last executing test programs:

7.495263562s ago: executing program 3 (id=137):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/78, 0x4e, 0x0, 0xf}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

7.245393608s ago: executing program 3 (id=144):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000a340)={0x2020, 0x0, <r4=>0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x24c10d40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
dup2(r6, r3)
write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x23, 0x37, 0x2, {0x2, 0x5, 0x1, r5, 0x5, '\':[)-'}}, 0x23)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

7.097781242s ago: executing program 1 (id=146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/min_age\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='0', 0x1)

7.057968612s ago: executing program 1 (id=148):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSokcO25B4oyh2HMVOacIeskfuSFTiBCeOiAMSB6SeuCNxAE5cygGpwArUIHEwmrGdOn+8sbaxnca/n/TkN/Nsf+/FmvesL/K8AKbWjYjYj4grEfF2RCx0zyfdEq93Sva8jx49WDl49GAliXb7rX8meXt2Lvpek3mq+57FiPjeGxE/SI4F/WNEc3dvY7lWq253T5Vb9a1yc3fv9np9ea26Vt2sVO4u3V189c4rlXMb6wv1X394NSJ+99svfvCH/W/8KOvWfLetfxznqTP0ucM4mdmI+M4ogk3ATHc8V57kxU/0Is5TGhGfiYgX8+t/IWbyT/Ooox/TN8fYOwBgFNrthWgv9B8DAJddmufAkrTUzQXMR5qWSp0c3nNxLa01mq1b9xs7m6udXNn1mEvvr9eqi91c4fWYS+6vz1aX8nrvuFatHDu+ExHPRsRPClfz49JKo7Y6yS8+ADDFnjq2/v+n0Fn/AYBLrvhxtTDJfgAA41OcdAcAgLGz/gPA9LH+A8D0sf4DwPSx/gPA9LH+A8BU+e6bb2alfdC9//XqO7s7G413bq9Wmxul+s5KaaWxvVVaazTW8nv21M96v1qjsbX0cuy8W25Vm61yc3fvXr2xs9m6l9/X+151biyjAgAe59kX3v9zEhH7r13NS/Td7//Mtfr5UfcOGKV00h0AJmZm0h0AJubkbl/AtJCPB/q26H3Yd7p4onLce0O9fWrfULh4bn7+E+T/gU81+X+YXk+W//ddHi4D+X+YXu12Ys9/AJgycvwwzYabAfr//7/Y7jsY7v//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCnN5yVJS929wOcjTUuliKcj4nrMJffXa9XFiHgmIv5UmCtkx0tD7xoCAFxM6d+TiMjKzYWX5o+3Xin8t5A/RsQPf/bWT99dbrW2lyKuJP86PN96r3u+Mon+AwBn6a3TvXW856NHD1Z6ZZz9+fBbnc1Fs7gH3dJpmY3Z/LGY5xqu/TvpHndk31dmziH+/sOI+Nxp40/y3Mj17s6nx+NnsZ8ea/z0SPw0b+s8Zn+Lzx62/OUcegXT4f1s/nn9tOsvjRv54+nXfzGfoT653vx3cGL+Sw/nv5kB89+NYWO8/PtvnzjZXui0PYz4wmzEQe/N++afXvxkQPyXhoz/1+e/9OKgtvbPI27GaeNPjsQqt+pb5ebu3u31+vJada26WancXbq7+OqdVyrlPEdd7mWqT/rHa7eeGRQ/G/+1AfGLZ4z/q0OO/xf/e/v7X35M/K9/5fTP/7nHxM/WxK8NGX/52m+Kg9qy+KtHx99d1s7+/G8NGf+Dv+2tDvlUAGAMmrt7G8u1WnV71JV09CHyShKxP/g5vzrfoIVf/viNMY1rlJW4GN1QuUiVSc9MwKh9fNFPuicAAAAAAAAAAAAAAMAgI/nx0EZEbPtlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP3/wAAAP//NjvUFA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})

6.948397745s ago: executing program 1 (id=151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='10000', 0x5)

6.927142696s ago: executing program 1 (id=152):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, 0x0, 0x0, 0x19, 0x0)

6.584679664s ago: executing program 4 (id=154):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x6d}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x2000}], 0x0, 0x0, 0x0})

6.539852515s ago: executing program 4 (id=155):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/usbcore/parameters/autosuspend\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0', 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100100000008c50f27120001000000010902120001010080320904"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a00)='auto', 0x4)
syz_open_dev$usbfs(&(0x7f0000000700), 0x19, 0x2)

6.431208547s ago: executing program 1 (id=156):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syslog(0x4, &(0x7f0000002940)=""/124, 0x7c)

6.156402034s ago: executing program 1 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)

6.134069985s ago: executing program 32 (id=157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)

4.524801263s ago: executing program 2 (id=164):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0)
syz_emit_ethernet(0x62, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1, {[@generic={0x94, 0x9, "5d15f0967233e1"}, @cipso={0x86, 0x22, 0x3, [{0x4, 0xd, "e5eb92b5300edf3d67de7f"}, {0x6, 0x5, "7ee034"}, {0x6, 0xa, "ac683816cf457089"}]}, @lsrr={0x83, 0x7, 0x99, [@loopback]}, @cipso={0x86, 0xb, 0x1, [{0x6, 0x5, "34a537"}]}]}}}}}}, 0x0)

4.524385623s ago: executing program 4 (id=165):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ptrace$setsig(0x4203, 0x0, 0x80, &(0x7f00000000c0)={0x16, 0x7, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.80515146s ago: executing program 2 (id=167):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syslog(0x4, &(0x7f0000002940)=""/124, 0x7c)

3.80472663s ago: executing program 3 (id=168):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})

3.80428758s ago: executing program 4 (id=169):
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80701, 0x0)
pipe(&(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
syz_btf_id_by_name$bpf_lsm(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.921735521s ago: executing program 3 (id=171):
syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501dc6600001010203010902"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000580)='on', 0x2)

2.856626232s ago: executing program 4 (id=172):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0)

2.850321743s ago: executing program 2 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000025c0)={0x1, 0x0, [{0x6a2, 0x0, 0xea00}]})

1.925283865s ago: executing program 2 (id=174):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r0, &(0x7f0000000230)='0x', 0x2)

1.924883485s ago: executing program 4 (id=175):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003", @ANYBLOB="12fcff4e"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0)

909.518209ms ago: executing program 0 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff)
r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0)
write(r2, &(0x7f0000000290)='1', 0x1)
mkdirat(r1, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff)
mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff)
r3 = openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r3, &(0x7f0000000700)='Loopback.usb0\x00')
r4 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0)
write(r4, &(0x7f0000000780)='usbip-vudc.0\n', 0xd)

909.251009ms ago: executing program 2 (id=178):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ptrace$setsig(0x4203, 0x0, 0x80, &(0x7f00000000c0)={0x16, 0x7, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

908.800189ms ago: executing program 3 (id=179):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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")
setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)
rename(0x0, &(0x7f0000000040)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
chdir(&(0x7f0000000140)='./file0\x00')
symlinkat(&(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

140.629327ms ago: executing program 0 (id=180):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(0x0, &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$assume_authority(0x10, r1)

139.746477ms ago: executing program 3 (id=181):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syslog(0x4, &(0x7f0000002940)=""/124, 0x7c)

135.675637ms ago: executing program 33 (id=181):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syslog(0x4, &(0x7f0000002940)=""/124, 0x7c)

132.694407ms ago: executing program 2 (id=189):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mlock2(&(0x7f0000e9d000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

106.567438ms ago: executing program 0 (id=183):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

75.047458ms ago: executing program 0 (id=184):
mkdir(&(0x7f0000000040)='./ms\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./ms\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='user', 0x4)

130.91µs ago: executing program 0 (id=185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='ra', 0x2)

0s ago: executing program 0 (id=186):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
creat(&(0x7f0000000240)='./file1\x00', 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
[   22.734154][   T30] audit: type=1400 audit(1785419756.298:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.737599][  T277] cgroup: Unknown subsys name 'net'
[   22.756940][   T30] audit: type=1400 audit(1785419756.298:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.784641][   T30] audit: type=1400 audit(1785419756.328:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.785212][  T277] cgroup: Unknown subsys name 'devices'
[   22.900023][  T277] cgroup: Unknown subsys name 'hugetlb'
[   22.905872][  T277] cgroup: Unknown subsys name 'rlimit'
[   23.047362][   T30] audit: type=1400 audit(1785419756.608:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.070632][   T30] audit: type=1400 audit(1785419756.608:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.095611][   T30] audit: type=1400 audit(1785419756.618:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.115117][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   23.128014][   T30] audit: type=1400 audit(1785419756.698:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.154050][   T30] audit: type=1400 audit(1785419756.698:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.188532][   T30] audit: type=1400 audit(1785419756.758:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.214203][   T30] audit: type=1400 audit(1785419756.758:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.214310][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.793537][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.800720][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.808288][  T285] device bridge_slave_0 entered promiscuous mode
[   23.815299][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.822624][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.830243][  T285] device bridge_slave_1 entered promiscuous mode
[   23.843093][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.850210][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.857663][  T286] device bridge_slave_0 entered promiscuous mode
[   23.878275][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.885440][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.892983][  T286] device bridge_slave_1 entered promiscuous mode
[   23.927604][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.935013][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.942566][  T289] device bridge_slave_0 entered promiscuous mode
[   23.952530][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.959718][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.967246][  T289] device bridge_slave_1 entered promiscuous mode
[   24.021274][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.028388][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.035862][  T288] device bridge_slave_0 entered promiscuous mode
[   24.046012][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.053100][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.060645][  T288] device bridge_slave_1 entered promiscuous mode
[   24.070934][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.078049][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.085592][  T287] device bridge_slave_0 entered promiscuous mode
[   24.095564][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.102648][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.110313][  T287] device bridge_slave_1 entered promiscuous mode
[   24.248056][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.255139][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.262492][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.269568][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.315407][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.322613][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.329948][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.337001][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.370683][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.377780][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.385352][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.392425][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.416064][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.423921][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.432111][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.439745][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.446997][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.454309][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.461596][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.491025][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.499422][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.507652][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.514732][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.523013][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.531417][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.538743][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.570301][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.578763][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.585800][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.593379][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.601636][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.608990][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.616467][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.624535][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.632613][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.654621][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.662156][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.670310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.678919][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.685987][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.693532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.702020][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.709103][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.716500][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.740768][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.749870][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.757298][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.765880][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.772997][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.780681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.789314][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.796363][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.804211][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.823803][  T288] device veth0_vlan entered promiscuous mode
[   24.830991][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.839575][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.847650][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.856042][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.864282][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.872291][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.880365][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.888030][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.904074][  T288] device veth1_macvtap entered promiscuous mode
[   24.919783][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.928864][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.937067][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.944871][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.953611][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.961793][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.969990][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.978145][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.985682][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.993400][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.001983][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.010470][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.017511][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.025237][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.033848][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.042171][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.049218][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.056629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.071919][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.080340][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.088955][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.096851][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.106206][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.113707][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.125509][  T289] device veth0_vlan entered promiscuous mode
[   25.137130][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.145571][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.154187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.162769][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.171265][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.179695][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.188228][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.196523][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.205069][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.213368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.228503][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.237327][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.245599][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.253834][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.262110][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.270279][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.278647][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.286166][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.293864][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.301424][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.317350][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   25.322276][  T286] device veth0_vlan entered promiscuous mode
[   25.331842][  T285] device veth0_vlan entered promiscuous mode
[   25.343480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.351981][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.371642][  T285] device veth1_macvtap entered promiscuous mode
[   25.386241][  T309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.397052][  T289] device veth1_macvtap entered promiscuous mode
[   25.410127][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.418986][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.427170][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.437654][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.446531][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.454995][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.465083][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.473544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.482005][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.490490][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.506042][  T286] device veth1_macvtap entered promiscuous mode
[   25.526472][  T287] device veth0_vlan entered promiscuous mode
[   25.535206][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.543250][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.555663][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.563776][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.572525][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.581105][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.589559][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.598147][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.606410][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.614959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.623388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.668105][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.676560][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.691221][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.699987][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.711446][  T287] device veth1_macvtap entered promiscuous mode
[   25.732994][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.760551][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.769414][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.778223][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.786614][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.439505][  T373] device syzkaller0 entered promiscuous mode
[   27.776960][   T30] kauditd_printk_skb: 41 callbacks suppressed
[   27.776975][   T30] audit: type=1326 audit(1785419761.338:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   27.866358][   T30] audit: type=1326 audit(1785419761.378:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   27.963743][   T30] audit: type=1326 audit(1785419761.378:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.022830][   T30] audit: type=1326 audit(1785419761.378:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.106634][   T30] audit: type=1326 audit(1785419761.378:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.176379][   T30] audit: type=1326 audit(1785419761.378:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.201472][   T30] audit: type=1326 audit(1785419761.378:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.228231][   T30] audit: type=1326 audit(1785419761.378:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.252913][   T30] audit: type=1326 audit(1785419761.378:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   28.278253][   T30] audit: type=1326 audit(1785419761.378:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=410 comm="syz.1.41" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddebba3f99 code=0x7ffc0000
[   29.037551][  T533] UDC core: couldn't find an available UDC or it's busy: -16
[   29.056460][  T533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.287991][  T370] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   29.308072][   T26] android_work: sent uevent USB_STATE=CONNECTED
[   29.538060][  T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.578658][  T370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.589156][  T370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   29.599177][  T370] usb 1-1: Dual-Role OTG device on HNP port
[   29.618263][  T370] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15
[   29.627524][  T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.647995][    C1] ------------[ cut here ]------------
[   29.653506][    C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[   29.660277][    C1] WARNING: CPU: 1 PID: 307 at drivers/usb/gadget/udc/core.c:108 usb_ep_enable+0x1f3/0x3a0
[   29.670233][    C1] Modules linked in:
[   29.674197][    C1] CPU: 1 PID: 307 Comm: udevd Not tainted syzkaller #0
[   29.681084][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   29.691184][    C1] RIP: 0010:usb_ep_enable+0x1f3/0x3a0
[   29.696601][    C1] Code: 4d 00 48 c7 c0 20 0b 7c 85 49 c7 c0 40 0b 7c 85 4c 0f 44 c0 48 c7 c7 e0 0a 7c 85 48 c7 c6 ce 86 e8 85 44 89 f2 e8 4d 9f 81 01 <0f> 0b e9 51 ff ff ff e8 e1 d7 40 fe 49 bc 00 00 00 00 00 fc ff df
[   29.716249][    C1] RSP: 0018:ffffc900001d0850 EFLAGS: 00010046
[   29.722366][    C1] RAX: 47df73d97e85cf00 RBX: ffff88810b7000b0 RCX: ffff88812594cf00
[   29.730383][    C1] RDX: 0000000000000100 RSI: 0000000080000102 RDI: 0000000000000000
[   29.738387][    C1] RBP: ffffc900001d0878 R08: ffff8881f7127493 R09: 1ffff1103ee24e92
[   29.746394][    C1] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: dffffc0000000000
[   29.754405][    C1] R13: ffff88810b7000b8 R14: 0000000000000081 R15: ffff888104782aba
[   29.762426][    C1] FS:  00007f63d9727880(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   29.771391][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.778039][    C1] CR2: 00007fbc8e8aedac CR3: 000000010def5000 CR4: 00000000003526a0
[   29.786077][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   29.794123][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   29.802131][    C1] Call Trace:
[   29.805445][    C1]  <IRQ>
[   29.808319][    C1]  hidg_set_alt+0x16e/0xab0
[   29.812866][    C1]  set_config+0x707/0xc10
[   29.817325][    C1]  composite_setup+0x11e3/0x2900
[   29.822317][    C1]  android_setup+0x234/0x370
[   29.826952][    C1]  dummy_timer+0x133b/0x31d0
[   29.831594][    C1]  ? debug_smp_processor_id+0x17/0x20
[   29.837271][    C1]  ? __mod_timer+0x7c0/0xb40
[   29.841911][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   29.847201][    C1]  ? __kasan_check_write+0x14/0x20
[   29.852367][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   29.857443][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   29.863030][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   29.868288][    C1]  call_timer_fn+0x38/0x290
[   29.873001][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   29.878645][    C1]  __run_timers+0x637/0x9a0
[   29.883294][    C1]  ? calc_index+0x200/0x200
[   29.887836][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   29.892719][    C1]  run_timer_softirq+0x6a/0xf0
[   29.897533][    C1]  handle_softirqs+0x250/0x560
[   29.902346][    C1]  __irq_exit_rcu+0x52/0xf0
[   29.906896][    C1]  irq_exit_rcu+0x9/0x10
[   29.911177][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   29.917106][    C1]  </IRQ>
[   29.920071][    C1]  <TASK>
[   29.923031][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   29.929046][    C1] RIP: 0010:stack_trace_consume_entry+0x1/0x290
[   29.935438][    C1] Code: 00 42 c7 44 33 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 71 77 54 03 90 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 00
[   29.955334][    C1] RSP: 0018:ffffc900077e78d8 EFLAGS: 00000282
[   29.961549][    C1] RAX: ffffffff81a8fe7a RBX: ffffc900077e79a0 RCX: 0000000000efcf01
[   29.969693][    C1] RDX: ffffc900077e7a10 RSI: ffffffff81a8fe7a RDI: ffffc900077e79a0
[   29.977819][    C1] RBP: ffffc900077e7970 R08: ffffc900077e79b0 R09: ffffc900077e79a8
[   29.985842][    C1] R10: 0000000000000000 R11: fffff52000efcf29 R12: ffff88812594cf00
[   29.993849][    C1] R13: 0000000000000000 R14: ffffffff8159b680 R15: ffffc900077e78e8
[   30.001855][    C1]  ? stack_trace_save+0xf0/0xf0
[   30.006754][    C1]  ? kasan_set_track+0x4a/0x70
[   30.011568][    C1]  ? kasan_set_track+0x4a/0x70
[   30.016365][    C1]  ? arch_stack_walk+0xfc/0x140
[   30.021256][    C1]  ? kasan_set_track+0x4a/0x70
[   30.026054][    C1]  stack_trace_save+0xa6/0xf0
[   30.030764][    C1]  ? stack_trace_snprint+0xe0/0xe0
[   30.036050][    C1]  ? 0xffffffffa002a000
[   30.040226][    C1]  ? memset+0x35/0x40
[   30.044225][    C1]  kasan_set_track+0x4a/0x70
[   30.048833][    C1]  ? __kasan_check_write+0x14/0x20
[   30.053966][    C1]  ? kmem_cache_free+0x100/0x320
[   30.058915][    C1]  kasan_set_free_info+0x23/0x40
[   30.063864][    C1]  ____kasan_slab_free+0x125/0x160
[   30.068985][    C1]  __kasan_slab_free+0x11/0x20
[   30.073789][    C1]  slab_free_freelist_hook+0xc2/0x190
[   30.079204][    C1]  ? security_file_free+0xc7/0xe0
[   30.084244][    C1]  kmem_cache_free+0x100/0x320
[   30.089031][    C1]  ? lockref_put_or_lock+0x114/0x180
[   30.094329][    C1]  security_file_free+0xc7/0xe0
[   30.099207][    C1]  __fput+0x5fd/0x900
[   30.103245][    C1]  ____fput+0x15/0x20
[   30.107332][    C1]  task_work_run+0x127/0x190
[   30.111943][    C1]  exit_to_user_mode_loop+0xd0/0xe0
[   30.117179][    C1]  exit_to_user_mode_prepare+0x87/0xd0
[   30.122652][    C1]  syscall_exit_to_user_mode+0x1a/0x30
[   30.128127][    C1]  do_syscall_64+0x58/0xa0
[   30.132561][    C1]  ? clear_bhb_loop+0x50/0xa0
[   30.137246][    C1]  ? clear_bhb_loop+0x50/0xa0
[   30.141934][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.147839][    C1] RIP: 0033:0x7f63d9815407
[   30.152266][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   30.171893][    C1] RSP: 002b:00007ffd35ba39a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[   30.180327][    C1] RAX: 0000000000000000 RBX: 00007f63d9727880 RCX: 00007f63d9815407
[   30.188310][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[   30.196301][    C1] RBP: 00007f63d97276e8 R08: 0000000000000000 R09: 0000000000000000
[   30.204285][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   30.212267][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009
[   30.220262][    C1]  </TASK>
[   30.223301][    C1] ---[ end trace d5f09b8ad8a14002 ]---
[   30.228781][    C1] configfs-gadget gadget: Enable IN endpoint FAILED!
[   30.292244][  T370] usb 1-1: can't set config #1, error -32
[   30.303913][  T575] Mass Storage Function, version: 2009/09/11
[   30.310595][  T575] LUN: removable file: (no medium)
[   30.429554][  T321] blk_update_request: I/O error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 28 prio class 0
[   30.433390][  T592] loop2: detected capacity change from 0 to 512
[   30.447769][  T321] blk_update_request: I/O error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 37 prio class 0
[   30.460654][  T321] blk_update_request: I/O error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 40 prio class 0
[   30.472764][  T321] blk_update_request: I/O error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 45 prio class 0
[   30.484608][  T321] blk_update_request: I/O error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 51 prio class 0
[   30.506557][  T321] blk_update_request: I/O error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x0 phys_seg 60 prio class 0
[   30.517940][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35236)
[   30.530249][  T295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.530543][  T321] blk_update_request: I/O error, dev sda, sector 281894 op 0x1:(WRITE) flags 0x4000 phys_seg 52 prio class 0
[   30.540475][  T295] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   30.561087][  T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.569570][  T321] blk_update_request: I/O error, dev sda, sector 282400 op 0x1:(WRITE) flags 0x4000 phys_seg 55 prio class 0
[   30.594414][  T321] blk_update_request: I/O error, dev sda, sector 282912 op 0x1:(WRITE) flags 0x4000 phys_seg 48 prio class 0
[   30.606201][  T321] blk_update_request: I/O error, dev sda, sector 283424 op 0x1:(WRITE) flags 0x4000 phys_seg 43 prio class 0
[   30.619494][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35573)
[   30.621507][  T599] bridge0: port 3(syz_tun) entered blocking state
[   30.635729][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35917)
[   30.651118][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35998)
[   30.663208][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139303)
[   30.663313][   T45] Buffer I/O error on device sda1, logical block 35879
[   30.681012][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139386)
[   30.693318][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139397)
[   30.704931][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139408)
[   30.722212][  T321] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139480)
[   30.722222][   T54] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139491)
[   30.744100][  T592] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noblock_validity,nodelalloc,,errors=continue. Quota mode: writeback.
[   30.745972][  T599] bridge0: port 3(syz_tun) entered disabled state
[   30.766756][  T599] device syz_tun entered promiscuous mode
[   30.772662][  T599] bridge0: port 3(syz_tun) entered blocking state
[   30.779140][  T599] bridge0: port 3(syz_tun) entered forwarding state
[   30.786005][  T606] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   30.796334][  T101] udevd[101]: worker [601] terminated by signal 7 (Bus error)
[   30.805835][   T45] Buffer I/O error on device sda1, logical block 35880
[   30.812767][   T45] Buffer I/O error on device sda1, logical block 35881
[   30.819672][   T45] Buffer I/O error on device sda1, logical block 35882
[   30.819702][  T101] udevd[101]: worker [601] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1'
[   30.826543][   T45] Buffer I/O error on device sda1, logical block 35883
[   30.826560][   T45] Buffer I/O error on device sda1, logical block 35884
[   30.826574][   T45] Buffer I/O error on device sda1, logical block 35885
[   30.851578][  T330] usb 4-1: USB disconnect, device number 2
[   30.857073][   T45] Buffer I/O error on device sda1, logical block 35886
[   30.870678][   T45] Buffer I/O error on device sda1, logical block 35887
[   30.877729][   T45] Buffer I/O error on device sda1, logical block 35888
[   30.878425][  T592] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.899743][   T64] Aborting journal on device sda1-8.
[   30.901584][  T588] Buffer I/O error on dev sda1, logical block 129, lost async page write
[   30.905425][   T43] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[   30.914338][  T588] Buffer I/O error on dev sda1, logical block 132, lost async page write
[   30.930983][  T588] Buffer I/O error on dev sda1, logical block 137, lost async page write
[   30.936636][   T64] JBD2: Error -5 detected when updating journal superblock for sda1-8.
[   30.939910][  T588] Buffer I/O error on dev sda1, logical block 138, lost async page write
[   30.956451][  T588] Buffer I/O error on dev sda1, logical block 145, lost async page write
[   30.962334][  T101] udevd[101]: worker [339] terminated by signal 7 (Bus error)
[   30.965334][  T588] Buffer I/O error on dev sda1, logical block 150, lost async page write
[   30.972496][  T101] udevd[101]: worker [339] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0'
[   30.980975][  T588] Buffer I/O error on dev sda1, logical block 157, lost async page write
[   30.999977][  T588] Buffer I/O error on dev sda1, logical block 158, lost async page write
[   31.008695][  T588] Buffer I/O error on dev sda1, logical block 159, lost async page write
[   31.014717][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   31.025098][  T589] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.121: Detected aborted journal
[   31.039588][  T589] EXT4-fs (sda1): I/O error while writing superblock
[   31.046294][  T589] EXT4-fs (sda1): Remounting filesystem read-only
[   31.051419][  T609] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.126: Detected aborted journal
[   31.053091][  T589] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.121: Detected aborted journal
[   31.074650][  T589] EXT4-fs (sda1): I/O error while writing superblock
[   31.081411][  T589] EXT4-fs (sda1): Remounting filesystem read-only
[   31.084940][  T277] EXT4-fs (sda1): I/O error while writing superblock
[   31.089368][  T609] EXT4-fs (sda1): previous I/O error to superblock detected
[   31.102561][  T609] EXT4-fs (sda1): I/O error while writing superblock
[   31.109394][  T609] EXT4-fs (sda1): Remounting filesystem read-only
[   31.114523][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   31.119417][  T609] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.126: Detected aborted journal
[   31.123986][  T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   31.133538][  T609] EXT4-fs (sda1): I/O error while writing superblock
[   31.150748][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   31.178360][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   31.192744][  T588] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   31.233490][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   31.255026][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   31.275211][  T587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.119: Detected aborted journal
[   31.409677][  T295] usb 5-1: Using ep0 maxpacket: 32
[   31.416997][  T626] using random self ethernet address
[   31.422608][  T626] using random host ethernet address
[   31.441490][  T630] FAULT_INJECTION: forcing a failure.
[   31.441490][  T630] name fail_page_alloc, interval 1, probability 100, space 0, times 10
[   31.449452][  T609] FAULT_INJECTION: forcing a failure.
[   31.449452][  T609] name fail_page_alloc, interval 1, probability 100, space 0, times 10
[   31.455538][  T630] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   31.477042][  T630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.487119][  T630] Call Trace:
[   31.490414][  T630]  <TASK>
[   31.493361][  T630]  __dump_stack+0x21/0x30
[   31.497715][  T630]  dump_stack_lvl+0x110/0x170
[   31.502405][  T630]  ? show_regs_print_info+0x20/0x20
[   31.507618][  T630]  ? prandom_u32+0x24d/0x290
[   31.512377][  T630]  dump_stack+0x15/0x20
[   31.516545][  T630]  should_fail+0x3ab/0x500
[   31.520973][  T630]  should_fail_alloc_page+0x55/0x80
[   31.526185][  T630]  prepare_alloc_pages+0x13f/0x590
[   31.531310][  T630]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   31.537143][  T630]  ? __alloc_pages_bulk+0xab0/0xab0
[   31.542359][  T630]  __alloc_pages+0x11d/0x460
[   31.546962][  T630]  ? prep_new_page+0x110/0x110
[   31.551763][  T630]  ? xas_load+0x2dc/0x300
[   31.556123][  T630]  pagecache_get_page+0xacc/0xdd0
[   31.561178][  T630]  ? page_cache_prev_miss+0x290/0x290
[   31.566653][  T630]  ? __kmalloc+0x13d/0x2c0
[   31.571089][  T630]  ? aio_setup_ring+0x2f1/0xba0
[   31.575960][  T630]  aio_setup_ring+0x39d/0xba0
[   31.580647][  T630]  ? free_ioctx_reqs+0x160/0x160
[   31.585599][  T630]  ioctx_alloc+0x31d/0x6d0
[   31.590027][  T630]  __se_sys_io_setup+0x6f/0x220
[   31.594990][  T630]  __x64_sys_io_setup+0x5b/0x70
[   31.599857][  T630]  x64_sys_call+0x767/0x9a0
[   31.604370][  T630]  do_syscall_64+0x4c/0xa0
[   31.608798][  T630]  ? clear_bhb_loop+0x50/0xa0
[   31.613495][  T630]  ? clear_bhb_loop+0x50/0xa0
[   31.618184][  T630]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.624087][  T630] RIP: 0033:0x7f9d64c66f99
[   31.628518][  T630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.648149][  T630] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   31.656579][  T630] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   31.664563][  T630] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   31.672552][  T630] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   31.680649][  T630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.688632][  T630] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   31.696709][  T630]  </TASK>
[   31.699741][  T609] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   31.701422][    C0] FAULT_INJECTION: forcing a failure.
[   31.701422][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 10
[   31.708442][  T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.708454][  T609] Call Trace:
[   31.708460][  T609]  <TASK>
[   31.708467][  T609]  __dump_stack+0x21/0x30
[   31.742581][  T609]  dump_stack_lvl+0x110/0x170
[   31.747311][  T609]  ? show_regs_print_info+0x20/0x20
[   31.752531][  T609]  ? prandom_u32+0x24d/0x290
[   31.757141][  T609]  dump_stack+0x15/0x20
[   31.761313][  T609]  should_fail+0x3ab/0x500
[   31.765749][  T609]  should_fail_alloc_page+0x55/0x80
[   31.770969][  T609]  prepare_alloc_pages+0x13f/0x590
[   31.776113][  T609]  ? __alloc_pages_bulk+0xab0/0xab0
[   31.781331][  T609]  __alloc_pages+0x11d/0x460
[   31.785940][  T609]  ? __kernel_text_address+0xa0/0x100
[   31.791322][  T609]  ? prep_new_page+0x110/0x110
[   31.796095][  T609]  ? unwind_get_return_address+0x4d/0x90
[   31.801760][  T609]  ? stack_trace_save+0xf0/0xf0
[   31.806633][  T609]  new_slab+0xa0/0x4d0
[   31.810710][  T609]  ___slab_alloc+0x3ac/0x840
[   31.815316][  T609]  ? __sigqueue_alloc+0x137/0x210
[   31.820371][  T609]  ? __sigqueue_alloc+0x137/0x210
[   31.825411][  T609]  __slab_alloc+0x49/0x90
[   31.829751][  T609]  ? __sigqueue_alloc+0x137/0x210
[   31.834786][  T609]  kmem_cache_alloc+0x138/0x260
[   31.839672][  T609]  __sigqueue_alloc+0x137/0x210
[   31.844539][  T609]  __send_signal+0x21a/0xce0
[   31.849148][  T609]  send_signal+0x416/0x580
[   31.853581][  T609]  force_sig_info_to_task+0x2e5/0x3b0
[   31.858993][  T609]  force_sig_fault+0xd9/0x130
[   31.863695][  T609]  ? force_sig_fault_to_task+0x130/0x130
[   31.869354][  T609]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   31.875098][  T609]  ? page_fault_oops+0x8b0/0x8b0
[   31.880057][  T609]  ? signal_setup_done+0x384/0x480
[   31.885188][  T609]  __bad_area_nosemaphore+0x2f9/0x470
[   31.890579][  T609]  bad_area_access_error+0x1ea/0x300
[   31.895883][  T609]  do_user_addr_fault+0x6f9/0x11c0
[   31.901011][  T609]  ? do_kern_addr_fault+0x80/0x80
[   31.906391][  T609]  ? debug_smp_processor_id+0x17/0x20
[   31.911783][  T609]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   31.917874][  T609]  ? exit_to_user_mode_prepare+0x39/0xd0
[   31.923558][  T609]  exc_page_fault+0x51/0xb0
[   31.928080][  T609]  asm_exc_page_fault+0x27/0x30
[   31.932945][  T609] RIP: 0033:0x7fddeba713d8
[   31.937374][  T609] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   31.957603][  T609] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   31.963688][  T609] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   31.971677][  T609] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   31.979689][  T609] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   31.987682][  T609] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   31.995670][  T609] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   32.003661][  T609]  </TASK>
[   32.006699][    C0] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   32.006702][  T609] FAULT_INJECTION: forcing a failure.
[   32.006702][  T609] name fail_page_alloc, interval 1, probability 100, space 0, times 9
[   32.006725][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.038960][    C0] Call Trace:
[   32.042256][    C0]  <IRQ>
[   32.045118][    C0]  __dump_stack+0x21/0x30
[   32.049479][    C0]  dump_stack_lvl+0x110/0x170
[   32.054433][    C0]  ? show_regs_print_info+0x20/0x20
[   32.059646][    C0]  ? prandom_u32+0x24d/0x290
[   32.064251][    C0]  dump_stack+0x15/0x20
[   32.068413][    C0]  should_fail+0x3ab/0x500
[   32.072844][    C0]  should_fail_alloc_page+0x55/0x80
[   32.078073][    C0]  prepare_alloc_pages+0x13f/0x590
[   32.083196][    C0]  ? __stack_depot_save+0x34/0x480
[   32.088318][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   32.093546][    C0]  ? __kasan_slab_alloc+0xc9/0xe0
[   32.098579][    C0]  ? __kasan_slab_alloc+0xb7/0xe0
[   32.103639][    C0]  ? slab_post_alloc_hook+0x4f/0x2b0
[   32.108939][    C0]  __alloc_pages+0x11d/0x460
[   32.113547][    C0]  ? sysvec_apic_timer_interrupt+0xa9/0xc0
[   32.119365][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   32.125526][    C0]  ? prep_new_page+0x110/0x110
[   32.130299][    C0]  ? __alloc_pages+0x11d/0x460
[   32.135076][    C0]  ? aio_setup_ring+0x39d/0xba0
[   32.139937][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.146013][    C0]  new_slab+0xa0/0x4d0
[   32.150097][    C0]  ___slab_alloc+0x3ac/0x840
[   32.154697][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   32.160256][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   32.165809][    C0]  __slab_alloc+0x49/0x90
[   32.170156][    C0]  kmem_cache_alloc_trace+0x146/0x270
[   32.175538][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   32.181091][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   32.186474][    C0]  icmp6_dst_alloc+0x35f/0x520
[   32.191247][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   32.195929][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.202009][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   32.206962][    C0]  ? ndisc_send_rs+0x61f/0x960
[   32.211742][    C0]  ? memcpy+0x56/0x70
[   32.215741][    C0]  ndisc_send_rs+0x711/0x960
[   32.220342][    C0]  addrconf_rs_timer+0x35a/0x600
[   32.225293][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   32.231374][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[   32.236416][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[   32.241976][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   32.248055][    C0]  call_timer_fn+0x38/0x290
[   32.252570][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   32.258651][    C0]  __run_timers+0x637/0x9a0
[   32.263168][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   32.268029][    C0]  ? calc_index+0x200/0x200
[   32.272545][    C0]  ? asm_common_interrupt+0x27/0x40
[   32.277761][    C0]  run_timer_softirq+0x6a/0xf0
[   32.282536][    C0]  handle_softirqs+0x250/0x560
[   32.287322][    C0]  __irq_exit_rcu+0x52/0xf0
[   32.291834][    C0]  irq_exit_rcu+0x9/0x10
[   32.296095][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   32.301756][    C0]  </IRQ>
[   32.304700][    C0]  <TASK>
[   32.307645][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   32.313637][    C0] RIP: 0010:dump_stack_lvl+0x144/0x170
[   32.319112][    C0] Code: e6 00 02 00 00 31 ff e8 3a 97 be fc 49 81 e5 00 02 00 00 75 07 e8 ec 92 be fc eb 06 e8 e5 92 be fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[   32.338728][    C0] RSP: 0018:ffffc90000c2f920 EFLAGS: 00000283
[   32.344825][    C0] RAX: ffffffff84ab23fb RBX: ffffffff8564bda0 RCX: 0000000000080000
[   32.352807][    C0] RDX: ffffc90002f72000 RSI: 000000000004154e RDI: 000000000004154f
[   32.360786][    C0] RBP: ffffc90000c2f9b0 R08: 0000000000000003 R09: 0000000000000004
[   32.368850][    C0] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   32.376832][    C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff92000185f24
[   32.384813][    C0]  ? dump_stack_lvl+0x13b/0x170
[   32.389678][    C0]  ? show_regs_print_info+0x20/0x20
[   32.394890][    C0]  ? prandom_u32+0x24d/0x290
[   32.399501][    C0]  dump_stack+0x15/0x20
[   32.403685][    C0]  should_fail+0x3ab/0x500
[   32.408117][    C0]  should_fail_alloc_page+0x55/0x80
[   32.413324][    C0]  prepare_alloc_pages+0x13f/0x590
[   32.418449][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   32.424269][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   32.429480][    C0]  __alloc_pages+0x11d/0x460
[   32.434084][    C0]  ? prep_new_page+0x110/0x110
[   32.438861][    C0]  ? xas_load+0x2dc/0x300
[   32.443202][    C0]  pagecache_get_page+0xacc/0xdd0
[   32.448251][    C0]  ? page_cache_prev_miss+0x290/0x290
[   32.453633][    C0]  ? __kmalloc+0x13d/0x2c0
[   32.458060][    C0]  ? aio_setup_ring+0x2f1/0xba0
[   32.462918][    C0]  aio_setup_ring+0x39d/0xba0
[   32.467604][    C0]  ? free_ioctx_reqs+0x160/0x160
[   32.472555][    C0]  ioctx_alloc+0x31d/0x6d0
[   32.476992][    C0]  __se_sys_io_setup+0x6f/0x220
[   32.481861][    C0]  __x64_sys_io_setup+0x5b/0x70
[   32.486730][    C0]  x64_sys_call+0x767/0x9a0
[   32.491249][    C0]  do_syscall_64+0x4c/0xa0
[   32.495671][    C0]  ? clear_bhb_loop+0x50/0xa0
[   32.500359][    C0]  ? clear_bhb_loop+0x50/0xa0
[   32.505047][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.510947][    C0] RIP: 0033:0x7f9d64c66f99
[   32.515375][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.534991][    C0] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   32.543418][    C0] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   32.551402][    C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   32.559401][    C0] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   32.567468][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   32.575448][    C0] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   32.583430][    C0]  </TASK>
[   32.586470][  T609] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   32.586622][    C0] FAULT_INJECTION: forcing a failure.
[   32.586622][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 8
[   32.595079][  T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.595091][  T609] Call Trace:
[   32.595097][  T609]  <TASK>
[   32.595104][  T609]  __dump_stack+0x21/0x30
[   32.629059][  T609]  dump_stack_lvl+0x110/0x170
[   32.633761][  T609]  ? show_regs_print_info+0x20/0x20
[   32.638980][  T609]  ? prandom_u32+0x24d/0x290
[   32.643592][  T609]  dump_stack+0x15/0x20
[   32.647776][  T609]  should_fail+0x3ab/0x500
[   32.652204][  T609]  should_fail_alloc_page+0x55/0x80
[   32.657419][  T609]  prepare_alloc_pages+0x13f/0x590
[   32.662548][  T609]  ? should_fail_alloc_page+0x55/0x80
[   32.667930][  T609]  ? __alloc_pages_bulk+0xab0/0xab0
[   32.673145][  T609]  ? __alloc_pages_bulk+0xab0/0xab0
[   32.678363][  T609]  __alloc_pages+0x11d/0x460
[   32.682975][  T609]  ? prep_new_page+0x110/0x110
[   32.687752][  T609]  alloc_slab_page+0x1c/0x80
[   32.692360][  T609]  new_slab+0x38c/0x4d0
[   32.696546][  T609]  ___slab_alloc+0x3ac/0x840
[   32.701162][  T609]  ? __sigqueue_alloc+0x137/0x210
[   32.706214][  T609]  ? __sigqueue_alloc+0x137/0x210
[   32.711259][  T609]  __slab_alloc+0x49/0x90
[   32.715617][  T609]  ? __sigqueue_alloc+0x137/0x210
[   32.720655][  T609]  kmem_cache_alloc+0x138/0x260
[   32.725535][  T609]  __sigqueue_alloc+0x137/0x210
[   32.730399][  T609]  __send_signal+0x21a/0xce0
[   32.735010][  T609]  send_signal+0x416/0x580
[   32.739441][  T609]  force_sig_info_to_task+0x2e5/0x3b0
[   32.744828][  T609]  force_sig_fault+0xd9/0x130
[   32.749541][  T609]  ? force_sig_fault_to_task+0x130/0x130
[   32.755189][  T609]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   32.760923][  T609]  ? page_fault_oops+0x8b0/0x8b0
[   32.765874][  T609]  ? signal_setup_done+0x384/0x480
[   32.770996][  T609]  __bad_area_nosemaphore+0x2f9/0x470
[   32.776402][  T609]  bad_area_access_error+0x1ea/0x300
[   32.781729][  T609]  do_user_addr_fault+0x6f9/0x11c0
[   32.786865][  T609]  ? do_kern_addr_fault+0x80/0x80
[   32.791905][  T609]  ? debug_smp_processor_id+0x17/0x20
[   32.797302][  T609]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   32.803386][  T609]  ? exit_to_user_mode_prepare+0x39/0xd0
[   32.809043][  T609]  exc_page_fault+0x51/0xb0
[   32.813561][  T609]  asm_exc_page_fault+0x27/0x30
[   32.818427][  T609] RIP: 0033:0x7fddeba713d8
[   32.822890][  T609] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   32.842542][  T609] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   32.848633][  T609] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   32.856621][  T609] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   32.864606][  T609] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   32.872609][  T609] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   32.880597][  T609] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   32.888593][  T609]  </TASK>
[   32.891642][  T609] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[   32.891642][    C0] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   32.899637][  T609]   cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0
[   32.908315][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.918061][  T609]   node 0: slabs: 7, objs: 252, free: 0
[   32.928228][    C0] Call Trace:
[   32.928238][    C0]  <IRQ>
[   32.935300][    C1] FAULT_INJECTION: forcing a failure.
[   32.935300][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 7
[   32.937156][    C0]  __dump_stack+0x21/0x30
[   32.957705][    C0]  dump_stack_lvl+0x110/0x170
[   32.962399][    C0]  ? show_regs_print_info+0x20/0x20
[   32.967704][    C0]  ? prandom_u32+0x24d/0x290
[   32.972332][    C0]  dump_stack+0x15/0x20
[   32.976498][    C0]  should_fail+0x3ab/0x500
[   32.980963][    C0]  should_fail_alloc_page+0x55/0x80
[   32.986198][    C0]  prepare_alloc_pages+0x13f/0x590
[   32.991331][    C0]  ? should_fail_alloc_page+0x55/0x80
[   32.996713][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   33.001924][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   33.007139][    C0]  __alloc_pages+0x11d/0x460
[   33.011739][    C0]  ? prep_new_page+0x110/0x110
[   33.016533][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.022615][    C0]  alloc_slab_page+0x1c/0x80
[   33.027220][    C0]  new_slab+0x38c/0x4d0
[   33.031384][    C0]  ___slab_alloc+0x3ac/0x840
[   33.035992][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.041549][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.047103][    C0]  __slab_alloc+0x49/0x90
[   33.051443][    C0]  kmem_cache_alloc_trace+0x146/0x270
[   33.056826][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.062391][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   33.067774][    C0]  icmp6_dst_alloc+0x35f/0x520
[   33.072549][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   33.077233][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.083312][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   33.088262][    C0]  ? ndisc_send_rs+0x61f/0x960
[   33.093036][    C0]  ? memcpy+0x56/0x70
[   33.097027][    C0]  ndisc_send_rs+0x711/0x960
[   33.101635][    C0]  addrconf_rs_timer+0x35a/0x600
[   33.106583][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.112686][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[   33.117743][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[   33.123305][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.129396][    C0]  call_timer_fn+0x38/0x290
[   33.133930][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.140005][    C0]  __run_timers+0x637/0x9a0
[   33.144526][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   33.149397][    C0]  ? calc_index+0x200/0x200
[   33.153914][    C0]  ? asm_common_interrupt+0x27/0x40
[   33.159145][    C0]  run_timer_softirq+0x6a/0xf0
[   33.163923][    C0]  handle_softirqs+0x250/0x560
[   33.168705][    C0]  __irq_exit_rcu+0x52/0xf0
[   33.173228][    C0]  irq_exit_rcu+0x9/0x10
[   33.177485][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   33.183158][    C0]  </IRQ>
[   33.186096][    C0]  <TASK>
[   33.189036][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   33.195027][    C0] RIP: 0010:dump_stack_lvl+0x144/0x170
[   33.200516][    C0] Code: e6 00 02 00 00 31 ff e8 3a 97 be fc 49 81 e5 00 02 00 00 75 07 e8 ec 92 be fc eb 06 e8 e5 92 be fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[   33.220141][    C0] RSP: 0018:ffffc90000c2f920 EFLAGS: 00000283
[   33.226228][    C0] RAX: ffffffff84ab23fb RBX: ffffffff8564bda0 RCX: 0000000000080000
[   33.234209][    C0] RDX: ffffc90002f72000 RSI: 000000000004154e RDI: 000000000004154f
[   33.242192][    C0] RBP: ffffc90000c2f9b0 R08: 0000000000000003 R09: 0000000000000004
[   33.250204][    C0] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   33.258292][    C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff92000185f24
[   33.266711][    C0]  ? dump_stack_lvl+0x13b/0x170
[   33.271575][    C0]  ? show_regs_print_info+0x20/0x20
[   33.276812][    C0]  ? prandom_u32+0x24d/0x290
[   33.281449][    C0]  dump_stack+0x15/0x20
[   33.285879][    C0]  should_fail+0x3ab/0x500
[   33.290305][    C0]  should_fail_alloc_page+0x55/0x80
[   33.295520][    C0]  prepare_alloc_pages+0x13f/0x590
[   33.300641][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   33.306466][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   33.311686][    C0]  __alloc_pages+0x11d/0x460
[   33.316306][    C0]  ? prep_new_page+0x110/0x110
[   33.321080][    C0]  ? xas_load+0x2dc/0x300
[   33.325429][    C0]  pagecache_get_page+0xacc/0xdd0
[   33.330470][    C0]  ? page_cache_prev_miss+0x290/0x290
[   33.335869][    C0]  ? __kmalloc+0x13d/0x2c0
[   33.340298][    C0]  ? aio_setup_ring+0x2f1/0xba0
[   33.345159][    C0]  aio_setup_ring+0x39d/0xba0
[   33.349851][    C0]  ? free_ioctx_reqs+0x160/0x160
[   33.354801][    C0]  ioctx_alloc+0x31d/0x6d0
[   33.359262][    C0]  __se_sys_io_setup+0x6f/0x220
[   33.364143][    C0]  __x64_sys_io_setup+0x5b/0x70
[   33.369307][    C0]  x64_sys_call+0x767/0x9a0
[   33.373836][    C0]  do_syscall_64+0x4c/0xa0
[   33.378269][    C0]  ? clear_bhb_loop+0x50/0xa0
[   33.382963][    C0]  ? clear_bhb_loop+0x50/0xa0
[   33.387659][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.393566][    C0] RIP: 0033:0x7f9d64c66f99
[   33.397994][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.417704][    C0] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   33.426134][    C0] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   33.434134][    C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   33.442121][    C0] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   33.450117][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.458099][    C0] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   33.466097][    C0]  </TASK>
[   33.469132][    C1] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   33.469190][    C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[   33.477744][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.485769][    C0]   cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0
[   33.495798][    C1] Call Trace:
[   33.495807][    C1]  <IRQ>
[   33.495814][    C1]  __dump_stack+0x21/0x30
[   33.505727][    C0]   node 0: slabs: 81, objs: 2592, free: 0
[   33.509023][    C1]  dump_stack_lvl+0x110/0x170
[   33.509044][    C1]  ? show_regs_print_info+0x20/0x20
[   33.512138][    C0] FAULT_INJECTION: forcing a failure.
[   33.512138][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 6
[   33.516221][    C1]  ? prandom_u32+0x24d/0x290
[   33.550364][    C1]  dump_stack+0x15/0x20
[   33.554537][    C1]  should_fail+0x3ab/0x500
[   33.558970][    C1]  should_fail_alloc_page+0x55/0x80
[   33.564186][    C1]  prepare_alloc_pages+0x13f/0x590
[   33.569408][    C1]  ? __stack_depot_save+0x34/0x480
[   33.574535][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   33.579745][    C1]  ? __kasan_slab_alloc+0xc9/0xe0
[   33.584871][    C1]  ? __kasan_slab_alloc+0xb7/0xe0
[   33.589917][    C1]  ? slab_post_alloc_hook+0x4f/0x2b0
[   33.595219][    C1]  __alloc_pages+0x11d/0x460
[   33.599851][    C1]  ? sysvec_apic_timer_interrupt+0xa9/0xc0
[   33.605667][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   33.611854][    C1]  ? prep_new_page+0x110/0x110
[   33.616656][    C1]  ? do_user_addr_fault+0x6f9/0x11c0
[   33.621953][    C1]  ? asm_exc_page_fault+0x27/0x30
[   33.626991][    C1]  new_slab+0xa0/0x4d0
[   33.631075][    C1]  ___slab_alloc+0x3ac/0x840
[   33.635682][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.641242][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.646797][    C1]  __slab_alloc+0x49/0x90
[   33.651155][    C1]  kmem_cache_alloc_trace+0x146/0x270
[   33.656536][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   33.662091][    C1]  dst_cow_metrics_generic+0x55/0x1c0
[   33.667920][    C1]  icmp6_dst_alloc+0x35f/0x520
[   33.672699][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   33.677385][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   33.682335][    C1]  ? ndisc_send_rs+0x61f/0x960
[   33.687112][    C1]  ? memcpy+0x56/0x70
[   33.691107][    C1]  ndisc_send_rs+0x711/0x960
[   33.695714][    C1]  addrconf_rs_timer+0x35a/0x600
[   33.700666][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.706749][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   33.711795][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   33.717360][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.723465][    C1]  call_timer_fn+0x38/0x290
[   33.728089][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   33.734176][    C1]  __run_timers+0x637/0x9a0
[   33.738697][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   33.743560][    C1]  ? calc_index+0x200/0x200
[   33.748076][    C1]  ? asm_common_interrupt+0x27/0x40
[   33.753308][    C1]  run_timer_softirq+0x6a/0xf0
[   33.758084][    C1]  handle_softirqs+0x250/0x560
[   33.762857][    C1]  ? irqtime_account_irq+0xbe/0x390
[   33.768064][    C1]  __irq_exit_rcu+0x52/0xf0
[   33.772582][    C1]  irq_exit_rcu+0x9/0x10
[   33.776832][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   33.782482][    C1]  </IRQ>
[   33.785428][    C1]  <TASK>
[   33.788386][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   33.794377][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[   33.800803][    C1] Code: 47 6d 86 e8 0c 50 f5 fc 4c 89 f7 48 83 3d e9 70 b9 01 00 74 31 e8 ee 1c 9c fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a5 ee 93 fc 65 8b 05 16 97 4e 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   33.820557][    C1] RSP: 0000:ffffc90000c97a50 EFLAGS: 00000206
[   33.826638][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   33.834620][    C1] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000001
[   33.842635][    C1] RBP: ffffc90000c97a60 R08: ffff8881302b0007 R09: 1ffff11026056000
[   33.850630][    C1] R10: dffffc0000000000 R11: ffffed1026056001 R12: dffffc0000000000
[   33.858632][    C1] R13: ffff88810dd612e0 R14: ffff8881302b0840 R15: 1ffff11026056108
[   33.866627][    C1]  force_sig_info_to_task+0x306/0x3b0
[   33.872029][    C1]  force_sig_fault+0xd9/0x130
[   33.876720][    C1]  ? force_sig_fault_to_task+0x130/0x130
[   33.882368][    C1]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   33.888108][    C1]  ? page_fault_oops+0x8b0/0x8b0
[   33.893056][    C1]  ? signal_setup_done+0x384/0x480
[   33.898180][    C1]  __bad_area_nosemaphore+0x2f9/0x470
[   33.903575][    C1]  bad_area_access_error+0x1ea/0x300
[   33.908917][    C1]  do_user_addr_fault+0x6f9/0x11c0
[   33.914059][    C1]  ? do_kern_addr_fault+0x80/0x80
[   33.919107][    C1]  ? debug_smp_processor_id+0x17/0x20
[   33.924500][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   33.930587][    C1]  ? exit_to_user_mode_prepare+0x39/0xd0
[   33.936235][    C1]  exc_page_fault+0x51/0xb0
[   33.940749][    C1]  asm_exc_page_fault+0x27/0x30
[   33.945612][    C1] RIP: 0033:0x7fddeba713d8
[   33.950045][    C1] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   33.969666][    C1] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   33.975747][    C1] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   33.983815][    C1] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   33.991804][    C1] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   33.999791][    C1] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   34.007776][    C1] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   34.015768][    C1]  </TASK>
[   34.018808][    C0] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   34.018872][    C1] FAULT_INJECTION: forcing a failure.
[   34.018872][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 5
[   34.027684][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.051101][    C0] Call Trace:
[   34.054396][    C0]  <IRQ>
[   34.057254][    C0]  __dump_stack+0x21/0x30
[   34.061600][    C0]  dump_stack_lvl+0x110/0x170
[   34.066317][    C0]  ? show_regs_print_info+0x20/0x20
[   34.071531][    C0]  ? prandom_u32+0x24d/0x290
[   34.076131][    C0]  dump_stack+0x15/0x20
[   34.080298][    C0]  should_fail+0x3ab/0x500
[   34.084728][    C0]  should_fail_alloc_page+0x55/0x80
[   34.090029][    C0]  prepare_alloc_pages+0x13f/0x590
[   34.095184][    C0]  ? __stack_depot_save+0x34/0x480
[   34.100311][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   34.105697][    C0]  ? __kasan_slab_alloc+0xc9/0xe0
[   34.110741][    C0]  ? __kasan_slab_alloc+0xb7/0xe0
[   34.115795][    C0]  ? slab_post_alloc_hook+0x4f/0x2b0
[   34.121205][    C0]  __alloc_pages+0x11d/0x460
[   34.125808][    C0]  ? sysvec_apic_timer_interrupt+0xa9/0xc0
[   34.131627][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   34.137795][    C0]  ? prep_new_page+0x110/0x110
[   34.142581][    C0]  ? __alloc_pages+0x11d/0x460
[   34.147369][    C0]  ? aio_setup_ring+0x39d/0xba0
[   34.152416][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.158533][    C0]  new_slab+0xa0/0x4d0
[   34.162742][    C0]  ___slab_alloc+0x3ac/0x840
[   34.167368][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.172943][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.178690][    C0]  __slab_alloc+0x49/0x90
[   34.183050][    C0]  kmem_cache_alloc_trace+0x146/0x270
[   34.188459][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.194041][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   34.199438][    C0]  icmp6_dst_alloc+0x35f/0x520
[   34.204227][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   34.208942][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.215026][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   34.219978][    C0]  ? ndisc_send_rs+0x61f/0x960
[   34.224758][    C0]  ? memcpy+0x56/0x70
[   34.228758][    C0]  ndisc_send_rs+0x711/0x960
[   34.233378][    C0]  addrconf_rs_timer+0x35a/0x600
[   34.238358][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.244453][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.250548][    C0]  call_timer_fn+0x38/0x290
[   34.255185][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.261447][    C0]  __run_timers+0x637/0x9a0
[   34.265962][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   34.270826][    C0]  ? calc_index+0x200/0x200
[   34.275354][    C0]  ? asm_common_interrupt+0x27/0x40
[   34.280569][    C0]  run_timer_softirq+0x6a/0xf0
[   34.285342][    C0]  handle_softirqs+0x250/0x560
[   34.290124][    C0]  __irq_exit_rcu+0x52/0xf0
[   34.294641][    C0]  irq_exit_rcu+0x9/0x10
[   34.298891][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   34.304538][    C0]  </IRQ>
[   34.307478][    C0]  <TASK>
[   34.310419][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   34.316411][    C0] RIP: 0010:dump_stack_lvl+0x144/0x170
[   34.321883][    C0] Code: e6 00 02 00 00 31 ff e8 3a 97 be fc 49 81 e5 00 02 00 00 75 07 e8 ec 92 be fc eb 06 e8 e5 92 be fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[   34.341523][    C0] RSP: 0018:ffffc90000c2f920 EFLAGS: 00000283
[   34.347606][    C0] RAX: ffffffff84ab23fb RBX: ffffffff8564bda0 RCX: 0000000000080000
[   34.355593][    C0] RDX: ffffc90002f72000 RSI: 000000000004154e RDI: 000000000004154f
[   34.363659][    C0] RBP: ffffc90000c2f9b0 R08: 0000000000000003 R09: 0000000000000004
[   34.371640][    C0] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   34.379626][    C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff92000185f24
[   34.387614][    C0]  ? dump_stack_lvl+0x13b/0x170
[   34.392478][    C0]  ? show_regs_print_info+0x20/0x20
[   34.397689][    C0]  ? prandom_u32+0x24d/0x290
[   34.402293][    C0]  dump_stack+0x15/0x20
[   34.406462][    C0]  should_fail+0x3ab/0x500
[   34.410889][    C0]  should_fail_alloc_page+0x55/0x80
[   34.416187][    C0]  prepare_alloc_pages+0x13f/0x590
[   34.421314][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   34.427133][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   34.432356][    C0]  __alloc_pages+0x11d/0x460
[   34.436968][    C0]  ? prep_new_page+0x110/0x110
[   34.441747][    C0]  ? xas_load+0x2dc/0x300
[   34.446123][    C0]  pagecache_get_page+0xacc/0xdd0
[   34.451166][    C0]  ? page_cache_prev_miss+0x290/0x290
[   34.456568][    C0]  ? __kmalloc+0x13d/0x2c0
[   34.461001][    C0]  ? aio_setup_ring+0x2f1/0xba0
[   34.465866][    C0]  aio_setup_ring+0x39d/0xba0
[   34.470557][    C0]  ? free_ioctx_reqs+0x160/0x160
[   34.475513][    C0]  ioctx_alloc+0x31d/0x6d0
[   34.479940][    C0]  __se_sys_io_setup+0x6f/0x220
[   34.484804][    C0]  __x64_sys_io_setup+0x5b/0x70
[   34.489677][    C0]  x64_sys_call+0x767/0x9a0
[   34.494193][    C0]  do_syscall_64+0x4c/0xa0
[   34.498629][    C0]  ? clear_bhb_loop+0x50/0xa0
[   34.503332][    C0]  ? clear_bhb_loop+0x50/0xa0
[   34.508148][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.514082][    C0] RIP: 0033:0x7f9d64c66f99
[   34.518524][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.538141][    C0] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   34.546572][    C0] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   34.554574][    C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   34.562555][    C0] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   34.570542][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.578528][    C0] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   34.586551][    C0]  </TASK>
[   34.589592][    C1] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   34.589626][    C0] FAULT_INJECTION: forcing a failure.
[   34.589626][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 4
[   34.598286][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   34.598299][    C1] Call Trace:
[   34.598307][    C1]  <IRQ>
[   34.598313][    C1]  __dump_stack+0x21/0x30
[   34.632635][    C1]  dump_stack_lvl+0x110/0x170
[   34.637337][    C1]  ? show_regs_print_info+0x20/0x20
[   34.642546][    C1]  ? prandom_u32+0x24d/0x290
[   34.647153][    C1]  dump_stack+0x15/0x20
[   34.651319][    C1]  should_fail+0x3ab/0x500
[   34.655747][    C1]  should_fail_alloc_page+0x55/0x80
[   34.660955][    C1]  prepare_alloc_pages+0x13f/0x590
[   34.666089][    C1]  ? should_fail_alloc_page+0x55/0x80
[   34.671472][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   34.676814][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   34.682043][    C1]  __alloc_pages+0x11d/0x460
[   34.686660][    C1]  ? prep_new_page+0x110/0x110
[   34.691440][    C1]  alloc_slab_page+0x1c/0x80
[   34.696052][    C1]  new_slab+0x38c/0x4d0
[   34.700220][    C1]  ___slab_alloc+0x3ac/0x840
[   34.704832][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.710395][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.715952][    C1]  __slab_alloc+0x49/0x90
[   34.720299][    C1]  kmem_cache_alloc_trace+0x146/0x270
[   34.725686][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   34.731258][    C1]  dst_cow_metrics_generic+0x55/0x1c0
[   34.736640][    C1]  icmp6_dst_alloc+0x35f/0x520
[   34.741437][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   34.746136][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   34.751089][    C1]  ? ndisc_send_rs+0x61f/0x960
[   34.755882][    C1]  ? memcpy+0x56/0x70
[   34.759876][    C1]  ndisc_send_rs+0x711/0x960
[   34.764478][    C1]  addrconf_rs_timer+0x35a/0x600
[   34.769439][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.775525][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   34.780564][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   34.786132][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.792211][    C1]  call_timer_fn+0x38/0x290
[   34.796729][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   34.802816][    C1]  __run_timers+0x637/0x9a0
[   34.807537][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   34.812433][    C1]  ? calc_index+0x200/0x200
[   34.816967][    C1]  ? asm_common_interrupt+0x27/0x40
[   34.822211][    C1]  run_timer_softirq+0x6a/0xf0
[   34.827010][    C1]  handle_softirqs+0x250/0x560
[   34.831795][    C1]  ? irqtime_account_irq+0xbe/0x390
[   34.837138][    C1]  __irq_exit_rcu+0x52/0xf0
[   34.841676][    C1]  irq_exit_rcu+0x9/0x10
[   34.845950][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   34.851628][    C1]  </IRQ>
[   34.854576][    C1]  <TASK>
[   34.857527][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   34.863522][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[   34.869961][    C1] Code: 47 6d 86 e8 0c 50 f5 fc 4c 89 f7 48 83 3d e9 70 b9 01 00 74 31 e8 ee 1c 9c fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a5 ee 93 fc 65 8b 05 16 97 4e 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   34.889697][    C1] RSP: 0000:ffffc90000c97a50 EFLAGS: 00000206
[   34.895785][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   34.903862][    C1] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000001
[   34.911877][    C1] RBP: ffffc90000c97a60 R08: ffff8881302b0007 R09: 1ffff11026056000
[   34.919867][    C1] R10: dffffc0000000000 R11: ffffed1026056001 R12: dffffc0000000000
[   34.927847][    C1] R13: ffff88810dd612e0 R14: ffff8881302b0840 R15: 1ffff11026056108
[   34.935847][    C1]  force_sig_info_to_task+0x306/0x3b0
[   34.941236][    C1]  force_sig_fault+0xd9/0x130
[   34.945928][    C1]  ? force_sig_fault_to_task+0x130/0x130
[   34.951570][    C1]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   34.957392][    C1]  ? page_fault_oops+0x8b0/0x8b0
[   34.962339][    C1]  ? signal_setup_done+0x384/0x480
[   34.967481][    C1]  __bad_area_nosemaphore+0x2f9/0x470
[   34.972864][    C1]  bad_area_access_error+0x1ea/0x300
[   34.978166][    C1]  do_user_addr_fault+0x6f9/0x11c0
[   34.983293][    C1]  ? do_kern_addr_fault+0x80/0x80
[   34.988364][    C1]  ? debug_smp_processor_id+0x17/0x20
[   34.993748][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   34.999836][    C1]  ? exit_to_user_mode_prepare+0x39/0xd0
[   35.005487][    C1]  exc_page_fault+0x51/0xb0
[   35.010024][    C1]  asm_exc_page_fault+0x27/0x30
[   35.014890][    C1] RIP: 0033:0x7fddeba713d8
[   35.019340][    C1] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   35.038954][    C1] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   35.045041][    C1] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   35.053042][    C1] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   35.061052][    C1] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   35.069034][    C1] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   35.077016][    C1] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   35.085060][    C1]  </TASK>
[   35.088110][    C0] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   35.088132][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[   35.096739][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.104732][    C1]   cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0
[   35.114811][    C0] Call Trace:
[   35.114830][    C0]  <IRQ>
[   35.124738][    C1]   node 0: slabs: 81, objs: 2592, free: 0
[   35.127990][    C0]  __dump_stack+0x21/0x30
[   35.131110][    C1] FAULT_INJECTION: forcing a failure.
[   35.131110][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 3
[   35.136657][    C0]  dump_stack_lvl+0x110/0x170
[   35.159033][    C0]  ? show_regs_print_info+0x20/0x20
[   35.164253][    C0]  ? prandom_u32+0x24d/0x290
[   35.168859][    C0]  dump_stack+0x15/0x20
[   35.173030][    C0]  should_fail+0x3ab/0x500
[   35.177457][    C0]  should_fail_alloc_page+0x55/0x80
[   35.182675][    C0]  prepare_alloc_pages+0x13f/0x590
[   35.187796][    C0]  ? should_fail_alloc_page+0x55/0x80
[   35.193390][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   35.198596][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   35.203811][    C0]  __alloc_pages+0x11d/0x460
[   35.208437][    C0]  ? prep_new_page+0x110/0x110
[   35.213219][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.219303][    C0]  alloc_slab_page+0x1c/0x80
[   35.223904][    C0]  new_slab+0x38c/0x4d0
[   35.228066][    C0]  ___slab_alloc+0x3ac/0x840
[   35.232667][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.238336][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.243901][    C0]  __slab_alloc+0x49/0x90
[   35.248249][    C0]  kmem_cache_alloc_trace+0x146/0x270
[   35.253631][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.259188][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   35.264656][    C0]  icmp6_dst_alloc+0x35f/0x520
[   35.269436][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   35.274120][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.280207][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   35.285161][    C0]  ? ndisc_send_rs+0x61f/0x960
[   35.289934][    C0]  ? memcpy+0x56/0x70
[   35.293930][    C0]  ndisc_send_rs+0x711/0x960
[   35.298532][    C0]  addrconf_rs_timer+0x35a/0x600
[   35.303485][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.309563][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.315672][    C0]  call_timer_fn+0x38/0x290
[   35.320193][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.326275][    C0]  __run_timers+0x637/0x9a0
[   35.330810][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   35.335672][    C0]  ? calc_index+0x200/0x200
[   35.340218][    C0]  ? asm_common_interrupt+0x27/0x40
[   35.345438][    C0]  run_timer_softirq+0x6a/0xf0
[   35.350217][    C0]  handle_softirqs+0x250/0x560
[   35.354996][    C0]  __irq_exit_rcu+0x52/0xf0
[   35.359510][    C0]  irq_exit_rcu+0x9/0x10
[   35.363784][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   35.369432][    C0]  </IRQ>
[   35.372369][    C0]  <TASK>
[   35.375304][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   35.381294][    C0] RIP: 0010:dump_stack_lvl+0x144/0x170
[   35.386763][    C0] Code: e6 00 02 00 00 31 ff e8 3a 97 be fc 49 81 e5 00 02 00 00 75 07 e8 ec 92 be fc eb 06 e8 e5 92 be fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[   35.406409][    C0] RSP: 0018:ffffc90000c2f920 EFLAGS: 00000283
[   35.412577][    C0] RAX: ffffffff84ab23fb RBX: ffffffff8564bda0 RCX: 0000000000080000
[   35.420563][    C0] RDX: ffffc90002f72000 RSI: 000000000004154e RDI: 000000000004154f
[   35.428553][    C0] RBP: ffffc90000c2f9b0 R08: 0000000000000003 R09: 0000000000000004
[   35.436538][    C0] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   35.444520][    C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff92000185f24
[   35.452520][    C0]  ? dump_stack_lvl+0x13b/0x170
[   35.457387][    C0]  ? show_regs_print_info+0x20/0x20
[   35.462612][    C0]  ? prandom_u32+0x24d/0x290
[   35.467211][    C0]  dump_stack+0x15/0x20
[   35.471379][    C0]  should_fail+0x3ab/0x500
[   35.475816][    C0]  should_fail_alloc_page+0x55/0x80
[   35.481024][    C0]  prepare_alloc_pages+0x13f/0x590
[   35.486147][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   35.491974][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   35.497194][    C0]  __alloc_pages+0x11d/0x460
[   35.501813][    C0]  ? prep_new_page+0x110/0x110
[   35.506596][    C0]  ? xas_load+0x2dc/0x300
[   35.510933][    C0]  pagecache_get_page+0xacc/0xdd0
[   35.515969][    C0]  ? page_cache_prev_miss+0x290/0x290
[   35.521365][    C0]  ? __kmalloc+0x13d/0x2c0
[   35.525802][    C0]  ? aio_setup_ring+0x2f1/0xba0
[   35.530660][    C0]  aio_setup_ring+0x39d/0xba0
[   35.535353][    C0]  ? free_ioctx_reqs+0x160/0x160
[   35.540307][    C0]  ioctx_alloc+0x31d/0x6d0
[   35.544738][    C0]  __se_sys_io_setup+0x6f/0x220
[   35.549605][    C0]  __x64_sys_io_setup+0x5b/0x70
[   35.554469][    C0]  x64_sys_call+0x767/0x9a0
[   35.558987][    C0]  do_syscall_64+0x4c/0xa0
[   35.563413][    C0]  ? clear_bhb_loop+0x50/0xa0
[   35.568096][    C0]  ? clear_bhb_loop+0x50/0xa0
[   35.572788][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.578697][    C0] RIP: 0033:0x7f9d64c66f99
[   35.583129][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.602745][    C0] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   35.611175][    C0] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   35.619155][    C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   35.627140][    C0] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   35.635120][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.643096][    C0] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   35.651110][    C0]  </TASK>
[   35.654142][    C1] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   35.654168][    C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[   35.663359][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.663373][    C1] Call Trace:
[   35.663380][    C1]  <IRQ>
[   35.671379][    C0]   cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0
[   35.681405][    C1]  __dump_stack+0x21/0x30
[   35.684804][    C0]   node 0: slabs: 81, objs: 2592, free: 0
[   35.687656][    C1]  dump_stack_lvl+0x110/0x170
[   35.697747][    C0] FAULT_INJECTION: forcing a failure.
[   35.697747][    C0] name fail_page_alloc, interval 1, probability 100, space 0, times 2
[   35.701804][    C1]  ? show_regs_print_info+0x20/0x20
[   35.730853][    C1]  ? prandom_u32+0x24d/0x290
[   35.735470][    C1]  dump_stack+0x15/0x20
[   35.739644][    C1]  should_fail+0x3ab/0x500
[   35.744092][    C1]  should_fail_alloc_page+0x55/0x80
[   35.749325][    C1]  prepare_alloc_pages+0x13f/0x590
[   35.754456][    C1]  ? __stack_depot_save+0x34/0x480
[   35.759595][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   35.764810][    C1]  ? __kasan_slab_alloc+0xc9/0xe0
[   35.769844][    C1]  ? __kasan_slab_alloc+0xb7/0xe0
[   35.774880][    C1]  ? slab_post_alloc_hook+0x4f/0x2b0
[   35.780196][    C1]  __alloc_pages+0x11d/0x460
[   35.784807][    C1]  ? sysvec_apic_timer_interrupt+0xa9/0xc0
[   35.790632][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   35.796795][    C1]  ? prep_new_page+0x110/0x110
[   35.801566][    C1]  ? do_user_addr_fault+0x6f9/0x11c0
[   35.806863][    C1]  ? asm_exc_page_fault+0x27/0x30
[   35.811917][    C1]  new_slab+0xa0/0x4d0
[   35.816008][    C1]  ___slab_alloc+0x3ac/0x840
[   35.820608][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.826165][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.831724][    C1]  __slab_alloc+0x49/0x90
[   35.836085][    C1]  kmem_cache_alloc_trace+0x146/0x270
[   35.841471][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   35.847045][    C1]  dst_cow_metrics_generic+0x55/0x1c0
[   35.852441][    C1]  icmp6_dst_alloc+0x35f/0x520
[   35.857229][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   35.861937][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   35.866908][    C1]  ? ndisc_send_rs+0x61f/0x960
[   35.871788][    C1]  ? memcpy+0x56/0x70
[   35.875814][    C1]  ndisc_send_rs+0x711/0x960
[   35.880434][    C1]  addrconf_rs_timer+0x35a/0x600
[   35.885386][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.891469][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   35.896517][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   35.902084][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.908242][    C1]  call_timer_fn+0x38/0x290
[   35.912857][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   35.918936][    C1]  __run_timers+0x637/0x9a0
[   35.923450][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   35.928322][    C1]  ? calc_index+0x200/0x200
[   35.932837][    C1]  ? asm_common_interrupt+0x27/0x40
[   35.938053][    C1]  run_timer_softirq+0x6a/0xf0
[   35.942847][    C1]  handle_softirqs+0x250/0x560
[   35.947687][    C1]  ? irqtime_account_irq+0xbe/0x390
[   35.954300][    C1]  __irq_exit_rcu+0x52/0xf0
[   35.958844][    C1]  irq_exit_rcu+0x9/0x10
[   35.963100][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   35.968745][    C1]  </IRQ>
[   35.971688][    C1]  <TASK>
[   35.974629][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   35.980709][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[   35.987133][    C1] Code: 47 6d 86 e8 0c 50 f5 fc 4c 89 f7 48 83 3d e9 70 b9 01 00 74 31 e8 ee 1c 9c fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a5 ee 93 fc 65 8b 05 16 97 4e 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   36.006753][    C1] RSP: 0000:ffffc90000c97a50 EFLAGS: 00000206
[   36.012832][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   36.020821][    C1] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000001
[   36.028803][    C1] RBP: ffffc90000c97a60 R08: ffff8881302b0007 R09: 1ffff11026056000
[   36.036786][    C1] R10: dffffc0000000000 R11: ffffed1026056001 R12: dffffc0000000000
[   36.044769][    C1] R13: ffff88810dd612e0 R14: ffff8881302b0840 R15: 1ffff11026056108
[   36.052845][    C1]  force_sig_info_to_task+0x306/0x3b0
[   36.058241][    C1]  force_sig_fault+0xd9/0x130
[   36.062932][    C1]  ? force_sig_fault_to_task+0x130/0x130
[   36.068588][    C1]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   36.074327][    C1]  ? page_fault_oops+0x8b0/0x8b0
[   36.079305][    C1]  ? signal_setup_done+0x384/0x480
[   36.084956][    C1]  __bad_area_nosemaphore+0x2f9/0x470
[   36.090339][    C1]  bad_area_access_error+0x1ea/0x300
[   36.095635][    C1]  do_user_addr_fault+0x6f9/0x11c0
[   36.100852][    C1]  ? do_kern_addr_fault+0x80/0x80
[   36.105921][    C1]  ? debug_smp_processor_id+0x17/0x20
[   36.111479][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   36.117584][    C1]  ? exit_to_user_mode_prepare+0x39/0xd0
[   36.123839][    C1]  exc_page_fault+0x51/0xb0
[   36.128356][    C1]  asm_exc_page_fault+0x27/0x30
[   36.133396][    C1] RIP: 0033:0x7fddeba713d8
[   36.137850][    C1] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   36.157685][    C1] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   36.163786][    C1] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   36.171774][    C1] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   36.179778][    C1] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   36.187761][    C1] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   36.195848][    C1] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   36.203839][    C1]  </TASK>
[   36.206899][    C0] CPU: 0 PID: 630 Comm: syz.3.133 Tainted: G        W         syzkaller #0
[   36.206919][    C1] FAULT_INJECTION: forcing a failure.
[   36.206919][    C1] name fail_page_alloc, interval 1, probability 100, space 0, times 1
[   36.215528][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.215540][    C0] Call Trace:
[   36.215547][    C0]  <IRQ>
[   36.245186][    C0]  __dump_stack+0x21/0x30
[   36.249535][    C0]  dump_stack_lvl+0x110/0x170
[   36.254228][    C0]  ? show_regs_print_info+0x20/0x20
[   36.259445][    C0]  ? prandom_u32+0x24d/0x290
[   36.264072][    C0]  dump_stack+0x15/0x20
[   36.268241][    C0]  should_fail+0x3ab/0x500
[   36.272667][    C0]  should_fail_alloc_page+0x55/0x80
[   36.277989][    C0]  prepare_alloc_pages+0x13f/0x590
[   36.283305][    C0]  ? __stack_depot_save+0x34/0x480
[   36.288528][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   36.293870][    C0]  ? __kasan_slab_alloc+0xc9/0xe0
[   36.299048][    C0]  ? __kasan_slab_alloc+0xb7/0xe0
[   36.304090][    C0]  ? slab_post_alloc_hook+0x4f/0x2b0
[   36.309617][    C0]  __alloc_pages+0x11d/0x460
[   36.314321][    C0]  ? sysvec_apic_timer_interrupt+0xa9/0xc0
[   36.320536][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   36.327762][    C0]  ? prep_new_page+0x110/0x110
[   36.332544][    C0]  ? __alloc_pages+0x11d/0x460
[   36.337699][    C0]  ? aio_setup_ring+0x39d/0xba0
[   36.343101][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.349211][    C0]  new_slab+0xa0/0x4d0
[   36.353292][    C0]  ___slab_alloc+0x3ac/0x840
[   36.357897][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.363469][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.369805][    C0]  __slab_alloc+0x49/0x90
[   36.374238][    C0]  kmem_cache_alloc_trace+0x146/0x270
[   36.381238][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.386795][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   36.392355][    C0]  icmp6_dst_alloc+0x35f/0x520
[   36.397137][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   36.401832][    C0]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.407917][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   36.412868][    C0]  ? ndisc_send_rs+0x61f/0x960
[   36.417637][    C0]  ? memcpy+0x56/0x70
[   36.421634][    C0]  ndisc_send_rs+0x711/0x960
[   36.426233][    C0]  addrconf_rs_timer+0x35a/0x600
[   36.431189][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   36.437274][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[   36.442308][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[   36.447870][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   36.453969][    C0]  call_timer_fn+0x38/0x290
[   36.458510][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   36.464588][    C0]  __run_timers+0x637/0x9a0
[   36.469106][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   36.474076][    C0]  ? calc_index+0x200/0x200
[   36.478771][    C0]  ? asm_common_interrupt+0x27/0x40
[   36.484013][    C0]  run_timer_softirq+0x6a/0xf0
[   36.488958][    C0]  handle_softirqs+0x250/0x560
[   36.493744][    C0]  __irq_exit_rcu+0x52/0xf0
[   36.498259][    C0]  irq_exit_rcu+0x9/0x10
[   36.502510][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   36.508176][    C0]  </IRQ>
[   36.511122][    C0]  <TASK>
[   36.514071][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   36.520068][    C0] RIP: 0010:dump_stack_lvl+0x144/0x170
[   36.525562][    C0] Code: e6 00 02 00 00 31 ff e8 3a 97 be fc 49 81 e5 00 02 00 00 75 07 e8 ec 92 be fc eb 06 e8 e5 92 be fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[   36.545202][    C0] RSP: 0018:ffffc90000c2f920 EFLAGS: 00000283
[   36.551279][    C0] RAX: ffffffff84ab23fb RBX: ffffffff8564bda0 RCX: 0000000000080000
[   36.559264][    C0] RDX: ffffc90002f72000 RSI: 000000000004154e RDI: 000000000004154f
[   36.567248][    C0] RBP: ffffc90000c2f9b0 R08: 0000000000000003 R09: 0000000000000004
[   36.575234][    C0] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   36.583309][    C0] R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff92000185f24
[   36.591316][    C0]  ? dump_stack_lvl+0x13b/0x170
[   36.596188][    C0]  ? show_regs_print_info+0x20/0x20
[   36.601462][    C0]  ? prandom_u32+0x24d/0x290
[   36.606416][    C0]  dump_stack+0x15/0x20
[   36.610581][    C0]  should_fail+0x3ab/0x500
[   36.615008][    C0]  should_fail_alloc_page+0x55/0x80
[   36.620222][    C0]  prepare_alloc_pages+0x13f/0x590
[   36.625346][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   36.631167][    C0]  ? __alloc_pages_bulk+0xab0/0xab0
[   36.636380][    C0]  __alloc_pages+0x11d/0x460
[   36.640993][    C0]  ? prep_new_page+0x110/0x110
[   36.645776][    C0]  ? xas_load+0x2dc/0x300
[   36.650122][    C0]  pagecache_get_page+0xacc/0xdd0
[   36.655162][    C0]  ? page_cache_prev_miss+0x290/0x290
[   36.660553][    C0]  ? __kmalloc+0x13d/0x2c0
[   36.664982][    C0]  ? aio_setup_ring+0x2f1/0xba0
[   36.669844][    C0]  aio_setup_ring+0x39d/0xba0
[   36.674534][    C0]  ? free_ioctx_reqs+0x160/0x160
[   36.679481][    C0]  ioctx_alloc+0x31d/0x6d0
[   36.683907][    C0]  __se_sys_io_setup+0x6f/0x220
[   36.688766][    C0]  __x64_sys_io_setup+0x5b/0x70
[   36.693633][    C0]  x64_sys_call+0x767/0x9a0
[   36.698142][    C0]  do_syscall_64+0x4c/0xa0
[   36.702566][    C0]  ? clear_bhb_loop+0x50/0xa0
[   36.707252][    C0]  ? clear_bhb_loop+0x50/0xa0
[   36.711960][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.717862][    C0] RIP: 0033:0x7f9d64c66f99
[   36.722365][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.742260][    C0] RSP: 002b:00007f9d636c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   36.750698][    C0] RAX: ffffffffffffffda RBX: 00007f9d64eeefa0 RCX: 00007f9d64c66f99
[   36.758685][    C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000200
[   36.766668][    C0] RBP: 00007f9d64cfdec4 R08: 0000000000000000 R09: 0000000000000000
[   36.774651][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.782638][    C0] R13: 00007f9d64eef038 R14: 00007f9d64eeefa0 R15: 00007ffc3cb62128
[   36.790631][    C0]  </TASK>
[   36.793663][    C1] CPU: 1 PID: 609 Comm: syz.1.126 Tainted: G        W         syzkaller #0
[   36.802282][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.812465][    C1] Call Trace:
[   36.815774][    C1]  <IRQ>
[   36.818644][    C1]  __dump_stack+0x21/0x30
[   36.819421][  T277] EXT4-fs error: 24 callbacks suppressed
[   36.819460][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   36.823003][    C1]  dump_stack_lvl+0x110/0x170
[   36.831324][  T277] EXT4-fs: 25 callbacks suppressed
[   36.831370][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   36.839872][    C1]  ? show_regs_print_info+0x20/0x20
[   36.839898][    C1]  ? prandom_u32+0x24d/0x290
[   36.844708][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   36.849761][    C1]  dump_stack+0x15/0x20
[   36.849787][    C1]  should_fail+0x3ab/0x500
[   36.849807][    C1]  should_fail_alloc_page+0x55/0x80
[   36.849830][    C1]  prepare_alloc_pages+0x13f/0x590
[   36.896164][    C1]  ? should_fail_alloc_page+0x55/0x80
[   36.901568][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   36.906779][    C1]  ? __alloc_pages_bulk+0xab0/0xab0
[   36.911987][    C1]  __alloc_pages+0x11d/0x460
[   36.916602][    C1]  ? prep_new_page+0x110/0x110
[   36.921395][    C1]  alloc_slab_page+0x1c/0x80
[   36.926014][    C1]  new_slab+0x38c/0x4d0
[   36.930192][    C1]  ___slab_alloc+0x3ac/0x840
[   36.934809][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.940386][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.945962][    C1]  __slab_alloc+0x49/0x90
[   36.950319][    C1]  kmem_cache_alloc_trace+0x146/0x270
[   36.955714][    C1]  ? dst_cow_metrics_generic+0x55/0x1c0
[   36.961300][    C1]  dst_cow_metrics_generic+0x55/0x1c0
[   36.966685][    C1]  icmp6_dst_alloc+0x35f/0x520
[   36.971467][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   36.976161][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   36.981221][    C1]  ? ndisc_send_rs+0x61f/0x960
[   36.986013][    C1]  ? memcpy+0x56/0x70
[   36.990029][    C1]  ndisc_send_rs+0x711/0x960
[   36.994644][    C1]  addrconf_rs_timer+0x35a/0x600
[   36.999613][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   37.005694][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   37.010750][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   37.016315][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   37.023014][    C1]  call_timer_fn+0x38/0x290
[   37.027555][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   37.033769][    C1]  __run_timers+0x637/0x9a0
[   37.038284][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   37.043145][    C1]  ? calc_index+0x200/0x200
[   37.047659][    C1]  ? asm_common_interrupt+0x27/0x40
[   37.052865][    C1]  run_timer_softirq+0x6a/0xf0
[   37.057638][    C1]  handle_softirqs+0x250/0x560
[   37.062414][    C1]  ? irqtime_account_irq+0xbe/0x390
[   37.067623][    C1]  __irq_exit_rcu+0x52/0xf0
[   37.072142][    C1]  irq_exit_rcu+0x9/0x10
[   37.076396][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   37.082041][    C1]  </IRQ>
[   37.084986][    C1]  <TASK>
[   37.087930][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   37.093928][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[   37.100359][    C1] Code: 47 6d 86 e8 0c 50 f5 fc 4c 89 f7 48 83 3d e9 70 b9 01 00 74 31 e8 ee 1c 9c fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a5 ee 93 fc 65 8b 05 16 97 4e 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   37.119976][    C1] RSP: 0000:ffffc90000c97a50 EFLAGS: 00000206
[   37.126049][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   37.134032][    C1] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000001
[   37.142012][    C1] RBP: ffffc90000c97a60 R08: ffff8881302b0007 R09: 1ffff11026056000
[   37.150000][    C1] R10: dffffc0000000000 R11: ffffed1026056001 R12: dffffc0000000000
[   37.157982][    C1] R13: ffff88810dd612e0 R14: ffff8881302b0840 R15: 1ffff11026056108
[   37.165986][    C1]  force_sig_info_to_task+0x306/0x3b0
[   37.171388][    C1]  force_sig_fault+0xd9/0x130
[   37.176083][    C1]  ? force_sig_fault_to_task+0x130/0x130
[   37.181733][    C1]  ? copy_fpstate_to_sigframe+0x881/0xa40
[   37.187461][    C1]  ? page_fault_oops+0x8b0/0x8b0
[   37.192405][    C1]  ? signal_setup_done+0x384/0x480
[   37.197525][    C1]  __bad_area_nosemaphore+0x2f9/0x470
[   37.202904][    C1]  bad_area_access_error+0x1ea/0x300
[   37.208198][    C1]  do_user_addr_fault+0x6f9/0x11c0
[   37.213324][    C1]  ? do_kern_addr_fault+0x80/0x80
[   37.218371][    C1]  ? debug_smp_processor_id+0x17/0x20
[   37.223838][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   37.229914][    C1]  ? exit_to_user_mode_prepare+0x39/0xd0
[   37.235559][    C1]  exc_page_fault+0x51/0xb0
[   37.240069][    C1]  asm_exc_page_fault+0x27/0x30
[   37.244933][    C1] RIP: 0033:0x7fddeba713d8
[   37.249361][    C1] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 3c 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff
[   37.269159][    C1] RSP: 002b:00007ffe83226970 EFLAGS: 00010246
[   37.275235][    C1] RAX: 0000200000000148 RBX: 0000000000000002 RCX: 000000000000002a
[   37.283477][    C1] RDX: e06d00628c2d00e3 RSI: 0000000000000000 RDI: 00005555708083d8
[   37.291573][    C1] RBP: fffffffffffffffe R08: 0000001b2d920000 R09: 000000000000000f
[   37.299555][    C1] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffe83226a90
[   37.307707][    C1] R13: 00007fddebe2c18c R14: 0000000000007966 R15: 00007fddebe2c180
[   37.315791][    C1]  </TASK>
[   37.319130][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[   37.322019][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.327139][    C1]   cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0
[   37.327161][    C1]   node 0: slabs: 82, objs: 2624, free: 0
[   37.333815][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   37.352103][  T608] syz.4.125 (608) used greatest stack depth: 21640 bytes left
[   37.360912][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.377104][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   37.377562][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   37.400507][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   37.412163][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   37.423691][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   37.435741][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[   37.436313][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.447403][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0
[   37.501584][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.521907][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.528602][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.536698][   T30] kauditd_printk_skb: 267 callbacks suppressed
[   37.536713][   T30] audit: type=1400 audit(1785419771.098:392): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   37.537451][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   37.565638][  T634] EXT4-fs (sda1): Remounting filesystem read-only
[   37.569491][  T295] usb 5-1: unable to read config index 0 descriptor/start: -71
[   37.578874][  T632] EXT4-fs (sda1): Remounting filesystem read-only
[   37.588855][  T295] usb 5-1: can't read configurations, error -71
[   37.645474][   T30] audit: type=1400 audit(1785419771.208:393): avc:  denied  { read } for  pid=639 comm="syz.3.137" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.669391][   T30] audit: type=1400 audit(1785419771.208:394): avc:  denied  { open } for  pid=639 comm="syz.3.137" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.694550][   T30] audit: type=1400 audit(1785419771.208:395): avc:  denied  { ioctl } for  pid=639 comm="syz.3.137" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.725320][  T650] binder: BINDER_SET_CONTEXT_MGR already set
[   37.734812][  T650] binder: 639:650 ioctl 4018620d 200000004a80 returned -16
[   37.743055][   T30] audit: type=1400 audit(1785419771.208:396): avc:  denied  { set_context_mgr } for  pid=639 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   37.754105][  T652] loop0: detected capacity change from 0 to 512
[   37.774242][   T30] audit: type=1400 audit(1785419771.288:397): avc:  denied  { map } for  pid=639 comm="syz.3.137" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.842970][   T30] audit: type=1400 audit(1785419771.408:398): avc:  denied  { read write } for  pid=657 comm="syz.3.144" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   37.911376][  T652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   37.940917][   T30] audit: type=1400 audit(1785419771.428:399): avc:  denied  { open } for  pid=657 comm="syz.3.144" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   37.964227][   T30] audit: type=1400 audit(1785419771.428:400): avc:  denied  { mounton } for  pid=657 comm="syz.3.144" path="/28/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.987512][   T30] audit: type=1400 audit(1785419771.548:401): avc:  denied  { read write } for  pid=651 comm="syz.0.142" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.046168][  T671] loop1: detected capacity change from 0 to 512
[   38.087874][  T370] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   38.097778][  T671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   38.109301][  T671] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.219320][  T684] netlink: 'syz.4.153': attribute type 12 has an invalid length.
[   38.237282][  T684] netlink: 'syz.4.153': attribute type 29 has an invalid length.
[   38.247369][  T684] netlink: 148 bytes leftover after parsing attributes in process `syz.4.153'.
[   38.276784][  T684] netlink: 'syz.4.153': attribute type 1 has an invalid length.
[   38.294649][  T684] netlink: 'syz.4.153': attribute type 2 has an invalid length.
[   38.312474][  T684] netlink: 11 bytes leftover after parsing attributes in process `syz.4.153'.
[   38.341785][  T684] Zero length message leads to an empty skb
[   38.360132][  T685] device bridge_slave_0 left promiscuous mode
[   38.378730][  T685] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.397285][  T685] device bridge_slave_1 left promiscuous mode
[   38.403580][  T685] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.409303][  T682] loop1: detected capacity change from 0 to 40427
[   38.421627][  T682] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   38.430134][  T682] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   38.450013][  T682] F2FS-fs (loop1): invalid crc value
[   38.450868][  T370] usb 3-1: config 0 has no interfaces?
[   38.487027][  T682] F2FS-fs (loop1): Found nat_bits in checkpoint
[   38.548638][  T682] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   38.555729][  T682] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   38.617967][  T370] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00
[   38.637330][  T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.660310][  T370] usb 3-1: Product: syz
[   38.664533][  T370] usb 3-1: Manufacturer: syz
[   38.677884][  T370] usb 3-1: SerialNumber: syz
[   38.688784][  T370] usb 3-1: config 0 descriptor??
[   38.705665][  T694] bridge0: port 3(syz_tun) entered disabled state
[   38.713691][  T694] device syz_tun left promiscuous mode
[   38.720179][  T694] bridge0: port 3(syz_tun) entered disabled state
[   38.734079][  T675] loop0: detected capacity change from 0 to 131072
[   38.772046][  T675] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   38.787162][  T675] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   38.796946][  T675] F2FS-fs (loop0): invalid crc value
[   38.825240][  T675] F2FS-fs (loop0): Found nat_bits in checkpoint
[   38.864449][  T675] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   38.871620][  T675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   38.948244][    T6] usb 3-1: USB disconnect, device number 2
[   38.967886][  T295] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   39.207872][  T295] usb 5-1: Using ep0 maxpacket: 8
[   39.258583][  T604] device bridge_slave_1 left promiscuous mode
[   39.264941][  T604] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.272831][  T604] device bridge_slave_0 left promiscuous mode
[   39.279175][  T604] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.287382][  T604] device veth1_macvtap left promiscuous mode
[   39.293806][  T604] device veth0_vlan left promiscuous mode
[   39.328182][  T295] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00
[   39.347424][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.405318][  T101] udevd[101]: worker [307] terminated by signal 7 (Bus error)
[   39.413200][  T101] udevd[101]: worker [307] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   39.471261][  T101] udevd[101]: worker [600] terminated by signal 7 (Bus error)
[   39.479155][  T101] udevd[101]: worker [600] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0'
[   39.487694][  T704] loop0: detected capacity change from 0 to 131072
[   39.560275][  T704] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   39.561908][  T101] udevd[101]: worker [340] terminated by signal 7 (Bus error)
[   39.572671][  T704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   39.576692][  T101] udevd[101]: worker [340] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   39.596124][  T704] F2FS-fs (loop0): invalid crc value
[   39.611287][  T704] F2FS-fs (loop0): Found nat_bits in checkpoint
[   39.633795][    T6] usb 5-1: USB disconnect, device number 4
[   39.655244][  T704] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   39.662459][  T704] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   40.563545][  T722] bridge0: port 3(syz_tun) entered blocking state
[   40.577174][  T722] bridge0: port 3(syz_tun) entered disabled state
[   40.584380][  T722] device syz_tun entered promiscuous mode
[   40.590349][  T722] bridge0: port 3(syz_tun) entered blocking state
[   40.596910][  T722] bridge0: port 3(syz_tun) entered forwarding state
[   40.605900][  T722] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   41.285805][  T731] loop2: detected capacity change from 0 to 128
[   41.294568][  T735] loop3: detected capacity change from 0 to 512
[   41.379411][  T735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.398246][  T735] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.085370][  T277] EXT4-fs error: 141 callbacks suppressed
[   42.085390][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   42.099227][  T741] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   42.112934][  T277] EXT4-fs: 121 callbacks suppressed
[   42.112984][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   42.116846][  T742] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   42.120106][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   42.125404][  T741] EXT4-fs (sda1): Remounting filesystem read-only
[   42.136936][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   42.147527][  T742] EXT4-fs (sda1): Remounting filesystem read-only
[   42.164868][  T277] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   42.166916][  T741] EXT4-fs error (device sda1) in __ext4_new_inode:1095: Journal has aborted
[   42.181032][  T743] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.171: Detected aborted journal
[   42.190292][  T742] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   42.197753][  T277] EXT4-fs (sda1): Remounting filesystem read-only
[   42.214878][  T743] EXT4-fs (sda1): Remounting filesystem read-only
[   42.216317][  T742] EXT4-fs (sda1): Remounting filesystem read-only
[   42.229274][  T745] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.172: Detected aborted journal
[   42.236735][  T746] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.177: Detected aborted journal
[   42.247985][  T745] EXT4-fs (sda1): Remounting filesystem read-only
[   42.253107][  T746] EXT4-fs (sda1): Remounting filesystem read-only
[   42.266001][  T745] EXT4-fs (sda1): Remounting filesystem read-only
[   42.527915][  T370] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   42.887927][  T370] usb 4-1: config 0 has no interfaces?
[   43.047953][  T370] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00
[   43.057160][  T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.065228][  T370] usb 4-1: Product: syz
[   43.069443][  T370] usb 4-1: Manufacturer: syz
[   43.074038][  T370] usb 4-1: SerialNumber: syz
[   43.079565][  T370] usb 4-1: config 0 descriptor??
[   43.168086][   T30] kauditd_printk_skb: 65 callbacks suppressed
[   43.168103][   T30] audit: type=1400 audit(1785419776.738:467): avc:  denied  { mount } for  pid=752 comm="syz.2.174" name="/" dev="configfs" ino=14553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   43.322869][    T6] usb 4-1: USB disconnect, device number 3
[   43.437888][  T370] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   43.798060][  T370] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   43.808922][  T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.819876][  T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.829679][  T370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   43.917992][  T370] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   43.927148][  T370] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   43.935290][  T370] usb 5-1: Manufacturer: syz
[   43.940567][  T370] usb 5-1: config 0 descriptor??
[   44.184977][   T30] audit: type=1326 audit(1785419777.748:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.223947][   T30] audit: type=1326 audit(1785419777.778:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.248782][   T30] audit: type=1326 audit(1785419777.778:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.279757][   T30] audit: type=1326 audit(1785419777.778:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.316462][   T30] audit: type=1326 audit(1785419777.778:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.354357][   T30] audit: type=1326 audit(1785419777.778:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.379289][   T30] audit: type=1326 audit(1785419777.778:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.405055][   T30] audit: type=1326 audit(1785419777.778:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.430594][   T30] audit: type=1326 audit(1785419777.778:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.2.178" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5590f99 code=0x7ffc0000
[   44.456091][  T763] loop3: detected capacity change from 0 to 40427
[   44.457429][  T370] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[   44.469843][  T370] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[   44.478415][  T370] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   44.548791][  T763] F2FS-fs (loop3): fault_injection options not supported
[   44.556014][  T763] F2FS-fs (loop3): fault_type options not supported
[   44.560268][  T101] udevd[101]: worker [706] terminated by signal 7 (Bus error)
[   44.566719][  T763] F2FS-fs (loop3): invalid crc value
[   44.570513][  T101] udevd[101]: worker [706] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   44.590322][  T101] udevd[101]: worker [738] terminated by signal 7 (Bus error)
[   44.598538][  T101] udevd[101]: worker [738] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0'
[   44.598970][  T763] F2FS-fs (loop3): Found nat_bits in checkpoint
[   44.634556][  T772] udevd[772]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[   44.659610][  T101] udevd[101]: worker [771] terminated by signal 7 (Bus error)
[   44.667173][  T101] udevd[101]: worker [771] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0'
[   44.683009][  T763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   44.700251][  T101] udevd[101]: worker [770] terminated by signal 7 (Bus error)
[   44.707784][  T101] udevd[101]: worker [770] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   44.739719][  T289] attempt to access beyond end of device
[   44.739719][  T289] loop3: rw=524288, want=45072, limit=40427
[   44.751229][  T289] attempt to access beyond end of device
[   44.751229][  T289] loop3: rw=0, want=45072, limit=40427
[   44.776550][   T45] attempt to access beyond end of device
[   44.776550][   T45] loop3: rw=2049, want=45104, limit=40427
[   45.080498][  T798] loop0: detected capacity change from 0 to 16
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: repeatedly failed to execute the program
proc=5 req=159 state=1 status=67 (errno 9: Bad file descriptor)
[   45.138109][  T798] =======================================================
[   45.138109][  T798] WARNING: The mand mount option has been deprecated and
[   45.138109][  T798]          and is ignored by this kernel. Remove the mand
[   45.138109][  T798]          option from the mount to silence this warning.
[   45.138109][  T798] =======================================================
[   45.229707][  T798] erofs: (device loop0): mounted with root inode @ nid 36.
[   45.294895][  T779] bridge0: port 3(syz_tun) entered disabled state
[   45.302394][  T779] device syz_tun left promiscuous mode
[   45.307923][  T779] bridge0: port 3(syz_tun) entered disabled state
[   45.330445][    T6] usb 5-1: USB disconnect, device number 5
[   45.348549][   T45] device bridge_slave_1 left promiscuous mode
[   45.354721][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.362639][   T45] device bridge_slave_0 left promiscuous mode
[   45.368906][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.377124][   T45] device veth1_macvtap left promiscuous mode
[   45.383458][   T45] device veth0_vlan left promiscuous mode
[   45.493870][  T285] syz-executor (285) used greatest stack depth: 20736 bytes left
[   46.408834][   T45] device bridge_slave_1 left promiscuous mode
[   46.414994][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.422594][   T45] device bridge_slave_0 left promiscuous mode
[   46.428886][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.436890][   T45] device bridge_slave_1 left promiscuous mode
[   46.443097][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.450723][   T45] device bridge_slave_0 left promiscuous mode
[   46.456850][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.465815][   T45] device veth1_macvtap left promiscuous mode
[   46.471882][   T45] device veth0_vlan left promiscuous mode
[   46.477731][   T45] device veth1_macvtap left promiscuous mode
[   46.483776][   T45] device veth0_vlan left promiscuous mode
[   46.489664][   T45] device veth1_macvtap left promiscuous mode
[   46.495665][   T45] device veth0_vlan left promiscuous mode
[   48.349089][  T101] EXT4-fs error: 161 callbacks suppressed
[   48.349110][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   48.366418][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   48.377995][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   48.389711][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   48.401207][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[   48.412740][  T101] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0