last executing test programs:

21.701137102s ago: executing program 2 (id=715):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010028bd7000ffdbdf250a800000", @ANYRES32=r0, @ANYBLOB="080000000800020005000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x0)

21.581109095s ago: executing program 2 (id=719):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/7, &(0x7f0000000040)=0x7)

21.580977555s ago: executing program 2 (id=720):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

21.580893805s ago: executing program 2 (id=721):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f00000002c0), 0x5, 0x530, &(0x7f0000001f00)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x6, 0x0, "ef35af413bb901527fe4d0ce5d29e4e536c23676345a41499db7aac63a2ae2c084a0ea0000000000007700000c0000200000faffffffffffffff00", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220ffffd2fe00000000000000000e00", [0x800000002, 0x8]})
truncate(&(0x7f0000000240)='./file1\x00', 0x8)
socket$inet_tcp(0x2, 0x1, 0x0)

21.455882379s ago: executing program 2 (id=724):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
creat(&(0x7f0000000640)='./file0/../file0/file0\x00', 0x100)

20.56142112s ago: executing program 2 (id=736):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x841860, &(0x7f0000001640)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffc}}, {@journal_checksum}]}, 0x0, 0x5d1, &(0x7f0000001040)="$eJzs3U9sI1f9APDvOMk62c0229+vh4KALqWwoFWdTbZdVb20XJCgVCAVxKGHbeR4o1Wc9bJ2ShMikZw4cEWiEie4cOHEoRIHpIoD4tob3LiUA2JBC6iphJDRTMaJ7dixd5ONSfL5qFO/+ZP3fc/reeN5npkXwJl1OSI2I+JcRLwVETORZMuTfIpXd6Z0u48ebJS3H2yUk2g23/j7eJ7DRrm1fcuFiPhhZ5ikO259bX15oVqt3MvnZxsrd2fra+vP315ZWKosVe7Mz9+Yu3Htpesvzh9ZXZ9Z+dX9r9x+7du/+fWnP/xg80vfTwv1Sr4urVt7eZvN5uEDvtKq+ERM54sKEZG+c68dPvf/CWN5fc6NuiA8kvTz+H8R8Wye3jU5ujIBAI9XMWaiObM332xT6JhrNpMe2wAAJ096zj8dSaGUn/9PR6FQKmV9eJNPxflCtVZvXL1VW72zGFkf1qWYKNy6Xa1cy/oK0+8PE0k6P5ety9Zn8/Nd89cj4smI+HFxKpsvlWvVxVF96QGAM+5C1/H/X8X0+F8c5k/9QgAAJ9nwR/J91/EAACfU/uP/xEjKAQAcHz35AHD2tB3/h/rlHwA4+Sa77v3vqem3fwA4TXr2/795cS/9dOLaPwA4Zfz+DwBnyjdffz2dmtvNJHv+9eLba6vLtbefX6zUl0srq+VSuXbvbmmpNhnZM3tWemSx1T5TrdXuzr0Qq+/MNir1xmx9bf3mSm31TuNm9lzvmxXPiQaA0Xvymff/mETE5stT2RStsRwGXxAAnHB2czi7xkZdAGBkxkddAGBk2h7089dRlgMYnT4X9+7eDtzzEqGpiHi3f55TR1Au4PG58ok+/f/dDwHs7Cj8zxGMjg2MWL5b6waAM+hw/f8eEwwn2cEHfjcGwWnWbCbG8weAM2aIM3iXCMIpN+jhXnoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/pbEoKpXws8OkoFEqliIsRcSkmklu3q5VrEfFERPyhOFFM5+dGXWgA4JAKf0ny8b+uzDw33b32XPJxMXuNiO/99I2fvLPQaA0duLu88W62vHFvvmeA4uOvAwDQZrx7Qes4nb22nch/9GCj3JqOs4D3v5wNLjoVEeXtBxvlvfGIx/PCz2RjFJ//Z9JRmST9b9CgpUPY3IqIp7vrX9hdfykf+bQ7/ljs9JEcOn72/+mIfe9/kvXN7MXv/BpVyNbtvKZvw/9PPUw8IPV+2v682qv9K8Tl7DXf/8Y7G9PJ+NH+xvUR5O1fbDc3svZvuy1+mv83Lk5mbU2P9i8vX1+7Qzbff+F3X91J/WB//K2x5ifHI1qxt9van1Y2SZ/4zw1Zxz996jPP9nuzmj+LuBIHxd9JzTZW7s7W19Z/+bX3fr9UWarcmZ+/MXfj2kvXX5yfzfqoZ1s91fv97eWrT/Qr2/2tiPN94k8OqP/n8/Sgz8HP//3Wm589IP4XP9crfiGeOiB+ekz8woC4LQvn3+s7fHcaf7FP/cc74p/r+Lt02dXuzPp8ID/88/qQJQUAjkN9bX15oVqt3BsmUYj15YXWiWa+KjazxHc/3lk6KJ+pYWM9SmJg9CNOTET7ksl92ySbEUcQ60KfVb946Awn4ljfn1bit+P/+PrQH7bv9Fi19RBBi21LPuj8rB6uFoUDd5mxqI7lGwzMMN9ucxT/Flni8hDbHGMjBIzE3k4/6pIAAAAAAAAAAAAAAAD91L+VP/LviO80ar8ZbtR1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6bwAAAP///H62LQ==")
socketpair(0x1d, 0x800, 0x6, &(0x7f0000000040))
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_procfs(0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
close(r0)
execve(0x0, 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000c40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000010)

20.53328631s ago: executing program 32 (id=736):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x841860, &(0x7f0000001640)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffc}}, {@journal_checksum}]}, 0x0, 0x5d1, &(0x7f0000001040)="$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")
socketpair(0x1d, 0x800, 0x6, &(0x7f0000000040))
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_procfs(0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
close(r0)
execve(0x0, 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000c40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000010)

6.619787882s ago: executing program 3 (id=922):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xb, 0x0, 0x7ffffdbd}]})
r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r5 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00')
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4)

6.533370404s ago: executing program 3 (id=923):
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xfc, 0xf2, 0x18, 0x40, 0x13d3, 0x3359, 0xbf81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x80, 0x5, 0x80, 0x5, "", [{{0x9, 0x4, 0xbe, 0x0, 0x2, 0xc4, 0x29, 0x96, 0x7, [], [{{0x9, 0x5, 0x883724dd93054587, 0x4, 0x10, 0xb8, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x2, 0xf8, 0x92}}]}}]}}]}}, 0x0)

4.439947054s ago: executing program 3 (id=959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote, 0x12}, 0x1c)

3.991353384s ago: executing program 3 (id=961):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000ac0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.173200684s ago: executing program 1 (id=968):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020)

3.147693635s ago: executing program 1 (id=970):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

3.090077116s ago: executing program 1 (id=973):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000080)='4', 0x1)

2.990307239s ago: executing program 4 (id=974):
r0 = timerfd_create(0x8, 0x80800)
syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.963041343s ago: executing program 1 (id=976):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00')
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='0x', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1.879345646s ago: executing program 4 (id=978):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0xc8301, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

1.778755368s ago: executing program 4 (id=980):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
execve(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x0)

1.68061003s ago: executing program 5 (id=982):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)

1.635579151s ago: executing program 4 (id=983):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x54, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x80, 0x5388, 0x81, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0xb6}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1.622701861s ago: executing program 5 (id=984):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1.505501094s ago: executing program 0 (id=985):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4e, &(0x7f0000000f00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0xffff, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

1.505251834s ago: executing program 5 (id=986):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.504637814s ago: executing program 4 (id=987):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
truncate(&(0x7f0000000300)='./file1\x00', 0x591)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8eb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@bsdgroups}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x4, 0x1cc, &(0x7f00000001c0)="$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")

1.25198294s ago: executing program 0 (id=988):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = socket(0x400000000010, 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r2, 0x0, 0x6, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
splice(r1, 0x0, r3, 0x0, 0x6, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@gettaction={0x14, 0x32, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)

1.25183867s ago: executing program 3 (id=989):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='net/sockstat\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.202918361s ago: executing program 1 (id=990):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@noblock_validity}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

803.424911ms ago: executing program 3 (id=991):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x420, 0x3f3, 0x300, 0x70bd2b, 0x25dfdbff, {0x10, 0x0, 0x34, [0xe862, 0x4a0, 0x3, 0x1, 0x1, 0x40, 0xb, 0x1000, 0x2, 0x10, 0xf7, 0x7fff, 0xa7, 0x4, 0x42a9, 0x9, 0x3, 0x7fffffff, 0x3, 0x5, 0xef4, 0x83b, 0x1, 0x1000000, 0xff, 0x8, 0x5, 0x8, 0x7, 0x0, 0x5, 0x7, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x101, 0x8, 0x5, 0x9, 0x80000001, 0x1, 0x0, 0x80000001, 0x0, 0x401, 0xc, 0x1000, 0x40, 0x3, 0xa3c, 0x10000, 0x2, 0x4, 0x2, 0x511, 0x9, 0x9, 0x0, 0x7, 0x9d62, 0x6, 0x7], [0x6, 0x3, 0x7ff, 0x7fffffff, 0x5, 0xfffffffc, 0x9, 0x800, 0x7, 0x4, 0xffff, 0x776, 0x5, 0x5, 0xfffffff8, 0x9, 0x8, 0x0, 0xffffffff, 0xc, 0x3, 0x0, 0x7, 0x7fff, 0x0, 0x4, 0x1000, 0xdf, 0x3, 0x3, 0x9, 0x8, 0x1000, 0x4, 0x101, 0x7, 0xff, 0x4bbadf0e, 0x6, 0x4, 0x1, 0x2, 0x4, 0x45d, 0xffff63ea, 0x5, 0x5, 0x3, 0x6, 0x5, 0x6015, 0xe8d, 0x6, 0x7, 0x5, 0x7, 0x80, 0x80000000, 0x2, 0xdc64, 0x5, 0xfffffff8, 0x89b, 0x1], [0x2, 0x7, 0x2, 0x3081, 0x6fbae42a, 0x10000, 0x20000000, 0x1, 0x0, 0x9, 0x6, 0xffffff00, 0x3, 0xffff74d0, 0xd0a5, 0x7, 0x4, 0x5, 0xf28, 0xfffffff5, 0x1, 0x1, 0x4, 0x7, 0x7, 0x5, 0x8, 0x5f, 0x4, 0x0, 0x7fffffff, 0x8, 0x3, 0x6, 0x800, 0x9, 0x8a60, 0xfffffffb, 0x6, 0x76, 0x4, 0x10, 0x1, 0x5, 0x3df3, 0x80000001, 0x6, 0x3ff, 0x9, 0x2, 0x8, 0x1, 0xac, 0xf7, 0x3, 0x7, 0x3, 0xff, 0x6, 0x166800, 0x1, 0x1, 0x8, 0x2], [0x1ff, 0xda84, 0xfffffffe, 0x2, 0x0, 0x527f, 0x5, 0x9, 0xc00, 0xffffffff, 0x5, 0x4, 0x0, 0x401, 0x7ff, 0x7, 0x7, 0x86cf, 0xc, 0x7fffffff, 0x6, 0xa, 0x6, 0x5, 0x100, 0x4, 0x2, 0x80000001, 0x86, 0xfffff4f1, 0x7, 0x20b, 0xfffffeff, 0x800, 0x5, 0x9, 0xbe2, 0x2d, 0x1, 0x7, 0x10000, 0xd3, 0x2, 0x9, 0x7, 0x4, 0x9, 0x9503, 0x3, 0x26, 0x5, 0x0, 0x3, 0x6, 0x470, 0x452, 0x785, 0x3, 0x9, 0x5, 0x0, 0xaca, 0x5239c4fa, 0x2]}, ["", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x4}, 0x840)

735.437912ms ago: executing program 0 (id=992):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
readv(r0, &(0x7f0000002300)=[{0x0, 0x11}, {&(0x7f0000000200)=""/203, 0xcb}], 0x2)

735.317932ms ago: executing program 5 (id=993):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r0, 0x851, 0x1)

734.430032ms ago: executing program 0 (id=994):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

629.129265ms ago: executing program 0 (id=995):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0)
read(r3, &(0x7f0000000500)=""/16, 0x10)

247.007244ms ago: executing program 1 (id=996):
syz_usb_connect(0x5, 0x46, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

212.742825ms ago: executing program 5 (id=997):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

145.032956ms ago: executing program 5 (id=998):
syz_usb_connect(0x2, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782)

180.95µs ago: executing program 0 (id=999):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a00)='2', 0x1)

0s ago: executing program 4 (id=1000):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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")
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000300), 0x43, 0x4ee, &(0x7f0000000800)="$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")

kernel console output (not intermixed with test programs):

ead } for  pid=747 comm="syz.0.126" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.660051][  T526] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   55.663683][   T24] audit: type=1400 audit(1785381332.370:233): avc:  denied  { open } for  pid=747 comm="syz.0.126" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.694567][  T750] binder: 747:750 ioctl c0306201 200000000040 returned -22
[   55.716402][   T24] audit: type=1400 audit(1785381332.400:234): avc:  denied  { ioctl } for  pid=747 comm="syz.0.126" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.716419][   T24] audit: type=1400 audit(1785381332.400:235): avc:  denied  { set_context_mgr } for  pid=747 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   55.716436][   T24] audit: type=1400 audit(1785381332.400:236): avc:  denied  { write } for  pid=747 comm="syz.0.126" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.798490][  T526] scsi host1: usb-storage 5-1:0.20
[   55.805694][  T526] usb 5-1: USB disconnect, device number 5
[   55.805700][  T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   55.836264][   T24] audit: type=1400 audit(1785381332.540:237): avc:  denied  { create } for  pid=758 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   55.899001][  T755] FAT-fs (loop3): Directory bread(block 64) failed
[   55.909497][  T755] FAT-fs (loop3): Directory bread(block 65) failed
[   55.916403][  T755] FAT-fs (loop3): Directory bread(block 66) failed
[   55.923048][  T755] FAT-fs (loop3): Directory bread(block 67) failed
[   55.929679][  T755] FAT-fs (loop3): Directory bread(block 68) failed
[   55.936496][  T755] FAT-fs (loop3): Directory bread(block 69) failed
[   55.943307][  T755] FAT-fs (loop3): Directory bread(block 70) failed
[   55.949927][  T755] FAT-fs (loop3): Directory bread(block 71) failed
[   55.956644][  T755] FAT-fs (loop3): Directory bread(block 72) failed
[   55.963346][  T755] FAT-fs (loop3): Directory bread(block 73) failed
[   56.087722][  T774] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.136: inode has both inline data and extents flags
[   56.102360][  T776] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.135: inode has both inline data and extents flags
[   56.119546][  T774] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.136: couldn't read orphan inode 15 (err -117)
[   56.131666][  T776] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.135: couldn't read orphan inode 15 (err -117)
[   56.132039][  T774] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   56.181795][  T776] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   56.195996][  T782] xt_hashlimit: size too large, truncated to 1048576
[   56.884459][  T793] EXT4-fs (loop3): Ignoring removed orlov option
[   57.021240][  T793] EXT4-fs (loop3): filesystem has both journal inode and journal device!
[   57.217731][   T24] audit: type=1400 audit(1785381333.920:238): avc:  denied  { ioctl } for  pid=797 comm="syz.0.141" path="socket:[17519]" dev="sockfs" ino=17519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.342684][  T800] EXT4-fs (loop1): Ignoring removed orlov option
[   57.359343][  T800] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   57.389813][  T800] EXT4-fs (loop1): invalid journal inode
[   57.409923][  T800] EXT4-fs (loop1): can't get journal size
[   57.430995][  T800] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue
[   57.473002][   T24] audit: type=1400 audit(1785381334.180:239): avc:  denied  { bind } for  pid=804 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.698218][  T817] EXT4-fs (loop1): Ignoring removed orlov option
[   57.705440][  T817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   57.720892][  T817] EXT4-fs (loop1): invalid journal inode
[   57.727077][  T817] EXT4-fs (loop1): can't get journal size
[   57.746932][  T810] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.147: inode has both inline data and extents flags
[   57.761161][  T810] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.147: couldn't read orphan inode 15 (err -117)
[   57.799000][  T810] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   58.025591][  T817] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue
[   58.085203][  T817] FAULT_INJECTION: forcing a failure.
[   58.085203][  T817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.100312][  T817] CPU: 0 PID: 817 Comm: syz.1.146 Tainted: G        W         syzkaller #0
[   58.108938][  T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   58.119099][  T817] Call Trace:
[   58.122424][  T817]  __dump_stack+0x21/0x24
[   58.126818][  T817]  dump_stack_lvl+0x1a7/0x208
[   58.131522][  T817]  ? thaw_kernel_threads+0x220/0x220
[   58.136839][  T817]  ? vsnprintf+0x189d/0x1990
[   58.141461][  T817]  ? show_regs_print_info+0x18/0x18
[   58.146688][  T817]  dump_stack+0x15/0x1c
[   58.150867][  T817]  should_fail+0x3ab/0x500
[   58.155296][  T817]  should_fail_usercopy+0x1a/0x20
[   58.160333][  T817]  _copy_to_user+0x20/0x90
[   58.164771][  T817]  simple_read_from_buffer+0xe9/0x160
[   58.170152][  T817]  proc_fail_nth_read+0x1a6/0x220
[   58.175193][  T817]  ? proc_fault_inject_write+0x310/0x310
[   58.180836][  T817]  ? rw_verify_area+0x1c0/0x360
[   58.185699][  T817]  ? proc_fault_inject_write+0x310/0x310
[   58.191336][  T817]  vfs_read+0x209/0xa50
[   58.195496][  T817]  ? kernel_read+0x70/0x70
[   58.199956][  T817]  ? __kasan_check_write+0x14/0x20
[   58.205077][  T817]  ? mutex_lock+0x92/0xf0
[   58.209418][  T817]  ? mutex_trylock+0xb0/0xb0
[   58.214012][  T817]  ? __fget_files+0x2e1/0x340
[   58.218700][  T817]  ? __fdget_pos+0x2d2/0x380
[   58.223297][  T817]  ? ksys_read+0x70/0x260
[   58.227632][  T817]  ksys_read+0x14a/0x260
[   58.231879][  T817]  ? vfs_write+0xd70/0xd70
[   58.236306][  T817]  ? debug_smp_processor_id+0x17/0x20
[   58.241686][  T817]  __x64_sys_read+0x7b/0x90
[   58.246220][  T817]  do_syscall_64+0x31/0x40
[   58.250649][  T817]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   58.256549][  T817] RIP: 0033:0x7fcf988e57ce
[   58.260977][  T817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   58.280615][  T817] RSP: 002b:00007fcf9737dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.289050][  T817] RAX: ffffffffffffffda RBX: 00007fcf9737e6c0 RCX: 00007fcf988e57ce
[   58.297121][  T817] RDX: 000000000000000f RSI: 00007fcf9737e0a0 RDI: 0000000000000005
[   58.305120][  T817] RBP: 00007fcf9737e090 R08: 0000000000000000 R09: 0000000000000000
[   58.313106][  T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.321200][  T817] R13: 00007fcf98bad038 R14: 00007fcf98bacfa0 R15: 00007ffe89179a28
[   58.330704][   T52] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   58.338262][  T526] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   58.506837][   T24] audit: type=1400 audit(1785381335.210:240): avc:  denied  { mounton } for  pid=830 comm="syz.1.151" path="/32/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   58.531137][  T825] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   58.538783][  T825] EXT4-fs (loop4): Ignoring removed orlov option
[   58.557599][  T825] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[   58.598161][  T839] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.154: inode has both inline data and extents flags
[   58.600462][  T526] usb 1-1: Using ep0 maxpacket: 32
[   58.616703][  T824] EXT4-fs (loop4): shut down requested (2)
[   58.627629][  T839] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.154: couldn't read orphan inode 15 (err -117)
[   58.639987][  T839] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   58.687884][   T24] audit: type=1400 audit(1785381335.390:241): avc:  denied  { create } for  pid=843 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   58.688857][  T844] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   58.716674][   T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   58.717020][  T844] overlayfs: missing 'lowerdir'
[   58.727820][   T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.743097][   T52] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   58.754301][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.760585][  T847] FAULT_INJECTION: forcing a failure.
[   58.760585][  T847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.762622][  T526] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[   58.775583][  T847] CPU: 1 PID: 847 Comm: syz.3.156 Tainted: G        W         syzkaller #0
[   58.785430][  T526] usb 1-1: config 0 has no interface number 0
[   58.792126][  T847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   58.792131][  T847] Call Trace:
[   58.792153][  T847]  __dump_stack+0x21/0x24
[   58.792201][  T847]  dump_stack_lvl+0x1a7/0x208
[   58.799010][  T526] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   58.808444][  T847]  ? show_regs_print_info+0x18/0x18
[   58.808456][  T847]  ? format_decode+0x1bb/0x1520
[   58.808468][  T847]  dump_stack+0x15/0x1c
[   58.808479][  T847]  should_fail+0x3ab/0x500
[   58.808489][  T847]  should_fail_usercopy+0x1a/0x20
[   58.808501][  T847]  _copy_from_user+0x20/0xd0
[   58.808544][  T847]  kstrtouint_from_user+0xd3/0x220
[   58.812609][  T526] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   58.816168][  T847]  ? kstrtol_from_user+0x2a0/0x2a0
[   58.816217][  T847]  ? memset+0x35/0x40
[   58.821107][  T526] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   58.830877][  T847]  ? avc_policy_seqno+0x1b/0x70
[   58.830890][  T847]  ? selinux_file_permission+0x2a5/0x510
[   58.830901][  T847]  proc_fail_nth_write+0x8b/0x200
[   58.830912][  T847]  ? proc_fail_nth_read+0x220/0x220
[   58.830922][  T847]  ? rw_verify_area+0x1c0/0x360
[   58.830931][  T847]  ? proc_fail_nth_read+0x220/0x220
[   58.830941][  T847]  vfs_write+0x344/0xd70
[   58.830982][  T847]  ? kernel_write+0x3c0/0x3c0
[   58.842445][   T52] usb 3-1: config 0 descriptor??
[   58.845256][  T847]  ? __kasan_check_write+0x14/0x20
[   58.943525][  T847]  ? mutex_lock+0x92/0xf0
[   58.947865][  T847]  ? mutex_trylock+0xb0/0xb0
[   58.952462][  T847]  ? __fget_files+0x2e1/0x340
[   58.957146][  T847]  ? __fdget_pos+0x2d2/0x380
[   58.961738][  T847]  ? ksys_write+0x70/0x260
[   58.966157][  T847]  ksys_write+0x14a/0x260
[   58.970530][  T847]  ? __ia32_sys_read+0x90/0x90
[   58.975310][  T847]  ? debug_smp_processor_id+0x17/0x20
[   58.980728][  T847]  __x64_sys_write+0x7b/0x90
[   58.985328][  T847]  do_syscall_64+0x31/0x40
[   58.989765][  T847]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   58.990667][  T526] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   58.995681][  T847] RIP: 0033:0x7fe4141c57ce
[   58.995694][  T847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   58.995712][  T847] RSP: 002b:00007fe412c5dfe8 EFLAGS: 00000246
[   59.005204][  T526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.009179][  T847]  ORIG_RAX: 0000000000000001
[   59.009189][  T847] RAX: ffffffffffffffda RBX: 00007fe412c5e6c0 RCX: 00007fe4141c57ce
[   59.009196][  T847] RDX: 0000000000000001 RSI: 00007fe412c5e0a0 RDI: 0000000000000004
[   59.009225][  T847] RBP: 00007fe412c5e090 R08: 0000000000000000 R09: 0000000000000000
[   59.031962][  T526] usb 1-1: Product: syz
[   59.034907][  T847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.034916][  T847] R13: 00007fe41448d038 R14: 00007fe41448cfa0 R15: 00007ffcdf680888
[   59.093245][  T526] usb 1-1: Manufacturer: syz
[   59.097921][  T526] usb 1-1: SerialNumber: syz
[   59.103506][  T526] usb 1-1: config 0 descriptor??
[   59.120258][  T815] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   59.131524][  T851] xt_bpf: check failed: parse error
[   59.148052][  T849] EXT4-fs (loop3): Ignoring removed oldalloc option
[   59.154908][  T849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.166033][  T849] EXT4-fs (loop3): 1 truncate cleaned up
[   59.171884][  T849] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue
[   59.203430][  T854] erofs: (device loop4): mounted with root inode @ nid 36.
[   59.307171][  T862] netlink: 'syz.3.161': attribute type 12 has an invalid length.
[   59.315149][  T862] netlink: 'syz.3.161': attribute type 29 has an invalid length.
[   59.323108][  T862] netlink: 148 bytes leftover after parsing attributes in process `syz.3.161'.
[   59.332491][  T862] netlink: 59 bytes leftover after parsing attributes in process `syz.3.161'.
[   59.370471][  T526] usb-storage 1-1:0.20: USB Mass Storage device detected
[   59.391038][  T526] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   59.420235][  T526] scsi host1: usb-storage 1-1:0.20
[   59.439900][  T526] usb 1-1: USB disconnect, device number 6
[   59.561181][  T882] EXT4-fs (loop3): Ignoring removed oldalloc option
[   59.567844][  T882] EXT4-fs (loop3): Mount option "dax=never" incompatible with ext3
[   59.693353][  T891] erofs: (device loop4): mounted with root inode @ nid 36.
[   60.390257][  T909] EXT4-fs (loop2): Test dummy encryption mode enabled
[   60.511319][  T909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002]
[   60.579319][  T909] System zones: 0-1, 3-36
[   60.790774][  T909] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noinit_itable,nobarrier,inlinecrypt,resgid=0x0000000000000000,abort,auto_da_alloc,lazytime,max_dir_size_kb=0x0000000000000006,debug,,errors=continue
[   60.830471][   T52] usbhid 3-1:0.0: can't add hid device: -71
[   60.840937][   T52] usbhid: probe of 3-1:0.0 failed with error -71
[   60.848744][  T922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'.
[   60.869864][   T52] usb 3-1: USB disconnect, device number 9
[   60.962679][  T929] erofs: (device loop3): mounted with root inode @ nid 36.
[   61.044560][  T933] FAULT_INJECTION: forcing a failure.
[   61.044560][  T933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.081094][  T933] CPU: 0 PID: 933 Comm: syz.4.184 Tainted: G        W         syzkaller #0
[   61.089729][  T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   61.099817][  T933] Call Trace:
[   61.103149][  T933]  __dump_stack+0x21/0x24
[   61.107500][  T933]  dump_stack_lvl+0x1a7/0x208
[   61.112201][  T933]  ? show_regs_print_info+0x18/0x18
[   61.117422][  T933]  ? vfs_write+0xae4/0xd70
[   61.121882][  T933]  dump_stack+0x15/0x1c
[   61.126052][  T933]  should_fail+0x3ab/0x500
[   61.130518][  T933]  should_fail_usercopy+0x1a/0x20
[   61.135583][  T933]  _copy_from_user+0x20/0xd0
[   61.140188][  T933]  __se_sys_bpf+0x1bb/0x740
[   61.144742][  T933]  ? __x64_sys_bpf+0x90/0x90
[   61.149360][  T933]  ? debug_smp_processor_id+0x17/0x20
[   61.154749][  T933]  __x64_sys_bpf+0x7b/0x90
[   61.159161][  T933]  do_syscall_64+0x31/0x40
[   61.163593][  T933]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   61.169480][  T933] RIP: 0033:0x7ff504793f99
[   61.173893][  T933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.193514][  T933] RSP: 002b:00007ff5031ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   61.201924][  T933] RAX: ffffffffffffffda RBX: 00007ff504a1bfa0 RCX: 00007ff504793f99
[   61.209890][  T933] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000
[   61.217875][  T933] RBP: 00007ff5031ed090 R08: 0000000000000000 R09: 0000000000000000
[   61.226025][  T933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.234006][  T933] R13: 00007ff504a1c038 R14: 00007ff504a1bfa0 R15: 00007ffc702be4b8
[   61.322859][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   61.322873][   T24] audit: type=1400 audit(1785381338.030:244): avc:  denied  { bind } for  pid=951 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   61.392081][  T955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   61.401204][  T955] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.429669][   T24] audit: type=1400 audit(1785381338.130:245): avc:  denied  { setattr } for  pid=954 comm="syz.4.191" path="/39/file1/file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   61.455181][  T965] erofs: (device loop3): mounted with root inode @ nid 36.
[   61.457125][  T967] EXT4-fs (loop2): Test dummy encryption mode enabled
[   61.486805][  T967] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002]
[   61.495099][  T967] System zones: 0-1, 3-36
[   61.501110][  T967] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noinit_itable,nobarrier,inlinecrypt,resgid=0x0000000000000000,abort,auto_da_alloc,lazytime,max_dir_size_kb=0x0000000000000006,debug,,errors=continue
[   61.717085][   T24] audit: type=1400 audit(1785381338.420:246): avc:  denied  { write } for  pid=972 comm="syz.0.196" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   61.717179][   T24] audit: type=1400 audit(1785381338.420:247): avc:  denied  { append } for  pid=972 comm="syz.0.196" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   61.882951][   T24] audit: type=1400 audit(1785381338.590:248): avc:  denied  { ioctl } for  pid=983 comm="syz.2.198" path="socket:[17789]" dev="sockfs" ino=17789 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   61.955092][  T977] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.197: inode has both inline data and extents flags
[   61.968529][  T977] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.197: couldn't read orphan inode 15 (err -117)
[   62.007667][  T977] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   62.109134][   T24] audit: type=1400 audit(1785381338.810:249): avc:  denied  { mount } for  pid=995 comm="syz.2.203" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   62.134255][  T997] Disabled LAPIC found during irq injection
[   62.216911][   T24] audit: type=1400 audit(1785381338.850:250): avc:  denied  { search } for  pid=995 comm="syz.2.203" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.289627][   T24] audit: type=1400 audit(1785381338.850:251): avc:  denied  { write } for  pid=995 comm="syz.2.203" name="usb_gadget" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.339476][   T24] audit: type=1400 audit(1785381338.850:252): avc:  denied  { add_name } for  pid=995 comm="syz.2.203" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.361622][   T24] audit: type=1400 audit(1785381338.850:253): avc:  denied  { create } for  pid=995 comm="syz.2.203" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   62.430642][  T333] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   62.460602][ T1014] xt_CT: You must specify a L4 protocol and not use inversions on it
[   62.485070][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'.
[   62.600210][  T428] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   62.635474][ T1026] erofs: (device loop4): mounted with root inode @ nid 36.
[   62.646595][ T1025] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.214: inode has both inline data and extents flags
[   62.736113][ T1025] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.214: couldn't read orphan inode 15 (err -117)
[   62.748896][ T1025] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   62.870626][  T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   62.880766][  T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64
[   62.893662][  T333] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   62.933357][  T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.970435][  T428] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.057767][  T333] usb 3-1: config 0 descriptor??
[   63.064045][  T428] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.085613][ T1034] EXT4-fs (loop3): Ignoring removed orlov option
[   63.092182][  T996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   63.092354][ T1034] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   63.101561][  T996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   63.110265][ T1034] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[   63.127214][ T1034] EXT4-fs (loop3): group descriptors corrupted!
[   63.429934][   T52] usb 3-1: USB disconnect, device number 10
[   63.594991][ T1045] EXT4-fs (loop4): Test dummy encryption mode enabled
[   63.615595][ T1045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002]
[   63.629393][ T1045] System zones: 0-1, 3-36
[   63.635646][ T1045] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noinit_itable,nobarrier,inlinecrypt,resgid=0x0000000000000000,abort,auto_da_alloc,lazytime,max_dir_size_kb=0x0000000000000006,debug,,errors=continue
[   63.694307][  T428] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.703454][  T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.711508][  T428] usb 2-1: Product: syz
[   63.715749][  T428] usb 2-1: Manufacturer: syz
[   63.730944][  T428] usb 2-1: SerialNumber: syz
[   63.770736][  T428] cdc_mbim 2-1:1.0: skipping garbage
[   63.776078][  T428] usb 2-1: selecting invalid altsetting 1
[   63.895853][ T1063] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.226: inode has both inline data and extents flags
[   63.909242][ T1063] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.226: couldn't read orphan inode 15 (err -117)
[   63.921386][ T1063] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   63.928866][ T1072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   63.949890][ T1072] EXT4-fs (loop3): 1 truncate cleaned up
[   63.955739][ T1072] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,acl,errors=remount-ro,nombcache,quota,nojournal_checksum,
[   63.971625][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'.
[   63.982886][ T1072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'.
[   63.992210][ T1002] bridge: RTM_NEWNEIGH with invalid ether address
[   64.002327][ T1002] bridge: RTM_NEWNEIGH with invalid ether address
[   64.240342][  T428] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[   64.248043][  T428] cdc_mbim 2-1:1.0: bind() failure
[   64.275381][ T1083] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   64.382353][  T428] usb 2-1: USB disconnect, device number 6
[   64.610238][   T52] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   65.014213][ T1097] 9pnet: Insufficient options for proto=fd
[   66.010327][ T1102] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.238: inode has both inline data and extents flags
[   66.035369][ T1102] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.238: couldn't read orphan inode 15 (err -117)
[   66.081501][ T1102] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   66.314685][   T52] usb 3-1: unable to get BOS descriptor or descriptor too short
[   66.410292][   T52] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7
[   66.495575][   T24] kauditd_printk_skb: 15 callbacks suppressed
[   66.495588][   T24] audit: type=1400 audit(1785381343.200:269): avc:  denied  { read } for  pid=1134 comm="syz.4.252" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   66.527524][   T24] audit: type=1400 audit(1785381343.200:270): avc:  denied  { open } for  pid=1134 comm="syz.4.252" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   66.610540][   T52] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[   66.629940][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.640158][   T52] usb 3-1: Product: syz
[   66.644400][   T52] usb 3-1: Manufacturer: syz
[   66.650370][   T52] usb 3-1: SerialNumber: syz
[   66.681790][ T1138] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.253: inode has both inline data and extents flags
[   66.737553][ T1138] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.253: couldn't read orphan inode 15 (err -117)
[   66.780186][ T1138] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   66.810379][   T24] audit: type=1400 audit(1785381343.520:271): avc:  denied  { remount } for  pid=1130 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   66.900907][ T1081] fuse: Unknown parameter '00000000000000000000004'
[   67.800625][ T1151] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   67.808044][ T1151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   67.817172][ T1151] F2FS-fs (loop3): invalid crc value
[   67.823727][ T1151] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   67.889870][ T1151] F2FS-fs (loop3): Start checkpoint disabled!
[   67.924554][ T1151] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   67.980733][ T1151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   69.147136][ T1136] F2FS-fs (loop4): Test dummy encryption mode enabled
[   69.201075][ T1136] F2FS-fs (loop4): invalid crc value
[   69.258829][ T1136] F2FS-fs (loop4): Found nat_bits in checkpoint
[   69.270317][   T52] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2
[   69.277607][   T52] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   69.338360][ T1170] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   69.347481][ T1170] EXT4-fs (loop2): invalid journal inode
[   69.350789][   T52] usb 3-1: unit 2 not found!
[   69.353529][ T1170] EXT4-fs (loop2): can't get journal size
[   69.360580][   T52] usb 3-1: unit 236 not found!
[   69.383836][ T1170] EXT4-fs (loop2): orphan cleanup on readonly fs
[   69.408194][ T1170] EXT4-fs (loop2): 1 truncate cleaned up
[   69.415239][   T52] usb 3-1: USB disconnect, device number 11
[   69.425308][ T1170] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue
[   69.455673][   T24] audit: type=1326 audit(1785381346.160:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.482301][ T1170] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   69.525112][ T1170] fuse: blksize only supported for fuseblk
[   69.534155][   T24] audit: type=1326 audit(1785381346.190:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.587290][   T24] audit: type=1326 audit(1785381346.190:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.612466][   T24] audit: type=1326 audit(1785381346.190:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.644516][   T24] audit: type=1326 audit(1785381346.190:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.670060][  T441] udevd[441]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.692963][   T24] audit: type=1326 audit(1785381346.190:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.717905][   T24] audit: type=1326 audit(1785381346.190:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1169 comm="syz.2.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0789a64f99 code=0x7ffc0000
[   69.896192][ T1180] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27
[   69.905251][ T1180] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27
[   69.913320][ T1180] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27
[   69.921767][ T1180] EXT4-fs error (device loop1): ext4_evict_inode:333: inode #15: comm syz.1.263: mark_inode_dirty error
[   69.933253][ T1180] EXT4-fs (loop1): 1 orphan inode deleted
[   69.939034][ T1180] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   70.082296][ T1186] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.265: inode has both inline data and extents flags
[   70.098226][ T1186] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.265: couldn't read orphan inode 15 (err -117)
[   70.112713][ T1186] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   70.163988][ T1202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'.
[   70.712438][ T1214] fuse: Unknown parameter 'use00000000000000000000'
[   71.110845][ T1218] exfat: Bad value for 'fmask'
[   71.333073][ T1233] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.281: inode has both inline data and extents flags
[   71.346897][ T1233] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.281: couldn't read orphan inode 15 (err -117)
[   71.359352][ T1233] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   71.390411][  T510] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   71.407927][ T1231] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   71.554130][ T1242] EXT4-fs (loop2): Test dummy encryption mode enabled
[   71.570255][ T1242] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.584913][ T1242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   71.610346][ T1242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   71.620742][ T1242] System zones: 1-12
[   71.626926][ T1242] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.641292][ T1242] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.284: invalid indirect mapped block 2 (level 2)
[   71.655045][ T1242] EXT4-fs (loop2): 1 truncate cleaned up
[   71.661245][ T1242] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,test_dummy_encryption=v1,abort,errors=continue
[   71.830267][  T510] usb 5-1: config 0 has an invalid interface number: 15 but max is 0
[   71.838415][  T510] usb 5-1: config 0 has no interface number 0
[   71.844621][  T510] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   71.855809][  T510] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid maxpacket 247, setting to 64
[   71.866772][  T510] usb 5-1: config 0 interface 15 has no altsetting 0
[   71.874175][  T510] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[   71.883372][  T510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.892186][  T510] usb 5-1: config 0 descriptor??
[   71.910339][ T1224] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   71.931055][  T510] usbhid 5-1:0.15: fixing wrong optional hid class descriptors count
[   72.432109][  T510] hid (null): unknown global tag 0xc
[   72.466972][  T510] hid-generic 0003:0458:501B.0002: unknown main item tag 0x0
[   72.564729][  T510] hid-generic 0003:0458:501B.0002: unknown main item tag 0x3
[   72.635103][  T510] hid-generic 0003:0458:501B.0002: unknown global tag 0xc
[   72.699354][  T510] hid-generic 0003:0458:501B.0002: item 0 0 1 12 parsing failed
[   72.743503][  T510] hid-generic: probe of 0003:0458:501B.0002 failed with error -22
[   72.931534][  T510] usb 5-1: USB disconnect, device number 6
[   73.197484][   T24] kauditd_printk_skb: 92 callbacks suppressed
[   73.197497][   T24] audit: type=1400 audit(1785381349.900:371): avc:  denied  { bind } for  pid=1274 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   73.340037][   T24] audit: type=1400 audit(1785381350.040:372): avc:  denied  { bind } for  pid=1283 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   73.591288][ T1292] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.299: inode has both inline data and extents flags
[   73.690977][ T1292] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.299: couldn't read orphan inode 15 (err -117)
[   73.773080][ T1292] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   73.896665][ T1298] exfat: Deprecated parameter 'namecase'
[   73.930209][ T1298] exfat: Deprecated parameter 'utf8'
[   73.945744][ T1298] exfat: Deprecated parameter 'namecase'
[   73.965960][ T1298] exfat: Deprecated parameter 'namecase'
[   73.999874][ T1298] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   74.147729][ T1301] fuse: Unknown parameter 'user_i00000000000000000000'
[   74.314644][ T1305] FAULT_INJECTION: forcing a failure.
[   74.314644][ T1305] name failslab, interval 1, probability 0, space 0, times 10
[   74.360258][ T1305] CPU: 0 PID: 1305 Comm: syz.0.303 Tainted: G        W         syzkaller #0
[   74.369019][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   74.379095][ T1305] Call Trace:
[   74.382421][ T1305]  __dump_stack+0x21/0x24
[   74.386773][ T1305]  dump_stack_lvl+0x1a7/0x208
[   74.391494][ T1305]  ? show_regs_print_info+0x18/0x18
[   74.396711][ T1305]  ? unwind_get_return_address+0x4d/0x90
[   74.402369][ T1305]  dump_stack+0x15/0x1c
[   74.406546][ T1305]  should_fail+0x3ab/0x500
[   74.410989][ T1305]  ? __get_vm_area_node+0x113/0x450
[   74.416202][ T1305]  __should_failslab+0xa4/0xe0
[   74.420986][ T1305]  should_failslab+0x9/0x20
[   74.425503][ T1305]  kmem_cache_alloc_trace+0x3a/0x2e0
[   74.430808][ T1305]  __get_vm_area_node+0x113/0x450
[   74.435874][ T1305]  ? selinux_capable+0x2b6/0x3b0
[   74.440829][ T1305]  __vmalloc_node_range+0xe7/0x7a0
[   74.445954][ T1305]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   74.451521][ T1305]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   74.457215][ T1305]  __vmalloc+0x79/0x90
[   74.461301][ T1305]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   74.466866][ T1305]  bpf_prog_alloc_no_stats+0x3a/0x240
[   74.472259][ T1305]  bpf_prog_alloc+0x21/0x1f0
[   74.476863][ T1305]  bpf_prog_load+0x7ca/0x14e0
[   74.481551][ T1305]  ? map_freeze+0x330/0x330
[   74.486067][ T1305]  ? vfs_write+0xae4/0xd70
[   74.490503][ T1305]  ? selinux_bpf+0xc7/0xf0
[   74.494930][ T1305]  ? security_bpf+0x82/0xa0
[   74.499451][ T1305]  __se_sys_bpf+0x49a/0x740
[   74.503966][ T1305]  ? __x64_sys_bpf+0x90/0x90
[   74.508580][ T1305]  ? debug_smp_processor_id+0x17/0x20
[   74.513961][ T1305]  __x64_sys_bpf+0x7b/0x90
[   74.518391][ T1305]  do_syscall_64+0x31/0x40
[   74.522827][ T1305]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.528730][ T1305] RIP: 0033:0x7f1a6f35ff99
[   74.533166][ T1305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.552790][ T1305] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   74.561235][ T1305] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[   74.569250][ T1305] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005
[   74.577255][ T1305] RBP: 00007f1a6ddb9090 R08: 0000000000000000 R09: 0000000000000000
[   74.585249][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.593242][ T1305] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[   74.603837][ T1305] syz.0.303: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   74.628411][ T1305] CPU: 0 PID: 1305 Comm: syz.0.303 Tainted: G        W         syzkaller #0
[   74.637142][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   74.647307][ T1305] Call Trace:
[   74.650624][ T1305]  __dump_stack+0x21/0x24
[   74.654993][ T1305]  dump_stack_lvl+0x1a7/0x208
[   74.659689][ T1305]  ? show_regs_print_info+0x18/0x18
[   74.664907][ T1305]  ? pr_cont_kernfs_name+0xe3/0xf0
[   74.670034][ T1305]  dump_stack+0x15/0x1c
[   74.674205][ T1305]  warn_alloc+0x1dc/0x200
[   74.678546][ T1305]  ? zone_watermark_ok_safe+0x290/0x290
[   74.684119][ T1305]  ? kmem_cache_alloc_trace+0x179/0x2e0
[   74.689684][ T1305]  ? __get_vm_area_node+0x345/0x450
[   74.694902][ T1305]  ? selinux_capable+0x2b6/0x3b0
[   74.699947][ T1305]  __vmalloc_node_range+0x272/0x7a0
[   74.705160][ T1305]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   74.710721][ T1305]  __vmalloc+0x79/0x90
[   74.714801][ T1305]  ? bpf_prog_alloc_no_stats+0x3a/0x240
[   74.720358][ T1305]  bpf_prog_alloc_no_stats+0x3a/0x240
[   74.725738][ T1305]  bpf_prog_alloc+0x21/0x1f0
[   74.730344][ T1305]  bpf_prog_load+0x7ca/0x14e0
[   74.735035][ T1305]  ? map_freeze+0x330/0x330
[   74.739550][ T1305]  ? vfs_write+0xae4/0xd70
[   74.743982][ T1305]  ? selinux_bpf+0xc7/0xf0
[   74.748408][ T1305]  ? security_bpf+0x82/0xa0
[   74.752921][ T1305]  __se_sys_bpf+0x49a/0x740
[   74.757441][ T1305]  ? __x64_sys_bpf+0x90/0x90
[   74.762053][ T1305]  ? debug_smp_processor_id+0x17/0x20
[   74.767441][ T1305]  __x64_sys_bpf+0x7b/0x90
[   74.771871][ T1305]  do_syscall_64+0x31/0x40
[   74.776300][ T1305]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.782205][ T1305] RIP: 0033:0x7f1a6f35ff99
[   74.786636][ T1305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.806258][ T1305] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   74.814688][ T1305] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[   74.822673][ T1305] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005
[   74.830658][ T1305] RBP: 00007f1a6ddb9090 R08: 0000000000000000 R09: 0000000000000000
[   74.838645][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.846656][ T1305] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[   74.857398][ T1305] Mem-Info:
[   74.890485][ T1305] active_anon:2174 inactive_anon:15196 isolated_anon:0
[   74.890485][ T1305]  active_file:4795 inactive_file:14751 isolated_file:0
[   74.890485][ T1305]  unevictable:0 dirty:292 writeback:0
[   74.890485][ T1305]  slab_reclaimable:8201 slab_unreclaimable:74554
[   74.890485][ T1305]  mapped:36184 shmem:8752 pagetables:653 bounce:0
[   74.890485][ T1305]  free:1547411 free_pcp:846 free_cma:0
[   74.950741][ T1312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'.
[   74.960683][   T24] audit: type=1400 audit(1785381351.670:373): avc:  denied  { create } for  pid=1311 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   74.990644][ T1305] Node 0 active_anon:10332kB inactive_anon:52932kB active_file:19144kB inactive_file:58540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141996kB dirty:1208kB writeback:0kB shmem:33788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4224kB all_unreclaimable? no
[   75.080217][ T1305] DMA32 free:2985148kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986548kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:1400kB local_pcp:52kB free_cma:0kB
[   75.142654][   T24] audit: type=1400 audit(1785381351.850:374): avc:  denied  { getopt } for  pid=1311 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.163922][ T1305] lowmem_reserve[]: 0 3941 3941
[   75.168857][ T1305] Normal free:3209196kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:232kB inactive_anon:64732kB active_file:19144kB inactive_file:58540kB unevictable:0kB writepending:1208kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:2688kB bounce:0kB free_pcp:2760kB local_pcp:1364kB free_cma:0kB
[   75.199728][ T1305] lowmem_reserve[]: 0 0 0
[   75.204483][ T1314] exfat: Deprecated parameter 'namecase'
[   75.210333][ T1305] DMA32: 5*4kB (UM) 3*8kB (M) 5*16kB (M) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 7*256kB (UM) 6*512kB (M) 5*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2985148kB
[   75.226564][ T1314] exfat: Deprecated parameter 'utf8'
[   75.232035][ T1314] exfat: Deprecated parameter 'namecase'
[   75.237736][ T1305] Normal: 164*4kB (UM) 24*8kB (UE) 151*16kB (UM) 47*32kB (UME) 132*64kB (UME) 67*128kB (UME) 27*256kB (UM) 26*512kB (UME) 13*1024kB (ME) 12*2048kB (UME) 764*4096kB (M) = 3209248kB
[   75.255915][ T1314] exfat: Deprecated parameter 'namecase'
[   75.280167][ T1305] 28220 total pagecache pages
[   75.284895][ T1305] 2 pages in swap cache
[   75.299288][ T1305] Swap cache stats: add 5, delete 3, find 3/3
[   75.309369][ T1305] Free swap  = 124728kB
[   75.319468][ T1305] Total swap = 124996kB
[   75.323854][ T1305] 2097051 pages RAM
[   75.330336][ T1314] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   75.332577][ T1312] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[   75.350275][ T1305] 0 pages HighMem/MovableOnly
[   75.360714][ T1305] 341386 pages reserved
[   75.364907][ T1305] 0 pages cma reserved
[   75.421392][   T24] audit: type=1400 audit(1785381352.130:375): avc:  denied  { setopt } for  pid=1320 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.450852][   T24] audit: type=1400 audit(1785381352.140:376): avc:  denied  { write } for  pid=1320 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.699128][ T1332] fuse: Unknown parameter 'user_i00000000000000000000'
[   75.864206][ T1337] fuse: Bad value for 'fd'
[   76.040332][  T510] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   76.420230][  T510] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[   76.453850][  T510] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   76.476096][  T510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.540878][  T510] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[   76.669964][ T1352] exfat: Deprecated parameter 'namecase'
[   76.696529][ T1352] exfat: Deprecated parameter 'utf8'
[   76.720577][ T1352] exfat: Deprecated parameter 'namecase'
[   76.726411][ T1352] exfat: Deprecated parameter 'namecase'
[   76.751396][ T1329] fuse: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   76.759041][  T302] usb 2-1: USB disconnect, device number 7
[   76.854639][ T1352] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   77.018507][ T1363] fuse: Unknown parameter 'user_i00000000000000000000'
[   78.298374][ T1373] exfat: Deprecated parameter 'namecase'
[   78.318236][ T1373] exfat: Deprecated parameter 'utf8'
[   78.335032][ T1373] exfat: Deprecated parameter 'namecase'
[   78.431300][ T1377] 
[   78.795145][ T1373] exfat: Deprecated parameter 'namecase'
[   79.398378][   T24] audit: type=1400 audit(1785381355.500:377): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   79.453272][ T1373] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   79.767855][   T24] audit: type=1400 audit(1785381356.470:378): avc:  denied  { accept } for  pid=1385 comm="syz.4.330" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.810191][  T301] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   79.820219][  T392] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   80.050159][  T301] usb 3-1: Using ep0 maxpacket: 32
[   80.070219][  T392] usb 1-1: Using ep0 maxpacket: 32
[   80.170244][  T301] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[   80.188532][  T301] usb 3-1: config 0 has no interface number 0
[   80.194754][  T392] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[   80.202957][  T301] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   80.220199][  T392] usb 1-1: config 0 has no interface number 0
[   80.226389][  T392] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   80.246605][  T301] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   80.256525][  T392] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   80.271153][  T301] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   80.285413][  T392] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   80.348391][ T1391] exfat: Deprecated parameter 'namecase'
[   80.360215][ T1391] exfat: Deprecated parameter 'utf8'
[   80.365614][ T1391] exfat: Deprecated parameter 'namecase'
[   80.371564][ T1391] exfat: Deprecated parameter 'namecase'
[   80.393009][ T1391] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   80.450326][  T301] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   80.459421][  T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.467578][  T392] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   80.477223][  T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.496868][  T392] usb 1-1: Product: syz
[   80.501143][  T301] usb 3-1: Product: syz
[   80.505414][  T301] usb 3-1: Manufacturer: syz
[   80.510024][  T301] usb 3-1: SerialNumber: syz
[   80.520148][  T392] usb 1-1: Manufacturer: syz
[   80.524791][  T392] usb 1-1: SerialNumber: syz
[   80.543214][  T301] usb 3-1: config 0 descriptor??
[   80.548933][  T392] usb 1-1: config 0 descriptor??
[   80.560256][ T1373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.570296][ T1381] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   80.631201][ T1398] fuse: Unknown parameter 'user_id00000000000000000000'
[   80.678945][   T24] audit: type=1400 audit(1785381357.380:379): avc:  denied  { create } for  pid=1399 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1
[   80.770482][ T1394] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   80.778282][ T1394] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   80.794300][ T1394] F2FS-fs (loop3): invalid crc value
[   80.830444][  T301] usb-storage 3-1:0.20: USB Mass Storage device detected
[   80.850411][  T392] usb-storage 1-1:0.20: USB Mass Storage device detected
[   80.860626][ T1394] F2FS-fs (loop3): Found nat_bits in checkpoint
[   80.880530][  T301] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   80.901096][  T392] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   80.916468][  T301] scsi host1: usb-storage 3-1:0.20
[   80.928190][  T392] scsi host2: usb-storage 1-1:0.20
[   80.938325][ T1394] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   80.948881][  T392] usb 1-1: USB disconnect, device number 7
[   80.950283][ T1394] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   80.955458][  T301] usb 3-1: USB disconnect, device number 12
[   80.990340][ T1418] kvm: pic: non byte write
[   81.050770][ T1418] exfat: Unknown parameter 'sys_tz'
[   81.085537][   T24] audit: type=1400 audit(1785381357.790:380): avc:  denied  { connect } for  pid=1426 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.162058][   T24] audit: type=1400 audit(1785381357.860:381): avc:  denied  { bind } for  pid=1428 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.211603][ T1435] device syzkaller0 entered promiscuous mode
[   81.250196][  T302] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.290776][ T1439]  loop1: p3 p4 < >
[   81.294850][ T1439] loop1: p3 start 100859904 is beyond EOD, truncated
[   81.441530][ T1463] tipc: Started in network mode
[   81.446518][ T1463] tipc: Own node identity 4, cluster identity 4711
[   81.453144][ T1463] tipc: 32-bit node address hash set to 4
[   81.460311][ T1463] tipc: Cannot configure node identity twice
[   81.507090][   T24] audit: type=1400 audit(1785381358.210:382): avc:  denied  { block_suspend } for  pid=1456 comm="syz.2.349" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   81.540220][  T302] usb 4-1: device descriptor read/64, error -71
[   81.574035][ T1472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.361'.
[   81.666556][   T24] audit: type=1400 audit(1785381358.370:383): avc:  denied  { read } for  pid=1480 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.742357][ T1481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'.
[   81.779183][   T24] audit: type=1400 audit(1785381358.480:384): avc:  denied  { create } for  pid=1486 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   81.839565][   T24] audit: type=1400 audit(1785381358.540:385): avc:  denied  { setopt } for  pid=1494 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.916509][ T1499] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   81.940189][  T302] usb 4-1: device descriptor read/64, error -71
[   81.947544][   T24] audit: type=1400 audit(1785381358.650:386): avc:  denied  { create } for  pid=1502 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   82.210267][  T302] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   82.481312][  T302] usb 4-1: device descriptor read/64, error -71
[   82.611170][ T1566] xt_hashlimit: size too large, truncated to 1048576
[   82.955492][ T1570] netlink: 'syz.2.404': attribute type 4 has an invalid length.
[   83.000269][  T302] usb 4-1: device descriptor read/64, error -71
[   83.058738][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'.
[   83.130457][  T302] usb usb4-port1: attempt power cycle
[   83.259585][ T1585] device syzkaller0 entered promiscuous mode
[   83.275922][ T1585] tipc: Started in network mode
[   83.285965][ T1585] tipc: Own node identity 825332f5461e, cluster identity 4711
[   83.303671][ T1585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.364668][ T1583] tipc: Resetting bearer <eth:syzkaller0>
[   83.388766][ T1583] tipc: Disabling bearer <eth:syzkaller0>
[   83.540333][  T302] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   83.660236][  T510] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   83.721606][ T1642] exfat: Deprecated parameter 'namecase'
[   83.727315][ T1642] exfat: Deprecated parameter 'utf8'
[   83.732897][ T1642] exfat: Deprecated parameter 'namecase'
[   83.739816][ T1642] exfat: Deprecated parameter 'namecase'
[   83.787542][ T1642] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   83.901162][  T510] usb 1-1: Using ep0 maxpacket: 32
[   83.940433][ T1667] FAT-fs (loop1): Directory bread(block 64) failed
[   83.947069][ T1667] FAT-fs (loop1): Directory bread(block 65) failed
[   83.953766][ T1667] FAT-fs (loop1): Directory bread(block 66) failed
[   83.960453][ T1667] FAT-fs (loop1): Directory bread(block 67) failed
[   83.967086][ T1667] FAT-fs (loop1): Directory bread(block 68) failed
[   83.974226][ T1667] FAT-fs (loop1): Directory bread(block 69) failed
[   83.980856][ T1667] FAT-fs (loop1): Directory bread(block 70) failed
[   83.987453][ T1667] FAT-fs (loop1): Directory bread(block 71) failed
[   83.994128][ T1667] FAT-fs (loop1): Directory bread(block 72) failed
[   84.000756][ T1667] FAT-fs (loop1): Directory bread(block 73) failed
[   84.082955][  T510] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   84.091570][  T302] usb 4-1: device not accepting address 5, error -71
[   84.103028][  T510] usb 1-1: config 0 has no interface number 0
[   84.109257][  T510] usb 1-1: config 0 interface 184 has no altsetting 0
[   84.179257][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'.
[   84.189058][ T1687] tc_dump_action: action bad kind
[   84.461543][  T510] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   84.540191][  T302] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   84.556228][  T510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.657292][  T510] usb 1-1: Product: syz
[   84.670574][  T302] usb 4-1: Using ep0 maxpacket: 32
[   84.676296][ T1690] tipc: Started in network mode
[   84.694213][  T510] usb 1-1: Manufacturer: syz
[   84.699133][ T1690] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711
[   84.709834][  T510] usb 1-1: SerialNumber: syz
[   84.725571][ T1690] tipc: Enabled bearer <udp:syz0>, priority 10
[   84.736401][ T1692] netlink: 'syz.4.462': attribute type 10 has an invalid length.
[   84.745415][ T1692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.462'.
[   85.106582][  T510] usb 1-1: config 0 descriptor??
[   85.140418][  T302] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[   85.148685][ T1692] device wg0 entered promiscuous mode
[   85.154908][  T510] smsc75xx v1.0.0
[   85.159758][  T302] usb 4-1: config 0 has no interface number 0
[   85.182962][  T302] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   85.220201][  T302] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   85.256909][  T302] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   85.351912][   T24] kauditd_printk_skb: 14 callbacks suppressed
[   85.351925][   T24] audit: type=1400 audit(1785381362.060:401): avc:  denied  { bind } for  pid=1707 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.400897][  T301] syzkaller0: tun_net_xmit 76
[   85.405748][  T301] syzkaller0: tun_net_xmit 48
[   85.414149][ T1710] syzkaller0: create flow: hash 2202334225 index 0
[   85.420933][   T24] audit: type=1400 audit(1785381362.090:402): avc:  denied  { relabelfrom } for  pid=1709 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   85.440677][    C0] syzkaller0: tun_net_xmit 76
[   85.446290][   T24] audit: type=1400 audit(1785381362.090:403): avc:  denied  { relabelto } for  pid=1709 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   85.450653][  T302] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   85.475816][  T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.484306][  T302] usb 4-1: Product: syz
[   85.488568][  T302] usb 4-1: Manufacturer: syz
[   85.493754][  T302] usb 4-1: SerialNumber: syz
[   85.503510][  T302] usb 4-1: config 0 descriptor??
[   85.520221][ T1642] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   85.536389][ T1721] netlink: 180 bytes leftover after parsing attributes in process `syz.1.475'.
[   85.546799][ T1709] syzkaller0 (unregistered): delete flow: hash 2202334225 index 0
[   85.594765][ T1595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1595 comm=syz.0.416
[   85.726639][ T1751] ipt_REJECT: TCP_RESET invalid for non-tcp
[   85.763658][ T1756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'.
[   85.780517][  T302] usb-storage 4-1:0.20: USB Mass Storage device detected
[   85.811040][  T302] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   85.844819][  T333] tipc: 32-bit node address hash set to 100080fe
[   85.867706][  T302] scsi host1: usb-storage 4-1:0.20
[   85.887087][  T302] usb 4-1: USB disconnect, device number 6
[   85.902834][ T1774] EXT4-fs (loop1): Ignoring removed nobh option
[   85.925161][ T1774] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue
[   85.936841][ T1774] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.050404][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   86.061622][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   86.090237][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   86.101434][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   86.112012][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   86.122796][  T510] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   86.132755][  T510] smsc75xx: probe of 1-1:0.184 failed with error -71
[   86.143465][  T510] usb 1-1: USB disconnect, device number 8
[   86.168456][   T24] audit: type=1400 audit(1785381362.870:404): avc:  denied  { connect } for  pid=1796 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   86.261624][   T24] audit: type=1400 audit(1785381362.970:405): avc:  denied  { getopt } for  pid=1808 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.352537][ T1814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'.
[   86.361774][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.369031][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.483263][ T1833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'.
[   86.504996][   T24] audit: type=1400 audit(1785381363.210:406): avc:  denied  { write } for  pid=1834 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   86.538474][   T24] audit: type=1400 audit(1785381363.230:407): avc:  denied  { create } for  pid=1836 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   86.585012][ T1845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[   86.682738][ T1866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.542'.
[   86.746878][ T1876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.764935][ T1883] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[   86.773976][ T1883] device bridge_slave_0 left promiscuous mode
[   86.780239][ T1883] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.798432][ T1883] device bridge_slave_1 left promiscuous mode
[   86.807053][ T1883] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.878248][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   86.894225][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.922146][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   86.930816][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.939202][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.947861][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.972032][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.985746][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.195233][   T24] audit: type=1400 audit(1785381363.900:408): avc:  denied  { setopt } for  pid=1928 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.218364][ T1931] tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[   87.312100][   T24] audit: type=1400 audit(1785381364.020:409): avc:  denied  { create } for  pid=1943 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   87.314585][ T1944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1944 comm=syz.4.578
[   87.354262][ T1946] tipc: Started in network mode
[   87.359269][ T1946] tipc: Own node identity 8aed8e15143a, cluster identity 4711
[   87.367011][ T1946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.374973][   T24] audit: type=1400 audit(1785381364.070:410): avc:  denied  { setopt } for  pid=1943 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   87.398090][ T1946] syzkaller0: MTU too low for tipc bearer
[   87.403976][ T1946] tipc: Disabling bearer <eth:syzkaller0>
[   87.449458][ T1955] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[   87.511363][ T1970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.590'.
[   87.532840][ T1970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'.
[   87.569900][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   87.589033][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.603039][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   87.614016][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.622863][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.632017][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.640854][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.654053][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.666490][  T302] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.676148][ T1983] netlink: 180 bytes leftover after parsing attributes in process `syz.0.596'.
[   87.707419][ T1988] xt_hashlimit: size too large, truncated to 1048576
[   87.791856][ T1996] device syzkaller0 entered promiscuous mode
[   87.808970][ T1996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.826164][ T1995] tipc: Resetting bearer <eth:syzkaller0>
[   87.851788][ T1995] tipc: Disabling bearer <eth:syzkaller0>
[   88.049639][ T2005] device syzkaller0 entered promiscuous mode
[   88.200985][ T2021] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.227621][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[   88.239871][ T2040] xt_hashlimit: size too large, truncated to 1048576
[   88.680593][ T2077] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,
[   88.695971][ T2077] ext4 filesystem being mounted at /115/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.731326][ T2087] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   88.816133][ T2095] erofs: (device loop1): mounted with root inode @ nid 36.
[   88.990367][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   89.146748][ T2101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.646'.
[   89.212155][ T2103] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue
[   89.230635][ T2103] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.477119][ T2115] netlink: 148 bytes leftover after parsing attributes in process `syz.0.649'.
[   89.826308][ T2128] netlink: 'syz.0.656': attribute type 32 has an invalid length.
[   90.043448][ T2146] netlink: 108 bytes leftover after parsing attributes in process `syz.0.663'.
[   90.650250][  T302] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   90.900173][  T302] usb 5-1: Using ep0 maxpacket: 16
[   91.010178][  T333] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   91.020257][  T302] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.031459][  T302] usb 5-1: config 0 interface 0 has no altsetting 0
[   91.038122][  T302] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   91.047903][ T2181] netlink: 'syz.0.683': attribute type 32 has an invalid length.
[   91.056770][  T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.069919][  T302] usb 5-1: config 0 descriptor??
[   91.120161][  T413] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   91.380229][  T333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.390667][  T333] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.470206][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   91.510228][  T413] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.522109][  T413] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.583319][  T333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.596910][  T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.605415][  T333] usb 2-1: Product: syz
[   91.609672][  T333] usb 2-1: Manufacturer: syz
[   91.614570][  T413] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   91.624677][  T302] usbhid 5-1:0.0: can't add hid device: -71
[   91.630739][  T302] usbhid: probe of 5-1:0.0 failed with error -71
[   91.637248][  T333] usb 2-1: SerialNumber: syz
[   91.642429][  T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   91.653459][  T302] usb 5-1: USB disconnect, device number 7
[   91.660269][  T413] usb 3-1: SerialNumber: syz
[   91.662373][   T24] kauditd_printk_skb: 26 callbacks suppressed
[   91.662405][   T24] audit: type=1400 audit(1785381368.370:437): avc:  denied  { mount } for  pid=2184 comm="syz.0.677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   91.691639][  T333] cdc_mbim 2-1:1.0: skipping garbage
[   91.693960][   T24] audit: type=1400 audit(1785381368.380:438): avc:  denied  { search } for  pid=2184 comm="syz.0.677" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   91.699484][  T333] usb 2-1: selecting invalid altsetting 1
[   91.728480][   T24] audit: type=1400 audit(1785381368.380:439): avc:  denied  { write } for  pid=2184 comm="syz.0.677" name="buffer_size_kb" dev="tracefs" ino=12654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   91.751899][   T24] audit: type=1400 audit(1785381368.380:440): avc:  denied  { open } for  pid=2184 comm="syz.0.677" path="/128/tracefs_dir/buffer_size_kb" dev="tracefs" ino=12654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   91.776809][   T24] audit: type=1400 audit(1785381368.430:441): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   91.816874][   T24] audit: type=1400 audit(1785381368.520:442): avc:  denied  { ioctl } for  pid=2190 comm="syz.0.680" path="/131/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   91.870196][  T301] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   91.960863][  T413] usb 3-1: 0:2 : does not exist
[   91.978866][  T413] usb 3-1: USB disconnect, device number 13
[   92.140214][  T333] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[   92.150184][  T333] cdc_mbim 2-1:1.0: bind() failure
[   92.173785][  T333] usb 2-1: USB disconnect, device number 8
[   92.512828][ T2206] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   92.567076][ T2209] FAT-fs (loop2): Directory bread(block 64) failed
[   92.583144][ T2206] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,jqfmt=vfsv0,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,
[   92.610793][ T2209] FAT-fs (loop2): Directory bread(block 65) failed
[   92.628420][ T2209] FAT-fs (loop2): Directory bread(block 66) failed
[   92.665042][ T2209] FAT-fs (loop2): Directory bread(block 67) failed
[   92.671989][   T24] audit: type=1400 audit(1785381369.380:443): avc:  denied  { rmdir } for  pid=2203 comm="syz.4.686" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.694086][ T2206] EXT4-fs error (device loop4): empty_inline_dir:1876: inode #12: block 5: comm syz.4.686: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[   92.720450][ T2209] FAT-fs (loop2): Directory bread(block 68) failed
[   92.737227][ T2209] FAT-fs (loop2): Directory bread(block 69) failed
[   92.750499][ T2209] FAT-fs (loop2): Directory bread(block 70) failed
[   92.757259][ T2209] FAT-fs (loop2): Directory bread(block 71) failed
[   92.764543][ T2206] EXT4-fs (loop4): Remounting filesystem read-only
[   92.780219][ T2206] EXT4-fs warning (device loop4): empty_inline_dir:1883: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   92.798116][ T2209] FAT-fs (loop2): Directory bread(block 72) failed
[   92.811853][   T24] audit: type=1400 audit(1785381369.520:444): avc:  denied  { bind } for  pid=2215 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.844281][ T2209] FAT-fs (loop2): Directory bread(block 73) failed
[   92.854694][   T24] audit: type=1400 audit(1785381369.560:445): avc:  denied  { name_bind } for  pid=2215 comm="syz.0.690" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   92.875983][   T24] audit: type=1400 audit(1785381369.560:446): avc:  denied  { node_bind } for  pid=2215 comm="syz.0.690" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   92.944381][ T2226] mmap: syz.0.695 (2226) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   93.010216][  T301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.032860][ T2232] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   93.054579][  T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.160252][  T301] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   93.189908][  T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   93.208020][  T301] usb 4-1: SerialNumber: syz
[   93.417609][ T2272] exfat: Unknown parameter 'sys_tz'
[   93.419341][ T2262] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue
[   93.434955][ T2276] hub 8-0:1.0: USB hub found
[   93.439687][ T2276] hub 8-0:1.0: 1 port detected
[   93.457427][ T2262] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.500926][  T301] usb 4-1: 0:2 : does not exist
[   93.505882][  T301] usb 4-1: unit 48 not found!
[   93.522649][  T301] usb 4-1: USB disconnect, device number 7
[   93.620383][ T2262] kvm: vcpu 0: requested 24576 ns lapic timer period limited to 200000 ns
[   93.631522][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'.
[   93.887845][ T2295] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   93.896983][ T2295] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.940218][ T2295] loop_set_status: loop2 () has still dirty pages (nrpages=2)
[   93.954563][ T2295] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.721: casefold flag without casefold feature
[   93.972719][  T282] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   93.990170][  T282] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   94.051255][  T458] tipc: Disabling bearer <udp:syz0>
[   94.056742][  T458] tipc: Left network mode
[   94.232720][ T2317] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1004 sclass=netlink_xfrm_socket pid=2317 comm=syz.0.729
[   94.245447][ T2317] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1014 sclass=netlink_xfrm_socket pid=2317 comm=syz.0.729
[   94.320347][  T333] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   94.643001][  T458] device bridge_slave_1 left promiscuous mode
[   94.649968][  T458] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.661509][  T458] device bridge_slave_0 left promiscuous mode
[   94.668030][  T458] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.683368][  T458] device veth1_macvtap left promiscuous mode
[   94.690472][  T333] usb 5-1: config 0 has no interfaces?
[   94.697445][  T458] device veth0_vlan left promiscuous mode
[   94.740211][  T510] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   94.850353][  T333] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   94.859474][  T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.869984][  T333] usb 5-1: Product: syz
[   94.874723][  T333] usb 5-1: Manufacturer: syz
[   94.879347][  T333] usb 5-1: SerialNumber: syz
[   94.887945][  T333] usb 5-1: config 0 descriptor??
[   94.990283][  T510] usb 1-1: Using ep0 maxpacket: 32
[   95.031328][ T2335] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   95.054445][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'.
[   95.063839][ T2339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'.
[   95.072935][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'.
[   95.083064][ T2339] netlink: 'syz.3.734': attribute type 1 has an invalid length.
[   95.094502][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.103138][ T2337] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.110392][  T510] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[   95.125656][ T2337] device bridge_slave_0 entered promiscuous mode
[   95.132445][  T510] usb 1-1: config 0 has no interface number 0
[   95.134700][  T390] usb 5-1: USB disconnect, device number 8
[   95.141837][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.151518][  T510] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   95.161656][  T510] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   95.170221][ T2337] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.175588][  T510] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   95.189274][ T2337] device bridge_slave_1 entered promiscuous mode
[   95.247351][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.254518][ T2337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.261820][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.268858][ T2337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.291951][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.299695][  T458] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.307666][  T458] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.318592][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.327173][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.352743][  T458] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.359824][  T458] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.363233][  T510] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[   95.378633][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.390378][  T510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.405993][  T510] usb 1-1: Product: syz
[   95.417937][  T510] usb 1-1: Manufacturer: syz
[   95.423505][  T510] usb 1-1: SerialNumber: syz
[   95.428447][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.440693][  T458] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.447774][  T458] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.459513][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.460840][  T510] usb 1-1: config 0 descriptor??
[   95.468284][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.481320][ T2356] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   95.489970][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.491434][ T2325] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   95.498725][  T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.521339][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   95.530325][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.540736][ T2356] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.745: invalid indirect mapped block 83886080 (level 0)
[   95.551537][ T2337] device veth0_vlan entered promiscuous mode
[   95.561004][ T2356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.745: bg 0: block 35: padding at end of block bitmap is not set
[   95.575974][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   95.576152][ T2356] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   95.585947][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.596410][ T2356] EXT4-fs (loop1): 1 truncate cleaned up
[   95.602202][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.613319][ T2356] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsdgroups,bsddf,,errors=continue
[   95.614615][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.635130][ T2337] device veth1_macvtap entered promiscuous mode
[   95.647045][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.655862][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.664658][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.673182][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.681851][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.690491][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.699384][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.791193][  T510] usb-storage 1-1:0.20: USB Mass Storage device detected
[   95.814363][  T510] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[   95.840460][  T510] scsi host1: usb-storage 1-1:0.20
[   95.854655][  T510] usb 1-1: USB disconnect, device number 9
[   97.399040][   T24] kauditd_printk_skb: 11 callbacks suppressed
[   97.399053][   T24] audit: type=1400 audit(1785381374.100:458): avc:  denied  { connect } for  pid=2394 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   97.480346][   T24] audit: type=1400 audit(1785381374.160:459): avc:  denied  { read } for  pid=2394 comm="syz.1.756" laddr=fe80::7455:27ff:fe20:349c lport=5 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.280704][ T2408] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsddf,minixdf,,errors=continue
[   98.291845][ T2408] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.320885][   T24] audit: type=1400 audit(1785381375.030:460): avc:  denied  { rename } for  pid=2407 comm="syz.5.760" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   98.364302][   T24] audit: type=1400 audit(1785381375.070:461): avc:  denied  { unlink } for  pid=2407 comm="syz.5.760" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   98.445558][   T24] audit: type=1400 audit(1785381375.150:462): avc:  denied  { write } for  pid=2412 comm="syz.4.762" name="usb_gadget" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   98.472719][ T2416] Mass Storage Function, version: 2009/09/11
[   98.501339][ T2416] LUN: removable file: (no medium)
[   98.533914][   T24] audit: type=1400 audit(1785381375.170:463): avc:  denied  { add_name } for  pid=2412 comm="syz.4.762" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   98.560640][ T2418] exfat: Deprecated parameter 'namecase'
[   98.566402][ T2418] exfat: Deprecated parameter 'utf8'
[   98.571796][ T2418] exfat: Deprecated parameter 'namecase'
[   98.580258][ T2418] exfat: Deprecated parameter 'namecase'
[   98.625648][ T2418] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   98.817436][ T2428] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   98.830364][ T2428] EXT4-fs (loop5): invalid journal inode
[   98.850017][ T2428] EXT4-fs (loop5): can't get journal size
[   98.890806][ T2428] EXT4-fs (loop5): orphan cleanup on readonly fs
[   98.906017][ T2428] EXT4-fs (loop5): 1 truncate cleaned up
[   98.918081][ T2438] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[   98.920344][   T52] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   98.928765][ T2428] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue
[   99.034731][   T24] audit: type=1326 audit(1785381375.740:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2427 comm="syz.5.767" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8054fe3f99 code=0x7ffc0000
[   99.064198][ T2428] fuse: blksize only supported for fuseblk
[   99.088981][   T24] audit: type=1326 audit(1785381375.740:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2427 comm="syz.5.767" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8054fe3f99 code=0x7ffc0000
[   99.117168][   T24] audit: type=1326 audit(1785381375.740:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2427 comm="syz.5.767" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8054fe3f99 code=0x7ffc0000
[   99.144530][   T24] audit: type=1326 audit(1785381375.760:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2427 comm="syz.5.767" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f8054fe3f99 code=0x7ffc0000
[   99.205711][ T2445] EXT4-fs (loop4): Ignoring removed orlov option
[   99.217430][ T2445] EXT4-fs (loop4): Invalid want_extra_isize 5
[   99.230212][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   99.261068][ T2445] kvm: pic: non byte write
[   99.310377][   T52] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.352244][ T2458] xt_hashlimit: size too large, truncated to 1048576
[   99.417314][ T2463] syz.4.777 uses obsolete (PF_INET,SOCK_PACKET)
[   99.960622][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.969570][   T52] usb 4-1: config 0 descriptor??
[  100.055586][ T2495] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,
[  100.067154][ T2495] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.114325][ T2490] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  100.260218][  T526] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  100.301067][ T2504] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.794: bad orphan inode 15
[  100.311450][ T2504] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000005,errors=continue,auto_da_alloc=0x000000000000000f,inode_readahead_blks=0x0000000000008000,,errors=continue
[  100.431358][ T2519] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,usrjquota=,nodiscard,resuid=0x0000000000000000,,errors=continue
[  100.445861][ T2519] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.780369][  T526] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.821777][  T526] usb 1-1: not running at top speed; connect to a high speed hub
[  100.880191][  T510] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  100.900220][  T526] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  100.908904][  T526] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  100.917478][  T526] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  100.926938][  T526] usb 1-1: config 129 has no interface number 0
[  100.933410][  T526] usb 1-1: config 129 has no interface number 1
[  100.939857][  T526] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  100.953449][  T526] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  100.964774][  T526] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  100.978244][  T526] usb 1-1: config 129 interface 135 has no altsetting 0
[  100.985385][  T526] usb 1-1: config 129 interface 5 has no altsetting 0
[  101.129256][ T2561] xt_socket: unknown flags 0x58
[  101.290253][  T526] usb 1-1: string descriptor 0 read error: -22
[  101.297121][  T526] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  101.306322][  T526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.374994][  T526] usb 1-1: MIDIStreaming interface descriptor not found
[  101.572882][   T52] usb 1-1: USB disconnect, device number 10
[  101.635920][  T301] usb 4-1: USB disconnect, device number 8
[  101.701097][ T2586] smpboot: CPU 1 is now offline
[  101.761628][ T2591] FAT-fs (loop1): Directory bread(block 64) failed
[  101.769625][ T2591] FAT-fs (loop1): Directory bread(block 65) failed
[  101.776583][ T2591] FAT-fs (loop1): Directory bread(block 66) failed
[  101.783768][ T2591] FAT-fs (loop1): Directory bread(block 67) failed
[  101.791041][  T510] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.800699][ T2591] FAT-fs (loop1): Directory bread(block 68) failed
[  101.807286][  T510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.815591][ T2591] FAT-fs (loop1): Directory bread(block 69) failed
[  101.824814][  T510] usb 5-1: config 0 descriptor??
[  101.830008][ T2591] FAT-fs (loop1): Directory bread(block 70) failed
[  101.836829][ T2591] FAT-fs (loop1): Directory bread(block 71) failed
[  101.843966][ T2591] FAT-fs (loop1): Directory bread(block 72) failed
[  101.850849][ T2591] FAT-fs (loop1): Directory bread(block 73) failed
[  101.876744][ T2591] attempt to access beyond end of device
[  101.876744][ T2591] loop1: rw=2049, want=1236, limit=256
[  101.945243][ T2598] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.960643][ T2598] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.163167][ T2607] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  102.711876][ T2626] syz.5.840 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  102.821845][ T2630] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  102.858715][ T2635] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  102.884923][ T2635] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.943554][   T24] kauditd_printk_skb: 97 callbacks suppressed
[  102.943564][   T24] audit: type=1400 audit(1785381635.647:565): avc:  denied  { mounton } for  pid=2632 comm="syz.3.844" path="/133/file0/debug" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  102.975311][ T2641] FAULT_INJECTION: forcing a failure.
[  102.975311][ T2641] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.009648][  T305] FAULT_INJECTION: forcing a failure.
[  103.009648][  T305] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.027344][ T2630] FAULT_INJECTION: forcing a failure.
[  103.027344][ T2630] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.057571][ T2642] FAULT_INJECTION: forcing a failure.
[  103.057571][ T2642] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.073253][ T2641] CPU: 0 PID: 2641 Comm: syz-executor Tainted: G        W         syzkaller #0
[  103.082199][ T2641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  103.092249][ T2641] Call Trace:
[  103.095536][ T2641]  __dump_stack+0x21/0x24
[  103.099937][ T2641]  dump_stack_lvl+0x1a7/0x208
[  103.104635][ T2641]  ? show_regs_print_info+0x18/0x18
[  103.109823][ T2641]  dump_stack+0x15/0x1c
[  103.113970][ T2641]  should_fail+0x3ab/0x500
[  103.118380][ T2641]  should_fail_alloc_page+0x4f/0x60
[  103.123566][ T2641]  __alloc_pages_nodemask+0x11a/0x640
[  103.128941][ T2641]  ? stack_trace_save+0xf0/0xf0
[  103.133782][ T2641]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  103.139316][ T2641]  wp_page_copy+0x209/0x15a0
[  103.143913][ T2641]  ? __kernel_text_address+0xa0/0x100
[  103.149274][ T2641]  ? trace_spf_pte_lock+0x110/0x110
[  103.154461][ T2641]  ? unwind_get_return_address+0x4d/0x90
[  103.160264][ T2641]  do_wp_page+0x772/0xd00
[  103.164594][ T2641]  handle_pte_fault+0xbc3/0x3910
[  103.169528][ T2641]  handle_mm_fault+0xf86/0x1720
[  103.174398][ T2641]  ? can_reuse_spf_vma+0xe0/0xe0
[  103.179336][ T2641]  ? __kasan_check_write+0x14/0x20
[  103.184437][ T2641]  ? down_read_trylock+0x106/0x160
[  103.189538][ T2641]  ? __init_rwsem+0x1c0/0x1c0
[  103.194206][ T2641]  ? find_vma+0x30/0x150
[  103.198439][ T2641]  do_user_addr_fault+0x576/0xe20
[  103.203456][ T2641]  ? do_kern_addr_fault+0x80/0x80
[  103.208471][ T2641]  ? debug_smp_processor_id+0x17/0x20
[  103.213849][ T2641]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  103.219922][ T2641]  exc_page_fault+0x5a/0xc0
[  103.224415][ T2641]  ? asm_exc_page_fault+0x8/0x30
[  103.229343][ T2641]  asm_exc_page_fault+0x1e/0x30
[  103.234182][ T2641] RIP: 0033:0x7f8054eb07a2
[  103.238592][ T2641] Code: 14 00 00 4c 8b 05 46 af ee 00 48 8b 0d ff ae ee 00 31 c0 48 8d ac 24 30 01 00 00 48 8d 15 83 b4 1c 00 be 40 00 00 00 48 89 ef <c6> 05 e7 ae ee 00 01 e8 c2 1c 0e 00 31 c0 48 89 ee bf 0f 00 00 00
[  103.258188][ T2641] RSP: 002b:00007ffe04045e10 EFLAGS: 00010246
[  103.264250][ T2641] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000005
[  103.273448][ T2641] RDX: 00007f805507bc1d RSI: 0000000000000040 RDI: 00007ffe04045f40
[  103.281428][ T2641] RBP: 00007ffe04045f40 R08: 000000000000034f R09: 0000000000000000
[  103.289394][ T2641] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000013
[  103.297354][ T2641] R13: 00000000000927c0 R14: 00000000000191dc R15: 00007ffe040460a0
[  103.311459][  T305] CPU: 0 PID: 305 Comm: udevd Tainted: G        W         syzkaller #0
[  103.319736][  T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  103.329783][  T305] Call Trace:
[  103.333074][  T305]  __dump_stack+0x21/0x24
[  103.337392][  T305]  dump_stack_lvl+0x1a7/0x208
[  103.342063][  T305]  ? show_regs_print_info+0x18/0x18
[  103.347250][  T305]  dump_stack+0x15/0x1c
[  103.351501][  T305]  should_fail+0x3ab/0x500
[  103.355911][  T305]  should_fail_alloc_page+0x4f/0x60
[  103.361096][  T305]  __alloc_pages_nodemask+0x11a/0x640
[  103.366456][  T305]  ? kasan_set_track+0x4a/0x70
[  103.371210][  T305]  ? kasan_set_free_info+0x23/0x40
[  103.376310][  T305]  ? ____kasan_slab_free+0x125/0x160
[  103.381592][  T305]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  103.387130][  T305]  ? user_path_at_empty+0x43/0x50
[  103.392170][  T305]  ? do_readlinkat+0xd9/0x490
[  103.396844][  T305]  ? __x64_sys_readlink+0x7f/0x90
[  103.401869][  T305]  ? do_syscall_64+0x31/0x40
[  103.406573][  T305]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  103.412661][  T305]  new_slab+0x84/0x3f0
[  103.416740][  T305]  ___slab_alloc+0x2f8/0x4c0
[  103.421327][  T305]  ? getname_flags+0xba/0x510
[  103.426085][  T305]  __slab_alloc+0x63/0xa0
[  103.430414][  T305]  ? getname_flags+0xba/0x510
[  103.435079][  T305]  ? getname_flags+0xba/0x510
[  103.439899][  T305]  kmem_cache_alloc+0x1a4/0x2d0
[  103.444759][  T305]  ? getname_flags+0xba/0x510
[  103.449435][  T305]  ? ____kasan_slab_free+0x130/0x160
[  103.454726][  T305]  getname_flags+0xba/0x510
[  103.459230][  T305]  ? avc_has_perm+0x168/0x3d0
[  103.463912][  T305]  user_path_at_empty+0x2f/0x50
[  103.468756][  T305]  vfs_statx+0x10a/0x530
[  103.473007][  T305]  ? filename_lookup+0x476/0x660
[  103.477946][  T305]  ? ktime_get_coarse_real_ts64+0xda/0xf0
[  103.483650][  T305]  ? vfs_fstatat+0x40/0x40
[  103.488055][  T305]  ? ktime_get_coarse_real_ts64+0xda/0xf0
[  103.493765][  T305]  __se_sys_newfstatat+0x10e/0x3d0
[  103.498881][  T305]  ? __x64_sys_newfstatat+0xb0/0xb0
[  103.504083][  T305]  ? mntput_no_expire+0x100/0x6b0
[  103.509112][  T305]  ? __kasan_check_read+0x11/0x20
[  103.514139][  T305]  ? vfs_submount+0xb0/0xb0
[  103.518634][  T305]  ? __kasan_check_write+0x14/0x20
[  103.523756][  T305]  ? lockref_put_or_lock+0x114/0x180
[  103.529028][  T305]  ? mntput+0x5f/0xc0
[  103.533000][  T305]  ? ____fput+0x15/0x20
[  103.537157][  T305]  ? debug_smp_processor_id+0x17/0x20
[  103.542525][  T305]  __x64_sys_newfstatat+0x9b/0xb0
[  103.547554][  T305]  do_syscall_64+0x31/0x40
[  103.551960][  T305]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  103.557853][  T305] RIP: 0033:0x7fdbc9eaab0a
[  103.562258][  T305] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[  103.581870][  T305] RSP: 002b:00007ffd7894e198 EFLAGS: 00000202 ORIG_RAX: 0000000000000106
[  103.590273][  T305] RAX: ffffffffffffffda RBX: 00005652ec56d4c0 RCX: 00007fdbc9eaab0a
[  103.598237][  T305] RDX: 00007ffd7894e1b0 RSI: 00005652ec56d4c0 RDI: 00000000ffffff9c
[  103.606370][  T305] RBP: 00005652ec3328d0 R08: 0000000000020f60 R09: 0000000000000000
[  103.614333][  T305] R10: 0000000000000100 R11: 0000000000000202 R12: 0000000000000000
[  103.622309][  T305] R13: 0000000000000001 R14: 00005652cd2556d7 R15: 00007ffd7894f3f0
[  103.636474][  T526] usb 5-1: USB disconnect, device number 9
[  103.654128][  T317] FAULT_INJECTION: forcing a failure.
[  103.654128][  T317] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.718879][ T2644] FAULT_INJECTION: forcing a failure.
[  103.718879][ T2644] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  103.732371][ T2644] CPU: 0 PID: 2644 Comm: syz.4.849 Tainted: G        W         syzkaller #0
[  103.741075][ T2644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  103.751119][ T2644] Call Trace:
[  103.754432][ T2644]  __dump_stack+0x21/0x24
[  103.758768][ T2644]  dump_stack_lvl+0x1a7/0x208
[  103.763452][ T2644]  ? show_regs_print_info+0x18/0x18
[  103.768664][ T2644]  dump_stack+0x15/0x1c
[  103.772809][ T2644]  should_fail+0x3ab/0x500
[  103.777222][ T2644]  should_fail_alloc_page+0x4f/0x60
[  103.782409][ T2644]  __alloc_pages_nodemask+0x11a/0x640
[  103.787786][ T2644]  ? ksys_write+0x14a/0x260
[  103.792284][ T2644]  ? __x64_sys_write+0x7b/0x90
[  103.797040][ T2644]  ? do_syscall_64+0x31/0x40
[  103.801645][ T2644]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  103.807195][ T2644]  ? debug_smp_processor_id+0x17/0x20
[  103.812561][ T2644]  shmem_alloc_page+0x1fd/0x380
[  103.817403][ T2644]  ? put_page+0xd0/0xd0
[  103.821551][ T2644]  ? percpu_counter_add_batch+0x13c/0x160
[  103.827258][ T2644]  ? __kasan_check_read+0x11/0x20
[  103.832372][ T2644]  ? __vm_enough_memory+0x11a/0x2d0
[  103.837561][ T2644]  ? security_vm_enough_memory_mm+0x94/0xa0
[  103.843445][ T2644]  shmem_alloc_and_acct_page+0x3d3/0x840
[  103.849069][ T2644]  ? free_unref_page_commit+0x2f0/0x2f0
[  103.854605][ T2644]  ? shmem_swapin_page+0x16f0/0x16f0
[  103.859894][ T2644]  ? xas_load+0x28b/0x2a0
[  103.864230][ T2644]  ? find_get_entry+0x38e/0x400
[  103.869105][ T2644]  ? page_cache_prev_miss+0x290/0x290
[  103.874475][ T2644]  ? __kasan_check_write+0x14/0x20
[  103.880220][ T2644]  ? _raw_spin_lock_irq+0x95/0xf0
[  103.885607][ T2644]  ? _raw_spin_lock_irqsave+0x130/0x130
[  103.891163][ T2644]  ? find_lock_entry+0x4b/0x200
[  103.896012][ T2644]  shmem_getpage_gfp+0x785/0x20f0
[  103.901036][ T2644]  ? shmem_unused_huge_scan+0xa0/0xa0
[  103.906404][ T2644]  shmem_write_begin+0xce/0x1b0
[  103.911250][ T2644]  generic_perform_write+0x2ce/0x540
[  103.916550][ T2644]  ? atime_needs_update+0x5b0/0x5b0
[  103.921743][ T2644]  ? grab_cache_page_write_begin+0xb0/0xb0
[  103.927539][ T2644]  ? file_remove_privs+0x590/0x590
[  103.932658][ T2644]  ? __kasan_check_write+0x14/0x20
[  103.937762][ T2644]  ? down_write+0xb2/0x120
[  103.942188][ T2644]  __generic_file_write_iter+0x24b/0x480
[  103.947827][ T2644]  ? generic_write_checks+0x3df/0x480
[  103.953194][ T2644]  generic_file_write_iter+0xa9/0x1d0
[  103.958554][ T2644]  vfs_write+0x770/0xd70
[  103.962784][ T2644]  ? finish_fault+0xa60/0xa60
[  103.967466][ T2644]  ? kernel_write+0x3c0/0x3c0
[  103.972148][ T2644]  ? __fget_files+0x2e1/0x340
[  103.976817][ T2644]  ? __fdget_pos+0x1f7/0x380
[  103.981414][ T2644]  ? ksys_write+0x70/0x260
[  103.985817][ T2644]  ksys_write+0x14a/0x260
[  103.990152][ T2644]  ? __ia32_sys_read+0x90/0x90
[  103.994906][ T2644]  ? debug_smp_processor_id+0x17/0x20
[  104.000268][ T2644]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  104.006323][ T2644]  __x64_sys_write+0x7b/0x90
[  104.010921][ T2644]  do_syscall_64+0x31/0x40
[  104.015326][ T2644]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  104.021208][ T2644] RIP: 0033:0x7ff5047547ce
[  104.025620][ T2644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  104.045212][ T2644] RSP: 002b:00007ff5031ecda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  104.053618][ T2644] RAX: ffffffffffffffda RBX: 00007ff5031ed6c0 RCX: 00007ff5047547ce
[  104.061580][ T2644] RDX: 0000000000200000 RSI: 00007ff4fadcd000 RDI: 0000000000000005
[  104.069546][ T2644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.077503][ T2644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  104.085466][ T2644] R13: 00007ff5031ecee0 R14: 00007ff5031ecea0 R15: 00007ff4fadcd000
[  104.100188][ T2642] CPU: 0 PID: 2642 Comm: syz-executor Tainted: G        W         syzkaller #0
[  104.109133][ T2642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  104.119192][ T2642] Call Trace:
[  104.122530][ T2642]  __dump_stack+0x21/0x24
[  104.126861][ T2642]  dump_stack_lvl+0x1a7/0x208
[  104.131551][ T2642]  ? show_regs_print_info+0x18/0x18
[  104.136743][ T2642]  dump_stack+0x15/0x1c
[  104.140893][ T2642]  should_fail+0x3ab/0x500
[  104.145302][ T2642]  should_fail_alloc_page+0x4f/0x60
[  104.150495][ T2642]  __alloc_pages_nodemask+0x11a/0x640
[  104.155864][ T2642]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  104.161413][ T2642]  new_slab+0x84/0x3f0
[  104.165485][ T2642]  ___slab_alloc+0x2f8/0x4c0
[  104.170073][ T2642]  ? debug_smp_processor_id+0x17/0x20
[  104.175456][ T2642]  ? getname_flags+0xba/0x510
[  104.180133][ T2642]  __slab_alloc+0x63/0xa0
[  104.184462][ T2642]  ? getname_flags+0xba/0x510
[  104.189146][ T2642]  ? getname_flags+0xba/0x510
[  104.193827][ T2642]  kmem_cache_alloc+0x1a4/0x2d0
[  104.198678][ T2642]  ? getname_flags+0xba/0x510
[  104.203364][ T2642]  getname_flags+0xba/0x510
[  104.207866][ T2642]  do_symlinkat+0x48/0x3d0
[  104.212281][ T2642]  __x64_sys_symlinkat+0x7b/0x90
[  104.217221][ T2642]  do_syscall_64+0x31/0x40
[  104.221638][ T2642]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  104.227544][ T2642] RIP: 0033:0x7fe414204057
[  104.231960][ T2642] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.251557][ T2642] RSP: 002b:00007ffcdf680be8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a
[  104.259966][ T2642] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe414204057
[  104.267935][ T2642] RDX: 00007fe41429ce93 RSI: 00000000ffffff9c RDI: 00007ffcdf680c80
[  104.275917][ T2642] RBP: 00007ffcdf680c2c R08: 0000000000000001 R09: 00000000ffffffff
[  104.283882][ T2642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000086
[  104.291849][ T2642] R13: 00000000000927c0 R14: 0000000000019244 R15: 00007ffcdf680c80
[  104.301727][   T24] audit: type=1400 audit(1785381635.747:566): avc:  denied  { unlink } for  pid=280 comm="syz-executor" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  104.335504][ T2630] CPU: 0 PID: 2630 Comm: syz.1.843 Tainted: G        W         syzkaller #0
[  104.344196][ T2630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  104.354246][ T2630] Call Trace:
[  104.357537][ T2630]  __dump_stack+0x21/0x24
[  104.361883][ T2630]  dump_stack_lvl+0x1a7/0x208
[  104.366564][ T2630]  ? show_regs_print_info+0x18/0x18
[  104.371763][ T2630]  dump_stack+0x15/0x1c
[  104.375913][ T2630]  should_fail+0x3ab/0x500
[  104.380330][ T2630]  should_fail_alloc_page+0x4f/0x60
[  104.385522][ T2630]  __alloc_pages_nodemask+0x11a/0x640
[  104.390891][ T2630]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  104.396432][ T2630]  ? __kmalloc+0x19f/0x330
[  104.400846][ T2630]  ? __vmalloc_node_range+0x294/0x7a0
[  104.406215][ T2630]  __vmalloc_node_range+0x388/0x7a0
[  104.411409][ T2630]  ? __vcalloc+0x36/0x50
[  104.415660][ T2630]  __vmalloc+0x79/0x90
[  104.419727][ T2630]  ? __vcalloc+0x36/0x50
[  104.424088][ T2630]  __vcalloc+0x36/0x50
[  104.428154][ T2630]  kvm_page_track_create_memslot+0x36/0x90
[  104.433952][ T2630]  kvm_arch_prepare_memory_region+0x606/0x770
[  104.440017][ T2630]  kvm_set_memslot+0x214/0x1470
[  104.444864][ T2630]  __kvm_set_memory_region+0xa58/0xc10
[  104.450316][ T2630]  ? __kasan_check_read+0x11/0x20
[  104.455333][ T2630]  ? kvm_put_kvm_no_destroy+0x90/0x90
[  104.460700][ T2630]  ? __kasan_check_write+0x14/0x20
[  104.465805][ T2630]  ? wake_up_q+0x123/0x1e0
[  104.470216][ T2630]  kvm_vm_ioctl_set_memory_region+0x6f/0xa0
[  104.476096][ T2630]  kvm_vm_ioctl+0x80d/0xab0
[  104.480591][ T2630]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  104.486212][ T2630]  ? ioctl_has_perm+0x1b8/0x4f0
[  104.491060][ T2630]  ? __asan_set_shadow_00+0xe/0x10
[  104.496176][ T2630]  ? do_vfs_ioctl+0x1403/0x15d0
[  104.501027][ T2630]  ? __ia32_compat_sys_ioctl+0x8c0/0x8c0
[  104.506649][ T2630]  ? has_cap_mac_admin+0x370/0x370
[  104.511755][ T2630]  ? kvm_vcpu_ioctl+0xa8a/0xbd0
[  104.516597][ T2630]  ? selinux_file_ioctl+0x3ad/0x4c0
[  104.521786][ T2630]  ? selinux_file_alloc_security+0x120/0x120
[  104.527756][ T2630]  ? __fget_files+0x2e1/0x340
[  104.532424][ T2630]  ? security_file_ioctl+0x84/0xa0
[  104.537533][ T2630]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  104.543158][ T2630]  __se_sys_ioctl+0x121/0x1a0
[  104.547828][ T2630]  __x64_sys_ioctl+0x7b/0x90
[  104.552481][ T2630]  do_syscall_64+0x31/0x40
[  104.556908][ T2630]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  104.562816][ T2630] RIP: 0033:0x7fcf98924c2b
[  104.567228][ T2630] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  104.586841][ T2630] RSP: 002b:00007fcf9737c450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.595250][ T2630] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fcf98924c2b
[  104.603215][ T2630] RDX: 00007fcf9737cbd0 RSI: 000000004020ae46 RDI: 0000000000000004
[  104.611179][ T2630] RBP: 0000000000000004 R08: 000000000aaaada1 R09: 000000000000006e
[  104.619145][ T2630] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000
[  104.627117][ T2630] R13: 00007fcf9737cbd0 R14: 000020000000d000 R15: 000000000000000d
[  104.637174][  T317] CPU: 0 PID: 317 Comm: udevd Tainted: G        W         syzkaller #0
[  104.645418][  T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  104.655477][  T317] Call Trace:
[  104.658759][  T317]  __dump_stack+0x21/0x24
[  104.663087][  T317]  dump_stack_lvl+0x1a7/0x208
[  104.667928][  T317]  ? show_regs_print_info+0x18/0x18
[  104.673134][  T317]  dump_stack+0x15/0x1c
[  104.677275][  T317]  should_fail+0x3ab/0x500
[  104.681695][  T317]  should_fail_alloc_page+0x4f/0x60
[  104.686912][  T317]  __alloc_pages_nodemask+0x11a/0x640
[  104.692274][  T317]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  104.697832][  T317]  ? __kasan_check_read+0x11/0x20
[  104.702843][  T317]  ? ____kasan_slab_free+0x130/0x160
[  104.708131][  T317]  ? __kasan_slab_free+0x11/0x20
[  104.713058][  T317]  new_slab+0x84/0x3f0
[  104.717133][  T317]  ___slab_alloc+0x2f8/0x4c0
[  104.721713][  T317]  ? getname_flags+0xba/0x510
[  104.726393][  T317]  ? blkcg_maybe_throttle_current+0x1e0/0x9e0
[  104.732451][  T317]  __slab_alloc+0x63/0xa0
[  104.736770][  T317]  ? getname_flags+0xba/0x510
[  104.741432][  T317]  ? getname_flags+0xba/0x510
[  104.746103][  T317]  kmem_cache_alloc+0x1a4/0x2d0
[  104.750939][  T317]  ? getname_flags+0xba/0x510
[  104.755603][  T317]  ? ____fput+0x15/0x20
[  104.759750][  T317]  getname_flags+0xba/0x510
[  104.764342][  T317]  __x64_sys_rename+0x5f/0x90
[  104.769023][  T317]  do_syscall_64+0x31/0x40
[  104.773427][  T317]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  104.779311][  T317] RIP: 0033:0x7fdbc9e13cc7
[  104.783716][  T317] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8
[  104.803423][  T317] RSP: 002b:00007ffd7894fcd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000052
[  104.811829][  T317] RAX: ffffffffffffffda RBX: 00005652ec69ecd0 RCX: 00007fdbc9e13cc7
[  104.819796][  T317] RDX: 00005652ec332010 RSI: 00007ffd7894fcf0 RDI: 00007ffd789500f0
[  104.827774][  T317] RBP: 00005652ec574d40 R08: 00000000000001e0 R09: 0000000000000000
[  104.835750][  T317] R10: 00000000000001b6 R11: 0000000000000206 R12: 00007ffd7894fcf0
[  104.843726][  T317] R13: 00007ffd789500f0 R14: 00005652cd270100 R15: 00005652cd270140
[  104.877404][   T24] audit: type=1400 audit(1785381635.747:567): avc:  denied  { unlink } for  pid=280 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  104.925039][   T24] audit: type=1400 audit(1785381635.747:568): avc:  denied  { rmdir } for  pid=280 comm="syz-executor" name="debug" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  105.116570][   T24] audit: type=1400 audit(1785381637.817:569): avc:  denied  { mount } for  pid=2669 comm="syz.0.859" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  105.587864][   T24] audit: type=1400 audit(1785381637.857:570): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  105.618501][ T2641] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  105.832315][ T2691] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  105.888817][ T2696] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue
[  105.910263][ T2696] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.958189][   T24] audit: type=1400 audit(1785381638.657:571): avc:  denied  { rename } for  pid=2695 comm="syz.5.869" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.108356][ T2703] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  106.175510][ T2711] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,dioread_lock,,errors=continue
[  106.198094][ T2711] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.251397][ T2725] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.875: invalid block
[  106.303788][ T2711] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz.4.872: Directory hole found for htree leaf block 0
[  106.325304][ T2725] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.875: invalid indirect mapped block 10 (level 1)
[  106.398809][ T2725] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.875: invalid indirect mapped block 8 (level 1)
[  106.420734][ T2738] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  106.533784][   T24] audit: type=1400 audit(1785381639.237:572): avc:  denied  { mount } for  pid=2747 comm="syz.4.885" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  106.555956][ T2725] EXT4-fs (loop3): 1 truncate cleaned up
[  106.562339][ T2738] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.667460][  T301] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  106.681072][ T2725] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  106.700455][  T301] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  106.728756][ T2738] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  106.747696][ T2725] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1625686989
[  106.846337][ T2738] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.881: bg 0: block 248: padding at end of block bitmap is not set
[  106.943731][ T2738] Quota error (device loop1): write_blk: dquota write failed
[  106.991170][ T2738] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  107.562855][ T2777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.897'.
[  107.586251][ T2738] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.881: Failed to acquire dquot type 1
[  107.662230][ T2738] EXT4-fs (loop1): 1 truncate cleaned up
[  107.700429][ T2738] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,grpquota,,errors=continue
[  108.394334][   T24] audit: type=1400 audit(1785381641.097:573): avc:  denied  { ioctl } for  pid=2815 comm="syz.1.913" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  108.420352][ T2817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'.
[  108.588061][ T2830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  108.621399][ T2832] erofs: (device loop4): mounted with root inode @ nid 36.
[  108.649959][ T2830] EXT4-fs (loop5): 1 truncate cleaned up
[  108.661578][   T41] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  108.689982][ T2832] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  108.727470][ T2830] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000003,discard,,errors=continue
[  108.772202][ T2832] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  108.842738][ T2832] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  108.910196][  T301] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  108.928273][ T2832] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  109.001479][ T2845] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.051507][ T2845] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  109.080581][ T2845] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d)
[  109.177571][ T2845] exFAT-fs (loop5): hint_cluster is invalid (17)
[  109.184057][  T301] usb 2-1: Using ep0 maxpacket: 8
[  109.197820][ T2854] kvm [2853]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0
[  109.210212][  T390] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  109.218333][ T2845] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[  109.238005][ T2845] exFAT-fs (loop5): Filesystem has been set read-only
[  109.311507][  T301] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  109.323250][  T301] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  109.346598][  T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.590239][  T390] usb 4-1: config 128 has an invalid interface number: 190 but max is 0
[  109.610154][  T390] usb 4-1: config 128 has no interface number 0
[  109.627515][  T390] usb 4-1: config 128 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  109.650227][  T301] usb 2-1: string descriptor 0 read error: -71
[  109.659341][  T301] hub 2-1:32.0: USB hub found
[  109.720189][  T301] hub 2-1:32.0: config failed, can't read hub descriptor (err -22)
[  109.791253][  T301] usb 2-1: USB disconnect, device number 9
[  109.810285][  T390] usb 4-1: New USB device found, idVendor=13d3, idProduct=3359, bcdDevice=bf.81
[  109.859229][  T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.877530][  T390] usb 4-1: Product: syz
[  109.887560][  T390] usb 4-1: Manufacturer: syz
[  109.896712][  T390] usb 4-1: SerialNumber: syz
[  110.021253][ T2890] attempt to access beyond end of device
[  110.021253][ T2890] loop5: rw=0, want=57848, limit=8192
[  110.049227][ T2890] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  110.065024][ T2890] FAT-fs (loop5): Filesystem has been set read-only
[  110.080096][ T2890] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  110.096190][ T2890] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  110.114398][ T2896] attempt to access beyond end of device
[  110.114398][ T2896] loop5: rw=0, want=57848, limit=8192
[  110.224051][  T390] usb 4-1: USB disconnect, device number 9
[  110.385609][ T2917] erofs: (device loop4): mounted with root inode @ nid 36.
[  110.802640][ T2917] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel
[  110.843029][ T2917] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95]
[  110.918655][ T2934] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.953322][ T2934] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  110.988011][ T2934] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  111.469713][   T24] audit: type=1400 audit(1785381644.167:574): avc:  denied  { remove_name } for  pid=2933 comm="syz.4.957" name="file0" dev="loop4" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  111.626993][   T24] audit: type=1400 audit(1785381644.197:575): avc:  denied  { rmdir } for  pid=2933 comm="syz.4.957" name="file0" dev="loop4" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  112.158014][ T2953] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  112.228393][   T24] audit: type=1400 audit(1785381644.867:576): avc:  denied  { relabelto } for  pid=2951 comm="syz.0.966" name="202" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  112.362090][   T24] audit: type=1400 audit(1785381644.867:577): avc:  denied  { associate } for  pid=2951 comm="syz.0.966" name="202" dev="tmpfs" ino=1068 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  113.544221][ T2982] Unknown ioctl 21531
[  113.622895][   T24] audit: type=1400 audit(1785381645.137:578): avc:  denied  { write } for  pid=279 comm="syz-executor" name="202" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  113.690427][ T2987] erofs: (device loop5): mounted with root inode @ nid 36.
[  113.702176][ T2988] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  113.812859][   T24] audit: type=1400 audit(1785381645.137:579): avc:  denied  { remove_name } for  pid=279 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  113.976495][ T3008] xt_hashlimit: size too large, truncated to 1048576
[  113.993444][   T24] audit: type=1400 audit(1785381645.137:580): avc:  denied  { rmdir } for  pid=279 comm="syz-executor" name="202" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  114.050843][ T3005] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.986: bg 0: block 393: padding at end of block bitmap is not set
[  114.066827][ T3003] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  114.090650][ T3003] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.120149][ T3005] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  114.161597][ T3003] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: block 3: comm syz.4.987: lblock 3 mapped to illegal pblock 3 (length 3)
[  114.176560][ T3005] EXT4-fs (loop5): 2 truncates cleaned up
[  114.200364][ T3005] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  114.590215][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  114.630533][ T3003] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  114.700016][ T3003] EXT4-fs (loop4): This should not happen!! Data will be lost
[  114.700016][ T3003] 
[  114.710657][ T3025] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  114.729532][ T3022] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #15: block 3: comm syz.4.987: lblock 3 mapped to illegal pblock 3 (length 1)
[  115.223519][ T3029] EXT4-fs error (device loop4): ext4_ext_remove_space:2939: inode #15: comm syz.4.987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  115.334571][ T3029] EXT4-fs error (device loop4) in ext4_setattr:5745: Corrupt filesystem
[  115.402461][   T24] audit: type=1326 audit(1785381648.107:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  115.430472][ T3043] ==================================================================
[  115.438577][ T3043] BUG: KASAN: use-after-free in kobject_get+0x113/0x120
[  115.445506][ T3043] Read of size 1 at addr ffff88811116183c by task syz.0.999/3043
[  115.453211][ T3043] 
[  115.455555][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G        W         syzkaller #0
[  115.464218][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  115.474280][ T3043] Call Trace:
[  115.477574][ T3043]  __dump_stack+0x21/0x24
[  115.481919][ T3043]  dump_stack_lvl+0x1a7/0x208
[  115.486592][ T3043]  ? show_regs_print_info+0x18/0x18
[  115.491786][ T3043]  ? thaw_kernel_threads+0x220/0x220
[  115.497066][ T3043]  print_address_description+0x7f/0x2c0
[  115.502601][ T3043]  ? kobject_get+0x113/0x120
[  115.507188][ T3043]  kasan_report+0x100/0x140
[  115.511685][ T3043]  ? kobject_get+0x113/0x120
[  115.516266][ T3043]  __asan_report_load1_noabort+0x14/0x20
[  115.521888][ T3043]  kobject_get+0x113/0x120
[  115.526314][ T3043]  device_add+0x331/0xc00
[  115.530671][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  115.536149][ T3043]  device_create+0x26c/0x300
[  115.540739][ T3043]  ? root_device_unregister+0x80/0x80
[  115.546116][ T3043]  create_function_device+0x60/0x70
[  115.551309][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  115.556242][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  115.561782][ T3043]  function_make+0x118/0x350
[  115.566366][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  115.572706][ T3043]  ? mutex_trylock+0xb0/0xb0
[  115.577309][ T3043]  ? configfs_mkdir+0x504/0xd90
[  115.582149][ T3043]  configfs_mkdir+0x5d2/0xd90
[  115.586837][ T3043]  ? show_sid+0x1b0/0x1b0
[  115.591164][ T3043]  ? configfs_lookup+0x500/0x500
[  115.596095][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  115.601025][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  115.606132][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  115.611410][ T3043]  vfs_mkdir+0x42c/0x600
[  115.615645][ T3043]  do_mkdirat+0x14c/0x340
[  115.619973][ T3043]  __x64_sys_mkdir+0x60/0x70
[  115.624557][ T3043]  do_syscall_64+0x31/0x40
[  115.628983][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  115.634866][ T3043] RIP: 0033:0x7f1a6f35ff99
[  115.639279][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.658874][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  115.667278][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  115.675243][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  115.683222][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  115.691184][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.699148][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  115.707110][ T3043] 
[  115.709428][ T3043] Allocated by task 305:
[  115.713674][ T3043]  __kasan_slab_alloc+0xb7/0xe0
[  115.718522][ T3043]  slab_post_alloc_hook+0x5d/0x2f0
[  115.723624][ T3043]  kmem_cache_alloc+0x15a/0x2d0
[  115.728468][ T3043]  getname_flags+0xba/0x510
[  115.732959][ T3043]  user_path_at_empty+0x2f/0x50
[  115.737800][ T3043]  vfs_statx+0x10a/0x530
[  115.742029][ T3043]  __se_sys_newfstatat+0x10e/0x3d0
[  115.747129][ T3043]  __x64_sys_newfstatat+0x9b/0xb0
[  115.752143][ T3043]  do_syscall_64+0x31/0x40
[  115.756554][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  115.762430][ T3043] 
[  115.764749][ T3043] Freed by task 305:
[  115.768651][ T3043]  kasan_set_track+0x4a/0x70
[  115.773238][ T3043]  kasan_set_free_info+0x23/0x40
[  115.778166][ T3043]  ____kasan_slab_free+0x125/0x160
[  115.783265][ T3043]  __kasan_slab_free+0x11/0x20
[  115.788018][ T3043]  slab_free_freelist_hook+0xc5/0x190
[  115.793383][ T3043]  kmem_cache_free+0x100/0x2d0
[  115.798154][ T3043]  filename_lookup+0x476/0x660
[  115.802926][ T3043]  user_path_at_empty+0x43/0x50
[  115.807770][ T3043]  vfs_statx+0x10a/0x530
[  115.812019][ T3043]  __se_sys_newfstatat+0x10e/0x3d0
[  115.817138][ T3043]  __x64_sys_newfstatat+0x9b/0xb0
[  115.822153][ T3043]  do_syscall_64+0x31/0x40
[  115.826558][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  115.832432][ T3043] 
[  115.834756][ T3043] The buggy address belongs to the object at ffff888111161100
[  115.834756][ T3043]  which belongs to the cache names_cache of size 4096
[  115.848888][ T3043] The buggy address is located 1852 bytes inside of
[  115.848888][ T3043]  4096-byte region [ffff888111161100, ffff888111162100)
[  115.862319][ T3043] The buggy address belongs to the page:
[  115.867961][ T3043] page:ffffea0004445800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111160
[  115.878202][ T3043] head:ffffea0004445800 order:3 compound_mapcount:0 compound_pincount:0
[  115.886531][ T3043] flags: 0x4000000000010200(slab|head)
[  115.892002][ T3043] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018a600
[  115.900611][ T3043] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[  115.909179][ T3043] page dumped because: kasan: bad access detected
[  115.915579][ T3043] page_owner tracks the page as allocated
[  115.921297][ T3043] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 305, ts 107602774217, free_ts 107598859695
[  115.942043][ T3043]  prep_new_page+0x176/0x190
[  115.946637][ T3043]  get_page_from_freelist+0x225f/0x23f0
[  115.952190][ T3043]  __alloc_pages_nodemask+0x29a/0x640
[  115.957581][ T3043]  new_slab+0x84/0x3f0
[  115.961679][ T3043]  ___slab_alloc+0x2f8/0x4c0
[  115.966287][ T3043]  __slab_alloc+0x63/0xa0
[  115.970646][ T3043]  kmem_cache_alloc+0x1a4/0x2d0
[  115.975493][ T3043]  getname_flags+0xba/0x510
[  115.979989][ T3043]  user_path_at_empty+0x2f/0x50
[  115.984829][ T3043]  vfs_statx+0x10a/0x530
[  115.989062][ T3043]  __se_sys_newfstatat+0x10e/0x3d0
[  115.994183][ T3043]  __x64_sys_newfstatat+0x9b/0xb0
[  115.999200][ T3043]  do_syscall_64+0x31/0x40
[  116.003616][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  116.009493][ T3043] page last free stack trace:
[  116.014183][ T3043]  __free_pages_ok+0x80b/0x830
[  116.018938][ T3043]  __free_pages+0xd8/0x390
[  116.023351][ T3043]  __free_slab+0xcf/0x190
[  116.027669][ T3043]  unfreeze_partials+0x150/0x180
[  116.032607][ T3043]  put_cpu_partial+0xc1/0x180
[  116.037277][ T3043]  __slab_free+0x2c9/0x3a0
[  116.041692][ T3043]  ___cache_free+0x10e/0x130
[  116.046284][ T3043]  qlink_free+0x50/0x90
[  116.050432][ T3043]  qlist_free_all+0x5f/0xb0
[  116.054924][ T3043]  kasan_quarantine_reduce+0x14a/0x160
[  116.060385][ T3043]  __kasan_slab_alloc+0x2f/0xe0
[  116.065228][ T3043]  slab_post_alloc_hook+0x5d/0x2f0
[  116.070329][ T3043]  kmem_cache_alloc+0x15a/0x2d0
[  116.075173][ T3043]  getname_flags+0xba/0x510
[  116.079670][ T3043]  user_path_at_empty+0x2f/0x50
[  116.084533][ T3043]  __x64_sys_umount+0xf9/0x170
[  116.089303][ T3043] 
[  116.091620][ T3043] Memory state around the buggy address:
[  116.097242][ T3043]  ffff888111161700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.105297][ T3043]  ffff888111161780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.113352][ T3043] >ffff888111161800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.121400][ T3043]                                         ^
[  116.127285][ T3043]  ffff888111161880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.135340][ T3043]  ffff888111161900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.143392][ T3043] ==================================================================
[  116.151481][ T3043] Disabling lock debugging due to kernel taint
[  116.217478][ T3045] FAT-fs (loop4): FAT read failed (blocknr 128)
[  116.230133][  T301] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  116.239792][   T24] audit: type=1326 audit(1785381648.127:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.279448][ T3047] FAT-fs (loop4): FAT read failed (blocknr 128)
[  116.352802][   T24] audit: type=1326 audit(1785381648.127:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.397112][   T24] audit: type=1326 audit(1785381648.127:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.435914][   T24] audit: type=1326 audit(1785381648.127:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.475671][   T24] audit: type=1326 audit(1785381648.127:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.515137][   T24] audit: type=1326 audit(1785381648.127:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3042 comm="syz.0.999" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1a6f35ff99 code=0x7ffc0000
[  116.565782][ T3043] ------------[ cut here ]------------
[  116.571724][ T3043] kobject: '(null)' (ffff888111161800): is not initialized, yet kobject_get() is being called.
[  116.582797][ T3043] WARNING: CPU: 0 PID: 3043 at lib/kobject.c:666 kobject_get+0x7c/0x120
[  116.591442][ T3043] Modules linked in:
[  116.595457][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  116.604402][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  116.614692][ T3043] RIP: 0010:kobject_get+0x7c/0x120
[  116.619895][ T3043] Code: 0a ff 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 16 31 45 ff 48 8b 33 48 c7 c7 c0 9b 41 85 48 89 da e8 e4 fc 1e 02 <0f> 0b eb 0c e8 db bb 0a ff eb 4c e8 d4 bb 0a ff 4c 8d 73 38 4c 89
[  116.639992][ T3043] RSP: 0018:ffffc90000d97970 EFLAGS: 00010246
[  116.646258][ T3043] RAX: 8334d720023f5300 RBX: ffff888111161800 RCX: 0000000000080000
[  116.654476][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  116.662751][ T3043] RBP: ffffc90000d97988 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[  116.670951][  T301] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  116.682371][ T3043] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000
[  116.690651][  T301] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.701904][ T3043] R13: ffff88810ae2e868 R14: 0000000000000000 R15: dffffc0000000000
[  116.709924][  T301] usb 6-1: config 0 has no interface number 0
[  116.716229][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  116.725347][  T301] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.738596][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.745376][ T3043] CR2: 000000110c2f765c CR3: 000000010ad70000 CR4: 00000000003506b0
[  116.753590][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  116.761764][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  116.769827][ T3043] Call Trace:
[  116.773298][ T3043]  device_add+0x331/0xc00
[  116.777696][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  116.783467][ T3043]  device_create+0x26c/0x300
[  116.788248][ T3043]  ? root_device_unregister+0x80/0x80
[  116.793898][ T3043]  create_function_device+0x60/0x70
[  116.799154][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  116.804390][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  116.810025][ T3043]  function_make+0x118/0x350
[  116.814917][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  116.821570][ T3043]  ? mutex_trylock+0xb0/0xb0
[  116.826541][ T3043]  ? configfs_mkdir+0x504/0xd90
[  116.831598][ T3043]  configfs_mkdir+0x5d2/0xd90
[  116.836320][ T3043]  ? show_sid+0x1b0/0x1b0
[  116.840931][ T3043]  ? configfs_lookup+0x500/0x500
[  116.845964][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  116.851466][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  116.856631][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  116.862270][ T3043]  vfs_mkdir+0x42c/0x600
[  116.866587][ T3043]  do_mkdirat+0x14c/0x340
[  116.871083][ T3043]  __x64_sys_mkdir+0x60/0x70
[  116.875805][ T3043]  do_syscall_64+0x31/0x40
[  116.880463][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  116.886444][ T3043] RIP: 0033:0x7f1a6f35ff99
[  116.891045][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.910896][  T301] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  116.920032][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  116.928776][  T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.936918][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  116.945068][  T301] usb 6-1: Product: syz
[  116.949265][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  116.957462][  T301] usb 6-1: Manufacturer: syz
[  116.962141][  T301] usb 6-1: SerialNumber: syz
[  116.966761][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  116.977752][  T301] usb 6-1: config 0 descriptor??
[  116.982917][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.991190][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  116.999237][ T3043] ---[ end trace 733ee7117cd5283f ]---
[  117.005002][ T3043] ------------[ cut here ]------------
[  117.010689][ T3043] refcount_t: addition on 0; use-after-free.
[  117.016850][ T3043] WARNING: CPU: 0 PID: 3043 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0
[  117.026421][ T3043] Modules linked in:
[  117.030992][  T301] usbhid 6-1:0.119: couldn't find an input interrupt endpoint
[  117.039050][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  117.051196][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  117.061540][ T3043] RIP: 0010:refcount_warn_saturate+0x104/0x1a0
[  117.067941][ T3043] Code: 04 01 48 c7 c7 a0 49 40 85 e8 98 ca 3a 02 0f 0b eb df e8 8f 89 26 ff c6 05 cc 75 82 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 <0f> 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40
[  117.089920][ T3043] RSP: 0018:ffffc90000d97950 EFLAGS: 00010246
[  117.109889][ T3043] RAX: 8334d720023f5300 RBX: 0000000000000002 RCX: 0000000000080000
[  117.118250][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  117.126625][ T3043] RBP: ffffc90000d97960 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a
[  117.134940][ T3043] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: 0000000000000000
[  117.143091][ T3043] R13: ffff88810ae2e868 R14: 0000000000000002 R15: 0000000000000000
[  117.151469][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  117.160617][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.167245][ T3043] CR2: 000055557a73b908 CR3: 000000010ad70000 CR4: 00000000003506b0
[  117.175489][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.183602][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.191736][ T3043] Call Trace:
[  117.195072][ T3043]  kobject_get+0xfb/0x120
[  117.199428][ T3043]  device_add+0x331/0xc00
[  117.204045][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  117.209551][ T3043]  device_create+0x26c/0x300
[  117.214449][ T3043]  ? root_device_unregister+0x80/0x80
[  117.219879][ T3043]  create_function_device+0x60/0x70
[  117.225283][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  117.233107][   T52] usb 6-1: USB disconnect, device number 2
[  117.239912][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  117.248545][ T3043]  function_make+0x118/0x350
[  117.253378][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  117.259748][ T3043]  ? mutex_trylock+0xb0/0xb0
[  117.264613][ T3043]  ? configfs_mkdir+0x504/0xd90
[  117.269498][ T3043]  configfs_mkdir+0x5d2/0xd90
[  117.274516][ T3043]  ? show_sid+0x1b0/0x1b0
[  117.278922][ T3043]  ? configfs_lookup+0x500/0x500
[  117.284036][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  117.289069][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  117.294577][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  117.299991][ T3043]  vfs_mkdir+0x42c/0x600
[  117.304576][ T3043]  do_mkdirat+0x14c/0x340
[  117.308966][ T3043]  __x64_sys_mkdir+0x60/0x70
[  117.313764][ T3043]  do_syscall_64+0x31/0x40
[  117.318224][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  117.324303][ T3043] RIP: 0033:0x7f1a6f35ff99
[  117.328749][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.348647][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  117.357222][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  117.365356][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  117.373452][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  117.381565][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.389572][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  117.397816][ T3043] ---[ end trace 733ee7117cd52840 ]---
[  117.403686][ T3043] ------------[ cut here ]------------
[  117.409238][ T3043] kobject: '(null)' (ffff888111161800): is not initialized, yet kobject_get() is being called.
[  117.419917][ T3043] WARNING: CPU: 0 PID: 3043 at lib/kobject.c:666 kobject_add_internal+0x12e/0xde0
[  117.429295][ T3043] Modules linked in:
[  117.433356][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  117.442347][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  117.453053][ T3043] RIP: 0010:kobject_add_internal+0x12e/0xde0
[  117.459091][ T3043] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 95 18 45 ff 49 8b 34 24 48 c7 c7 c0 9b 41 85 4c 89 e2 e8 62 e4 1e 02 <0f> 0b e9 04 01 00 00 e8 56 a3 0a ff b8 fe ff ff ff e9 b0 09 00 00
[  117.478985][ T3043] RSP: 0018:ffffc90000d977d8 EFLAGS: 00010246
[  117.485225][ T3043] RAX: 8334d720023f5300 RBX: ffff888109a85a00 RCX: 0000000000080000
[  117.493576][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  117.501720][ T3043] RBP: ffffc90000d97830 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[  117.509785][ T3043] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff888111161800
[  117.517939][ T3043] R13: ffff888109a85a18 R14: 0000000000000000 R15: 1ffff11021350b40
[  117.526148][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  117.535231][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.542023][ T3043] CR2: 0000001b2e923ffc CR3: 000000010ad70000 CR4: 00000000003506b0
[  117.550050][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.558304][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.566465][ T3043] Call Trace:
[  117.569840][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  117.575542][ T3043]  kobject_add+0x165/0x230
[  117.580244][ T3043]  ? kobject_init+0x1d0/0x1d0
[  117.584994][ T3043]  ? __kasan_check_write+0x14/0x20
[  117.590354][ T3043]  ? kobject_init+0x83/0x1d0
[  117.595028][ T3043]  get_device_parent+0x3a6/0x410
[  117.600001][ T3043]  device_add+0x349/0xc00
[  117.604590][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  117.610231][ T3043]  device_create+0x26c/0x300
[  117.614907][ T3043]  ? root_device_unregister+0x80/0x80
[  117.620457][ T3043]  create_function_device+0x60/0x70
[  117.625727][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  117.630831][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  117.636479][ T3043]  function_make+0x118/0x350
[  117.641228][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  117.647626][ T3043]  ? mutex_trylock+0xb0/0xb0
[  117.652370][ T3043]  ? configfs_mkdir+0x504/0xd90
[  117.657299][ T3043]  configfs_mkdir+0x5d2/0xd90
[  117.662334][ T3043]  ? show_sid+0x1b0/0x1b0
[  117.666722][ T3043]  ? configfs_lookup+0x500/0x500
[  117.671811][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  117.676835][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  117.682114][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  117.687499][ T3043]  vfs_mkdir+0x42c/0x600
[  117.691906][ T3043]  do_mkdirat+0x14c/0x340
[  117.696281][ T3043]  __x64_sys_mkdir+0x60/0x70
[  117.701047][ T3043]  do_syscall_64+0x31/0x40
[  117.705549][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  117.711943][ T3043] RIP: 0033:0x7f1a6f35ff99
[  117.716427][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.736423][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  117.745199][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  117.753342][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  117.761443][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  117.773812][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.793337][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  117.801564][ T3043] ---[ end trace 733ee7117cd52841 ]---
[  117.807085][ T3043] ------------[ cut here ]------------
[  117.813504][ T3043] refcount_t: saturated; leaking memory.
[  117.819308][ T3043] WARNING: CPU: 0 PID: 3043 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0
[  117.828862][ T3043] Modules linked in:
[  117.832969][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  117.841823][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  117.852100][ T3043] RIP: 0010:refcount_warn_saturate+0x158/0x1a0
[  117.858301][ T3043] Code: 04 01 48 c7 c7 60 48 40 85 e8 44 ca 3a 02 0f 0b eb 8b e8 3b 89 26 ff c6 05 77 75 82 04 01 48 c7 c7 60 48 40 85 e8 28 ca 3a 02 <0f> 0b e9 6c ff ff ff e8 1c 89 26 ff c6 05 5c 75 82 04 01 48 c7 c7
[  117.878367][ T3043] RSP: 0018:ffffc90000d977b8 EFLAGS: 00010246
[  117.884623][ T3043] RAX: 8334d720023f5300 RBX: 0000000000000001 RCX: 0000000000080000
[  117.892897][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  117.901082][ T3043] RBP: ffffc90000d977c8 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a
[  117.909112][ T3043] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: 00000000c0000000
[  117.917250][ T3043] R13: ffff888109a85a18 R14: 0000000000000001 R15: ffff888111161838
[  117.925435][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  117.934555][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.941300][ T3043] CR2: 00007f80552342f8 CR3: 000000010ad70000 CR4: 00000000003506b0
[  117.949315][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.957521][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.965623][ T3043] Call Trace:
[  117.968966][ T3043]  kobject_add_internal+0xc44/0xde0
[  117.974317][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  117.979815][ T3043]  kobject_add+0x165/0x230
[  117.984419][ T3043]  ? kobject_init+0x1d0/0x1d0
[  117.989128][ T3043]  ? __kasan_check_write+0x14/0x20
[  117.994416][ T3043]  ? kobject_init+0x83/0x1d0
[  117.999047][ T3043]  get_device_parent+0x3a6/0x410
[  118.004178][ T3043]  device_add+0x349/0xc00
[  118.008679][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  118.014305][ T3043]  device_create+0x26c/0x300
[  118.019050][ T3043]  ? root_device_unregister+0x80/0x80
[  118.024732][ T3043]  create_function_device+0x60/0x70
[  118.029999][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  118.035099][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  118.040826][ T3043]  function_make+0x118/0x350
[  118.045479][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  118.051978][ T3043]  ? mutex_trylock+0xb0/0xb0
[  118.056612][ T3043]  ? configfs_mkdir+0x504/0xd90
[  118.061613][ T3043]  configfs_mkdir+0x5d2/0xd90
[  118.066448][ T3043]  ? show_sid+0x1b0/0x1b0
[  118.071000][ T3043]  ? configfs_lookup+0x500/0x500
[  118.075991][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  118.081116][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  118.086311][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  118.091841][ T3043]  vfs_mkdir+0x42c/0x600
[  118.096182][ T3043]  do_mkdirat+0x14c/0x340
[  118.100706][ T3043]  __x64_sys_mkdir+0x60/0x70
[  118.105395][ T3043]  do_syscall_64+0x31/0x40
[  118.109898][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  118.116021][ T3043] RIP: 0033:0x7f1a6f35ff99
[  118.120567][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.140411][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  118.148876][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  118.157034][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  118.165158][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  118.173299][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.181463][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  118.189646][ T3043] ---[ end trace 733ee7117cd52842 ]---
[  118.195281][ T3043] ------------[ cut here ]------------
[  118.200862][ T3043] kobject: '(null)' (ffff888111161800): is not initialized, yet kobject_put() is being called.
[  118.211452][ T3043] WARNING: CPU: 0 PID: 3043 at lib/kobject.c:760 kobject_put+0x8a/0x270
[  118.219823][ T3043] Modules linked in:
[  118.223892][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  118.232705][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  118.242931][ T3043] RIP: 0010:kobject_put+0x8a/0x270
[  118.248074][ T3043] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e8 2f 45 ff 48 8b 33 48 c7 c7 40 9c 41 85 48 89 da e8 b6 fb 1e 02 <0f> 0b eb 0f e8 ad ba 0a ff e9 7c 01 00 00 e8 a3 ba 0a ff 4c 8d 7b
[  118.267967][ T3043] RSP: 0018:ffffc90000d977a0 EFLAGS: 00010246
[  118.276034][ T3043] RAX: 8334d720023f5300 RBX: ffff888111161800 RCX: 0000000000080000
[  118.284208][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  118.292317][ T3043] RBP: ffffc90000d977c8 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[  118.300569][ T3043] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff888111161800
[  118.308592][ T3043] R13: ffff88811116183c R14: 1ffff1102222c307 R15: 0000000000000000
[  118.316810][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  118.326080][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.332837][ T3043] CR2: 00007f80552342f8 CR3: 000000010ad70000 CR4: 00000000003506b0
[  118.340926][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.348956][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.357077][ T3043] Call Trace:
[  118.360493][ T3043]  kobject_add_internal+0xb52/0xde0
[  118.365757][ T3043]  kobject_add+0x165/0x230
[  118.370322][ T3043]  ? kobject_init+0x1d0/0x1d0
[  118.375048][ T3043]  ? __kasan_check_write+0x14/0x20
[  118.380298][ T3043]  ? kobject_init+0x83/0x1d0
[  118.384937][ T3043]  get_device_parent+0x3a6/0x410
[  118.389911][ T3043]  device_add+0x349/0xc00
[  118.394423][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  118.400033][ T3043]  device_create+0x26c/0x300
[  118.404817][ T3043]  ? root_device_unregister+0x80/0x80
[  118.410317][ T3043]  create_function_device+0x60/0x70
[  118.415562][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  118.420668][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  118.426349][ T3043]  function_make+0x118/0x350
[  118.440454][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  118.446854][ T3043]  ? mutex_trylock+0xb0/0xb0
[  118.451628][ T3043]  ? configfs_mkdir+0x504/0xd90
[  118.456523][ T3043]  configfs_mkdir+0x5d2/0xd90
[  118.462643][ T3043]  ? show_sid+0x1b0/0x1b0
[  118.467025][ T3043]  ? configfs_lookup+0x500/0x500
[  118.472114][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  118.477127][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  118.482394][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  118.487721][ T3043]  vfs_mkdir+0x42c/0x600
[  118.492137][ T3043]  do_mkdirat+0x14c/0x340
[  118.496510][ T3043]  __x64_sys_mkdir+0x60/0x70
[  118.501249][ T3043]  do_syscall_64+0x31/0x40
[  118.505716][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  118.511783][ T3043] RIP: 0033:0x7f1a6f35ff99
[  118.516241][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.536039][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  118.544566][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  118.552685][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  118.560811][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  118.568828][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.576974][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  118.585074][ T3043] ---[ end trace 733ee7117cd52843 ]---
[  118.590648][ T3043] ------------[ cut here ]------------
[  118.596143][ T3043] refcount_t: underflow; use-after-free.
[  118.602040][ T3043] WARNING: CPU: 0 PID: 3043 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[  118.611549][ T3043] Modules linked in:
[  118.615489][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  118.624335][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  118.634577][ T3043] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[  118.640863][ T3043] Code: 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 0f 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40 85 e8 60 ca 3a 02 <0f> 0b eb a7 e8 57 89 26 ff c6 05 92 75 82 04 01 48 c7 c7 60 48 40
[  118.660772][ T3043] RSP: 0018:ffffc90000d97780 EFLAGS: 00010246
[  118.666897][ T3043] RAX: 8334d720023f5300 RBX: 0000000000000003 RCX: 0000000000080000
[  118.675044][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  118.683128][ T3043] RBP: ffffc90000d97790 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[  118.691222][ T3043] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 00000000c0000000
[  118.699244][ T3043] R13: ffff88811116183c R14: 0000000000000003 R15: ffff888111161838
[  118.707460][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  118.716536][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.723255][ T3043] CR2: 00007f80552342f8 CR3: 000000010ad70000 CR4: 00000000003506b0
[  118.731366][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.739386][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.747541][ T3043] Call Trace:
[  118.750962][ T3043]  kobject_put+0x231/0x270
[  118.755443][ T3043]  kobject_add_internal+0xb52/0xde0
[  118.760801][ T3043]  kobject_add+0x165/0x230
[  118.765258][ T3043]  ? kobject_init+0x1d0/0x1d0
[  118.769981][ T3043]  ? __kasan_check_write+0x14/0x20
[  118.775294][ T3043]  ? kobject_init+0x83/0x1d0
[  118.779923][ T3043]  get_device_parent+0x3a6/0x410
[  118.785050][ T3043]  device_add+0x349/0xc00
[  118.789417][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  118.795144][ T3043]  device_create+0x26c/0x300
[  118.799776][ T3043]  ? root_device_unregister+0x80/0x80
[  118.805367][ T3043]  create_function_device+0x60/0x70
[  118.810749][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  118.815816][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  118.821603][ T3043]  function_make+0x118/0x350
[  118.826258][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  118.832811][ T3043]  ? mutex_trylock+0xb0/0xb0
[  118.837459][ T3043]  ? configfs_mkdir+0x504/0xd90
[  118.842505][ T3043]  configfs_mkdir+0x5d2/0xd90
[  118.847246][ T3043]  ? show_sid+0x1b0/0x1b0
[  118.851864][ T3043]  ? configfs_lookup+0x500/0x500
[  118.856866][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  118.862002][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  118.867168][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  118.872657][ T3043]  vfs_mkdir+0x42c/0x600
[  118.877070][ T3043]  do_mkdirat+0x14c/0x340
[  118.881631][ T3043]  __x64_sys_mkdir+0x60/0x70
[  118.886279][ T3043]  do_syscall_64+0x31/0x40
[  118.890864][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  118.896801][ T3043] RIP: 0033:0x7f1a6f35ff99
[  118.901359][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.921201][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  118.929667][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  118.937813][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  118.945915][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  118.954032][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.962511][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  118.970690][ T3043] ---[ end trace 733ee7117cd52844 ]---
[  118.976212][ T3043] kobject_add_internal failed for android_usb (error: -2 parent: (null))
[  118.984825][ T3043] ------------[ cut here ]------------
[  118.990446][ T3043] kobject: '(null)' (ffff888111161800): is not initialized, yet kobject_put() is being called.
[  119.001125][ T3043] WARNING: CPU: 0 PID: 3043 at lib/kobject.c:760 kobject_put+0x8a/0x270
[  119.009532][ T3043] Modules linked in:
[  119.013641][ T3043] CPU: 0 PID: 3043 Comm: syz.0.999 Tainted: G    B   W         syzkaller #0
[  119.022470][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  119.032895][ T3043] RIP: 0010:kobject_put+0x8a/0x270
[  119.038073][ T3043] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e8 2f 45 ff 48 8b 33 48 c7 c7 40 9c 41 85 48 89 da e8 b6 fb 1e 02 <0f> 0b eb 0f e8 ad ba 0a ff e9 7c 01 00 00 e8 a3 ba 0a ff 4c 8d 7b
[  119.058448][ T3043] RSP: 0018:ffffc90000d97960 EFLAGS: 00010246
[  119.064682][ T3043] RAX: 8334d720023f5300 RBX: ffff888111161800 RCX: 0000000000080000
[  119.072960][ T3043] RDX: ffffc900014eb000 RSI: 000000000007ffff RDI: 0000000000080000
[  119.081081][ T3043] RBP: ffffc90000d97988 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7
[  119.089280][ T3043] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: fffffffffffffffe
[  119.097460][ T3043] R13: ffff88811116183c R14: 1ffff1102222c307 R15: 0000000000000000
[  119.105550][ T3043] FS:  00007f1a6ddb96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  119.114642][ T3043] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.121339][ T3043] CR2: 00005555601d54e8 CR3: 000000010ad70000 CR4: 00000000003506b0
[  119.129366][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  119.137527][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  119.145637][ T3043] Call Trace:
[  119.148968][ T3043]  device_add+0x36f/0xc00
[  119.153451][ T3043]  ? kobject_set_name_vargs+0xca/0x110
[  119.158945][ T3043]  device_create+0x26c/0x300
[  119.163679][ T3043]  ? root_device_unregister+0x80/0x80
[  119.169084][ T3043]  create_function_device+0x60/0x70
[  119.174422][ T3043]  f_midi_alloc_inst+0x1a8/0x380
[  119.179400][ T3043]  usb_get_function_instance+0xe2/0x2f0
[  119.185093][ T3043]  function_make+0x118/0x350
[  119.189713][ T3043]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  119.196192][ T3043]  ? mutex_trylock+0xb0/0xb0
[  119.200887][ T3043]  ? configfs_mkdir+0x504/0xd90
[  119.205768][ T3043]  configfs_mkdir+0x5d2/0xd90
[  119.210597][ T3043]  ? show_sid+0x1b0/0x1b0
[  119.214965][ T3043]  ? configfs_lookup+0x500/0x500
[  119.219928][ T3043]  ? kmem_cache_free+0x100/0x2d0
[  119.225051][ T3043]  ? selinux_inode_mkdir+0x22/0x30
[  119.230278][ T3043]  ? security_inode_mkdir+0xbd/0x110
[  119.235597][ T3043]  vfs_mkdir+0x42c/0x600
[  119.239868][ T3043]  do_mkdirat+0x14c/0x340
[  119.244361][ T3043]  __x64_sys_mkdir+0x60/0x70
[  119.249005][ T3043]  do_syscall_64+0x31/0x40
[  119.253567][ T3043]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  119.259483][ T3043] RIP: 0033:0x7f1a6f35ff99
[  119.264034][ T3043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.283795][ T3043] RSP: 002b:00007f1a6ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  119.292326][ T3043] RAX: ffffffffffffffda RBX: 00007f1a6f5e7fa0 RCX: 00007f1a6f35ff99
[  119.300605][ T3043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000800
[  119.308623][ T3043] RBP: 00007f1a6f3f6ec4 R08: 0000000000000000 R09: 0000000000000000
[  119.318061][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.326272][ T3043] R13: 00007f1a6f5e8038 R14: 00007f1a6f5e7fa0 R15: 00007ffc17866618
[  119.334447][ T3043] ---[ end trace 733ee7117cd52845 ]---