塂ႅ璷Ђ⤁䶐떨敻ᢌ㘵ஃ捘幈╳挑貙䣿ᴮᬽ
[   27.647827][  T520] rust_binder: 27: no such ref 0
[   27.656512][  T381] usb 4-1: SerialNumber: 〉
[   27.674846][  T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27
[   27.689454][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   27.707916][    T9] usb 3-1: config 0 has no interface number 0
[   27.714005][    T9] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   27.735945][    T9] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   27.752634][    T9] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[   27.764991][    T9] usb 3-1: config 0 interface 2 has no altsetting 0
[   27.774432][    T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[   27.777224][  T529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   27.783746][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.800446][    T9] usb 3-1: Product: syz
[   27.805187][    T9] usb 3-1: Manufacturer: syz
[   27.809818][    T9] usb 3-1: SerialNumber: syz
[   27.814961][    T9] usb 3-1: config 0 descriptor??
[   27.820197][  T496] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   27.827318][  T496] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   28.027869][  T338] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   28.177848][  T338] usb 1-1: Using ep0 maxpacket: 8
[   28.192538][  T338] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   28.200691][  T338] usb 1-1: config 0 has no interface number 0
[   28.209929][  T338] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   28.219142][  T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.227152][  T338] usb 1-1: Product: syz
[   28.238034][  T338] usb 1-1: Manufacturer: syz
[   28.242695][  T338] usb 1-1: SerialNumber: syz
[   28.251712][  T338] usb 1-1: config 0 descriptor??
[   28.316914][  T542] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[   28.316938][  T542] rust_binder: Error while translating object.
[   28.332777][  T542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.339049][  T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   28.357206][  T381] usb 4-1: 0:2 : does not exist
[   28.368510][    T9] usb 3-1: USB disconnect, device number 4
[   28.397039][  T381] usb 4-1: USB disconnect, device number 3
[   28.401794][  T550] 9pnet_fd: Insufficient options for proto=fd
[   28.428202][  T555] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.440683][  T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55
[   28.459193][  T558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'.
[   28.468668][  T529] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   28.491617][  T529] rust_binder: Write failure EINVAL in pid:33
[   28.502989][  T338] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   28.515484][  T338] usb 1-1: No streaming interface found for terminal 6.
[   28.522457][  T338] usb 1-1: Failed to create links for entity 5
[   28.528672][  T338] usb 1-1: Failed to register entities (-22).
[   28.537231][  T338] usb 1-1: USB disconnect, device number 7
[   28.747829][  T453] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   28.897827][  T453] usb 2-1: Using ep0 maxpacket: 16
[   28.903989][  T453] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[   28.912187][  T453] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[   28.922394][  T453] usb 2-1: config 0 has no interface number 0
[   28.928497][  T453] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[   28.941157][  T453] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[   28.952913][  T453] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[   28.963852][  T453] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024
[   28.975078][  T453] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[   28.985144][  T453] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   28.998184][  T453] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[   29.007193][  T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.016405][  T453] usb 2-1: config 0 descriptor??
[   29.023805][  T564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   29.038759][  T576] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[   29.041512][  T564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   29.048228][  T574] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.142319][  T584] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.155937][  T584] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.163194][  T584] bridge0: entered allmulticast mode
[   29.170312][  T584] netlink: 'syz.2.83': attribute type 13 has an invalid length.
[   29.178560][  T584] binder: Bad value for 'max'
[   29.258612][  T585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.267110][  T585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.277859][    T9] usb 2-1: USB disconnect, device number 4
[   29.327907][  T453] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[   29.472966][  T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73
[   29.473344][  T606] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[   29.489904][  T453] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   29.506894][  T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.507140][  T290] ------------[ cut here ]------------
[   29.517471][  T453] usb 1-1: config 0 descriptor??
[   29.520428][  T290] WARNING: CPU: 1 PID: 290 at fs/inode.c:340 drop_nlink+0xce/0x110
[   29.533284][  T290] Modules linked in:
[   29.537201][  T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   29.548842][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   29.559010][  T290] RIP: 0010:drop_nlink+0xce/0x110
[   29.564044][  T290] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[   29.583691][  T290] RSP: 0000:ffffc9000b6afc60 EFLAGS: 00010293
[   29.589807][  T290] RAX: ffffffff81ee1a7e RBX: ffff88811b3ae5a0 RCX: ffff888129c6cc00
[   29.597819][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   29.605792][  T290] RBP: ffffc9000b6afc88 R08: 0000000000000003 R09: 0000000000000004
[   29.613779][  T290] R10: dffffc0000000000 R11: fffff520016d5f7c R12: dffffc0000000000
[   29.621769][  T290] R13: 1ffff11023675cbd R14: ffff88811b3ae5e8 R15: 0000000000000000
[   29.629770][  T290] FS:  0000555594c18500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   29.638734][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.645315][  T290] CR2: 000000110c3193b8 CR3: 00000001283de000 CR4: 00000000003526b0
[   29.653310][  T290] Call Trace:
[   29.656582][  T290]  <TASK>
[   29.659535][  T290]  shmem_rmdir+0x5f/0x90
[   29.663793][  T290]  vfs_rmdir+0x3dd/0x560
[   29.668052][  T290]  incfs_kill_sb+0x109/0x230
[   29.672642][  T290]  deactivate_locked_super+0xd5/0x2a0
[   29.678032][  T290]  deactivate_super+0xb8/0xe0
[   29.682709][  T290]  cleanup_mnt+0x3f1/0x480
[   29.687111][  T290]  __cleanup_mnt+0x1d/0x40
[   29.691552][  T290]  task_work_run+0x1e0/0x250
[   29.696146][  T290]  ? __cfi_task_work_run+0x10/0x10
[   29.701287][  T290]  ? __x64_sys_umount+0x126/0x170
[   29.706316][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   29.711715][  T290]  ? __kasan_check_read+0x15/0x20
[   29.716748][  T290]  resume_user_mode_work+0x36/0x50
[   29.721889][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   29.727356][  T290]  do_syscall_64+0x64/0xf0
[   29.731796][  T290]  ? clear_bhb_loop+0x50/0xa0
[   29.736476][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   29.742381][  T290] RIP: 0033:0x7feb5e1909f7
[   29.746801][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   29.766429][  T290] RSP: 002b:00007ffcb89f15d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   29.767839][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   29.774858][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb5e1909f7
[   29.774875][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb89f1690
[   29.798265][  T290] RBP: 00007ffcb89f1690 R08: 0000000000000000 R09: 0000000000000000
[   29.806238][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb89f2720
[   29.814216][  T290] R13: 00007feb5e211d7d R14: 0000000000007318 R15: 00007ffcb89f2760
[   29.822225][  T290]  </TASK>
[   29.825238][  T290] ---[ end trace 0000000000000000 ]---
[   29.830988][  T290] ==================================================================
[   29.839059][  T290] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[   29.845282][  T290] Write of size 4 at addr 0000000000000168 by task syz-executor/290
[   29.853227][  T290] 
[   29.855527][  T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   29.855544][  T290] Tainted: [W]=WARN
[   29.855547][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   29.855554][  T290] Call Trace:
[   29.855558][  T290]  <TASK>
[   29.855563][  T290]  __dump_stack+0x21/0x30
[   29.855578][  T290]  dump_stack_lvl+0x10c/0x190
[   29.855590][  T290]  ? __cfi_dump_stack_lvl+0x10/0x10
[   29.855603][  T290]  print_report+0x3d/0x70
[   29.855614][  T290]  kasan_report+0x163/0x1a0
[   29.855626][  T290]  ? ihold+0x24/0x70
[   29.855636][  T290]  ? ihold+0x24/0x70
[   29.855646][  T290]  kasan_check_range+0x299/0x2a0
[   29.855657][  T290]  __kasan_check_write+0x18/0x20
[   29.855671][  T290]  ihold+0x24/0x70
[   29.855680][  T290]  vfs_rmdir+0x26a/0x560
[   29.855692][  T290]  incfs_kill_sb+0x109/0x230
[   29.855706][  T290]  deactivate_locked_super+0xd5/0x2a0
[   29.855718][  T290]  deactivate_super+0xb8/0xe0
[   29.855730][  T290]  cleanup_mnt+0x3f1/0x480
[   29.855741][  T290]  __cleanup_mnt+0x1d/0x40
[   29.855751][  T290]  task_work_run+0x1e0/0x250
[   29.855762][  T290]  ? __cfi_task_work_run+0x10/0x10
[   29.855773][  T290]  ? __x64_sys_umount+0x126/0x170
[   29.855785][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   29.855798][  T290]  ? __kasan_check_read+0x15/0x20
[   29.855811][  T290]  resume_user_mode_work+0x36/0x50
[   29.855823][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   29.855834][  T290]  do_syscall_64+0x64/0xf0
[   29.855845][  T290]  ? clear_bhb_loop+0x50/0xa0
[   29.855856][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   29.855867][  T290] RIP: 0033:0x7feb5e1909f7
[   29.855876][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   29.855885][  T290] RSP: 002b:00007ffcb89f15d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   29.855896][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb5e1909f7
[   29.855903][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb89f1690
[   29.855910][  T290] RBP: 00007ffcb89f1690 R08: 0000000000000000 R09: 0000000000000000
[   29.855916][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb89f2720
[   29.855923][  T290] R13: 00007feb5e211d7d R14: 0000000000007318 R15: 00007ffcb89f2760
[   29.855931][  T290]  </TASK>
[   29.855935][  T290] ==================================================================
[   30.094980][  T290] Disabling lock debugging due to kernel taint
[   30.101555][  T290] BUG: kernel NULL pointer dereference, address: 0000000000000168
[   30.109355][  T290] #PF: supervisor write access in kernel mode
[   30.115411][  T290] #PF: error_code(0x0002) - not-present page
[   30.121359][  T290] PGD 800000010db45067 P4D 800000010db45067 PUD 0 
[   30.127844][  T290] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[   30.133883][  T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G    B   W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   30.146966][  T290] Tainted: [B]=BAD_PAGE, [W]=WARN
[   30.151965][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   30.161995][  T290] RIP: 0010:ihold+0x2a/0x70
[   30.166477][  T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[   30.186059][  T290] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246
[   30.192101][  T290] RAX: ffff888129c6cc00 RBX: 0000000000000000 RCX: ffff888129c6cc00
[   30.200050][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.207999][  T290] RBP: ffffc9000b6afcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[   30.215953][  T290] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811b3ae5ac
[   30.223901][  T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[   30.231844][  T290] FS:  0000555594c18500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   30.240745][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.247299][  T290] CR2: 0000000000000168 CR3: 00000001283de000 CR4: 00000000003526b0
[   30.255246][  T290] Call Trace:
[   30.258504][  T290]  <TASK>
[   30.261414][  T290]  vfs_rmdir+0x26a/0x560
[   30.265638][  T290]  incfs_kill_sb+0x109/0x230
[   30.270208][  T290]  deactivate_locked_super+0xd5/0x2a0
[   30.275554][  T290]  deactivate_super+0xb8/0xe0
[   30.280210][  T290]  cleanup_mnt+0x3f1/0x480
[   30.284599][  T290]  __cleanup_mnt+0x1d/0x40
[   30.288985][  T290]  task_work_run+0x1e0/0x250
[   30.293545][  T290]  ? __cfi_task_work_run+0x10/0x10
[   30.298628][  T290]  ? __x64_sys_umount+0x126/0x170
[   30.303631][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   30.308977][  T290]  ? __kasan_check_read+0x15/0x20
[   30.313975][  T290]  resume_user_mode_work+0x36/0x50
[   30.319059][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   30.324487][  T290]  do_syscall_64+0x64/0xf0
[   30.328875][  T290]  ? clear_bhb_loop+0x50/0xa0
[   30.333521][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   30.339385][  T290] RIP: 0033:0x7feb5e1909f7
[   30.343773][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   30.363346][  T290] RSP: 002b:00007ffcb89f15d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   30.371737][  T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb5e1909f7
[   30.379689][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb89f1690
[   30.387640][  T290] RBP: 00007ffcb89f1690 R08: 0000000000000000 R09: 0000000000000000
[   30.395598][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb89f2720
[   30.403549][  T290] R13: 00007feb5e211d7d R14: 0000000000007318 R15: 00007ffcb89f2760
[   30.411501][  T290]  </TASK>
[   30.414497][  T290] Modules linked in:
[   30.418364][  T290] CR2: 0000000000000168
[   30.422487][  T290] ---[ end trace 0000000000000000 ]---
[   30.427927][  T290] RIP: 0010:ihold+0x2a/0x70
[   30.432414][  T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[   30.451991][  T290] RSP: 0018:ffffc9000b6afca0 EFLAGS: 00010246
[   30.458030][  T290] RAX: ffff888129c6cc00 RBX: 0000000000000000 RCX: ffff888129c6cc00
[   30.465972][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.473916][  T290] RBP: ffffc9000b6afcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[   30.481858][  T290] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811b3ae5ac
[   30.489798][  T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[   30.497738][  T290] FS:  0000555594c18500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   30.506636][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.513193][  T290] CR2: 0000000000000168 CR3: 00000001283de000 CR4: 00000000003526b0
[   30.521139][  T290] Kernel panic - not syncing: Fatal exception
[   30.527326][  T290] Kernel Offset: disabled
[   30.531625][  T290] Rebooting in 86400 seconds..