last executing test programs:

1m5.493575648s ago: executing program 32 (id=79):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x18)

56.909103231s ago: executing program 33 (id=330):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/file0'}, 0x11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x10, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000791c000000000000c3010000000000009500000000000000"], &(0x7f0000000c00)='GPL\x00', 0x2, 0xc4, &(0x7f0000001180)=""/196}, 0x80)

56.771466225s ago: executing program 34 (id=337):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

54.822653165s ago: executing program 35 (id=356):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x80002)
ioctl$TIOCCBRK(r1, 0x5428)

45.1419712s ago: executing program 36 (id=706):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c)

39.492627931s ago: executing program 37 (id=831):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, &(0x7f0000000680)}, 0x20)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54020000170001"], 0x254}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x13, 0x0, 0x0, 0x880}, 0x20040840)

38.791233493s ago: executing program 38 (id=836):
mkdir(&(0x7f0000000100)='./file0\x00', 0x60)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x8c)
openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x1a5800, 0x43)

37.949435139s ago: executing program 39 (id=843):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xc, 0x4)
write(r0, &(0x7f0000000200)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40, 0x0)

33.239351324s ago: executing program 4 (id=943):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x91, 0x55, 0xc1, 0x8, 0x12ef, 0x100, 0xe889, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x78, 0x7, 0x0, 0xcf, 0x9f, 0xd1, 0x2}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000180)=0x1d)

31.841210447s ago: executing program 40 (id=976):
r0 = syz_create_resource$futex(&(0x7f0000000480)=0x1)
r1 = syz_create_resource$futex(&(0x7f00000004c0))
futex(r0, 0xb, 0x1, 0x0, r1, 0x0)
futex(r0, 0x5, 0xfffffffe, 0x0, r0, 0x1000001)

31.373136255s ago: executing program 9 (id=981):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000006c0))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3)
ioctl$TIOCGSERIAL(r1, 0x541e, 0x0)

31.32720805s ago: executing program 9 (id=982):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
listen(r0, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

31.32701713s ago: executing program 9 (id=983):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@auto_da_alloc}]}, 0x3, 0x480, &(0x7f00000006c0)="$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")
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)

31.178637015s ago: executing program 9 (id=987):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xa00008, &(0x7f0000000180), 0x3, 0x7f4, &(0x7f0000000cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000014c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x0, &(0x7f0000001580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000001640), 0x80, 0x0)

31.171903127s ago: executing program 4 (id=997):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

30.337237742s ago: executing program 4 (id=990):
syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x0, 0xfffffffe, 0x36, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7800, 0x0, 0x63ed, 0xfffffffe}})

30.293586406s ago: executing program 4 (id=992):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300), 0xfe, 0x259, &(0x7f0000000580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0xd8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

30.149684111s ago: executing program 4 (id=998):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000940)=r1, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0)

30.146569912s ago: executing program 9 (id=999):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

29.813109176s ago: executing program 9 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd06, &(0x7f00000004c0)="0400000000000000000000003801000000000000000000000000000007000000000000000000000000000000000000006d70")

29.813034056s ago: executing program 41 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd06, &(0x7f00000004c0)="0400000000000000000000003801000000000000000000000000000007000000000000000000000000000000000000006d70")

29.586841409s ago: executing program 4 (id=1022):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d07, 0x0)

29.586775649s ago: executing program 42 (id=1022):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d07, 0x0)

16.759993248s ago: executing program 8 (id=1493):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33)
fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0)

16.715909642s ago: executing program 8 (id=1496):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001980), 0x4)

16.667804767s ago: executing program 8 (id=1497):
r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x102)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5d4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
write$UHID_INPUT(r1, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006)

16.604579824s ago: executing program 8 (id=1501):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000500)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='mountinfo\x00')
mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='huge=always'])
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)

16.421029692s ago: executing program 8 (id=1503):
syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000001cc0)='./file0\x00', 0x280440e, &(0x7f0000001d00)={[{@noquota}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@resgid}, {@noinit_itable}, {@norecovery}, {@nombcache}, {@nodioread_nolock}, {@errors_remount}, {@mblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001e00)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
syz_mount_image$vfat(&(0x7f0000001b80), &(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x850ce, 0x0, 0x1, 0x0, &(0x7f000000a000))
syz_mount_image$vfat(&(0x7f000000a040), &(0x7f000000a080)='./bus\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f000000a0c0))
rename(&(0x7f000000a100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000000a200)='./bus/file0\x00')

16.323276062s ago: executing program 8 (id=1504):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0xba)
mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/mapper/control\x00', 0x2, 0x82)
ioctl(r0, 0xc178fd08, &(0x7f0000000000)="04000000000000000100003801000001")

16.323213822s ago: executing program 43 (id=1504):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0xba)
mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/mapper/control\x00', 0x2, 0x82)
ioctl(r0, 0xc178fd08, &(0x7f0000000000)="04000000000000000100003801000001")

13.81748254s ago: executing program 1 (id=1562):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000100)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xe5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x12f}}], 0x2, 0x2000c040)

13.761837226s ago: executing program 1 (id=1565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0)

13.71812095s ago: executing program 1 (id=1568):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x80862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000)

13.673826665s ago: executing program 1 (id=1571):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000300)="$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")
mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x2000000, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x8100, 0x101)
getdents64(r0, 0x0, 0x0)

13.477880935s ago: executing program 1 (id=1581):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="f7", 0x7ffff000}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

13.279208865s ago: executing program 1 (id=1589):
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES16], 0x31)

13.277725186s ago: executing program 44 (id=1589):
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00')
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES16], 0x31)

5.303987775s ago: executing program 2 (id=1844):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0xc3b, 0x9, 0x0})

5.187554107s ago: executing program 2 (id=1849):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

5.186997807s ago: executing program 2 (id=1850):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x1000}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x3}, 0x4)

5.146159711s ago: executing program 2 (id=1852):
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000e40)='.\x00', &(0x7f0000000e80)='./file0\x00', 0x0, 0x21d000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000ec0)='./file0/file0\x00', &(0x7f0000000f00), 0x0, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x112)

5.0599978s ago: executing program 2 (id=1854):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000022c0)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0)
syz_clone3(&(0x7f00000023c0)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.899001617s ago: executing program 2 (id=1858):
mkdir(&(0x7f0000000340)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000400)='./trace/events/mac80211/enable\x00', 0x40000, 0x1)
readv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2)

4.898891807s ago: executing program 45 (id=1858):
mkdir(&(0x7f0000000340)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000400)='./trace/events/mac80211/enable\x00', 0x40000, 0x1)
readv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2)

4.063668593s ago: executing program 0 (id=1894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x84)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)

4.044001885s ago: executing program 0 (id=1896):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f00000004c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x103042, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0))

3.621696558s ago: executing program 0 (id=1914):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134)
read$FUSE(r0, 0x0, 0x0)

3.595530351s ago: executing program 0 (id=1916):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x37, 0x4, 0x4}}}}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00221800000005502a7fea2f8c198c0e2da10a2930"], 0x0}, 0x0)

2.928144429s ago: executing program 3 (id=1939):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TCSETS(r0, 0x545c, &(0x7f00000005c0)={0x4, 0x4000f118, 0x3ff, 0xfffffffc, 0x2, "430000000000000000008000"})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000640)=0x8001)

2.853047837s ago: executing program 3 (id=1940):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x2000844, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@nodots}, {@dots}, {@dots}, {@fat=@flush}]}, 0x1, 0x251, &(0x7f00000005c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.833258099s ago: executing program 3 (id=1941):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2.609920122s ago: executing program 7 (id=1946):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x290, 0x2b8, 0xb0000000, 0x0, 0x0, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x0, 0x400000}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x4, 0x9, 0x800, 'snmp\x00', 'syz0\x00', {0xe}}}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0xbf53864900e84eef, 0x0, 0xff000000, 0xffffffff], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)

2.599877343s ago: executing program 7 (id=1947):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x7, 0xab00, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @empty, @empty}}}})

2.541631789s ago: executing program 7 (id=1948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000060000006d05000002"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000540), 0x0}, 0x20)

2.541469169s ago: executing program 7 (id=1949):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc)

2.541370109s ago: executing program 7 (id=1950):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, &(0x7f0000000440)=""/244, 0xf4}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x13, r0, 0x3000)
close(r1)

1.991030586s ago: executing program 3 (id=1951):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
pwritev2(r0, 0x0, 0x0, 0xfff, 0xffff977b, 0xf)

1.990499046s ago: executing program 7 (id=1961):
r0 = syz_usb_connect(0x2, 0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010002090000403412785600010102000109021900010100e00009040000010900000007058103"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xfffffffffffffef9, 0x29, 0x9, 0x10, 0xf4, 0x3c, "07d125e8", "7b8df6b8"}}, 0x0}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0xffff, 0x7fffffff, 0x4, 0xffffffff}, 0x10)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.980041117s ago: executing program 3 (id=1952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0x40000108, 0x0, 0x1000000}]})

1.959680559s ago: executing program 3 (id=1953):
r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e24050100a000780000c0e00000c0e000009600001516050001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000002c0)={0x20, 0x14, 0x48, "0268aef5656d4d6933f7d79a205c26fb085e201f70691199e686d0ff7401ebf3fd9a59b00b8beca558bedd3e80200b17b943e395129ae6cd041712a54160899b79139ecbf5c41bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.627277173s ago: executing program 0 (id=1954):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x140, 0xd4, 0x24, 0xc0, 0x8, 0x13b1, 0x18, 0x2427, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x81, 0x4, 0x10, 0x8, "", [{{0x9, 0x4, 0x5a, 0x4, 0x0, 0x90, 0xe0, 0x7f, 0x3}}, {{0x9, 0x4, 0x9a, 0x3d, 0x2, 0x76, 0xf, 0xe9, 0x1, [], [{{0x9, 0x5, 0x3, 0x3, 0x200, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xb, 0x0, 0x1}}]}}]}}]}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

1.048238362s ago: executing program 6 (id=1958):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200002, 0x200003, 0x4000801, 0x4, 0x4})
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)

1.039904353s ago: executing program 6 (id=1959):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002400), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0)

970.912901ms ago: executing program 6 (id=1962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000580)='autg', 0x4)

948.859883ms ago: executing program 6 (id=1963):
r0 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x200000000000, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$midi(0x6, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5d, 0xe0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000b40)=0x200018)

470.280892ms ago: executing program 5 (id=1979):
r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)

462.768603ms ago: executing program 5 (id=1980):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./trace\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000580)='./trace\x00', 0x0, 0x200020, &(0x7f0000004dc0)=ANY=[@ANYBLOB=',gid=', @ANYRESHEX=r0])

437.720275ms ago: executing program 5 (id=1981):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'pim6reg\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)

233.753936ms ago: executing program 5 (id=1982):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x10, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, &(0x7f0000000840), &(0x7f0000000880)=""/234}, 0x20)

230.621627ms ago: executing program 6 (id=1983):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4020, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0)
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x20001, 0x0, 0x0, @by_dev={r1}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 histogram:10,100,1000'}}})

217.005838ms ago: executing program 5 (id=1984):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x6f41bcbb, @empty, 0x2}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000580)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)

208.546869ms ago: executing program 6 (id=1985):
mkdir(&(0x7f0000000780)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='dir0\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0)
read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020)

204.228039ms ago: executing program 5 (id=1986):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000011480)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000050000000200000006"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xbf93, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000380)="58346d78beb33531efc68838229515ef411e27ea033cecb36cc1f67538fbbc86872756197ac12ab78fe079120e96d00247a507c1a11a61497c970664a48f9a79f55142edfae4a1b9490609d991865630a9fc055544e822cb786851438e764e5e7eb165f99365", 0x0}, 0x20)

0s ago: executing program 0 (id=1987):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00')

kernel console output (not intermixed with test programs):

ndpoint descriptor, different from the interface descriptor's value: 2
[   54.501321][   T20] usb 2-1: config 0 interface 0 has no altsetting 0
[   54.508207][   T20] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[   54.517875][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.526761][   T20] usb 2-1: config 0 descriptor??
[   54.616054][ T2660] input: syz0 as /devices/virtual/input/input13
[   54.715790][  T992] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   54.936673][ T2665] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0)
[   54.946205][ T2665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   54.955012][ T2665] F2FS-fs (loop5): invalid crc value
[   54.962063][ T2665] F2FS-fs (loop5): Found nat_bits in checkpoint
[   54.975799][  T992] usb 10-1: Using ep0 maxpacket: 32
[   54.989348][ T2665] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   54.996583][ T2665] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   55.007610][   T20] input: HID 045e:00f9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:00F9.0006/input/input14
[   55.030843][   T20] microsoft 0003:045E:00F9.0006: input,hidraw0: USB HID v80.00 Joystick [HID 045e:00f9] on usb-dummy_hcd.1-1/input0
[   55.033249][ T2665] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[   55.105845][  T992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.117161][  T992] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   55.130437][  T992] usb 10-1: config 0 interface 0 has no altsetting 0
[   55.137707][  T992] usb 10-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[   55.146989][  T992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.156138][  T992] usb 10-1: config 0 descriptor??
[   55.215096][   T20] usb 2-1: USB disconnect, device number 3
[   55.875912][  T992] sony 0003:054C:042F.0007: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[   55.892355][ T2708] FAT-fs (loop1): Directory bread(block 1048) failed
[   55.899725][ T2708] FAT-fs (loop1): Directory bread(block 1049) failed
[   55.906828][ T2708] FAT-fs (loop1): Directory bread(block 1050) failed
[   55.908076][  T992] sony 0003:054C:042F.0007: hiddev96,hidraw0: USB HID v0.07 Device [HID 054c:042f] on usb-dummy_hcd.9-1/input0
[   55.913834][ T2708] FAT-fs (loop1): Directory bread(block 1051) failed
[   55.925914][  T992] sony 0003:054C:042F.0007: failed to claim input
[   55.932569][ T2708] FAT-fs (loop1): Directory bread(block 1052) failed
[   55.946016][ T2708] FAT-fs (loop1): Directory bread(block 1053) failed
[   55.951819][  T992] usb 10-1: USB disconnect, device number 4
[   55.952719][ T2708] FAT-fs (loop1): Directory bread(block 1054) failed
[   55.975831][ T2708] FAT-fs (loop1): Directory bread(block 1055) failed
[   55.991624][ T2710] fido_id[2710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[   56.012451][ T2708] FAT-fs (loop1): Directory bread(block 1048) failed
[   56.019337][ T2708] FAT-fs (loop1): Directory bread(block 1049) failed
[   56.336933][ T2725] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,
[   56.346917][ T2725] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.385205][ T2431] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   56.406393][ T2431] EXT4-fs (loop0): Remounting filesystem read-only
[   56.427270][  T192] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.746039][ T2716] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   56.758243][ T2716] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   56.767484][ T2716] F2FS-fs (loop1): invalid crc value
[   56.789181][ T2716] F2FS-fs (loop1): Found nat_bits in checkpoint
[   56.833343][ T2764] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   56.851738][ T2716] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   56.863156][ T2764] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.952: bg 0: block 336: padding at end of block bitmap is not set
[   56.870051][ T2716] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   56.882851][ T2764] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
[   56.903038][ T2764] ------------[ cut here ]------------
[   56.910532][ T2778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   56.923947][ T2764] WARNING: CPU: 1 PID: 2764 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0
[   56.933696][ T2764] Modules linked in:
[   56.937977][ T2764] CPU: 1 PID: 2764 Comm: syz.0.952 Tainted: G        W         syzkaller #0
[   56.946878][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   56.946944][ T2778] EXT4-fs (loop5): 1 truncate cleaned up
[   56.957085][ T2764] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0
[   56.971400][ T2778] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue
[   56.989928][ T2764] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 b1 09 a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7b 6e ff <0f> 0b e9 2a ff ff ff e8 ad 7b 6e ff 0f 0b 43 80 7c 35 00 00 0f 85
[   57.018855][ T2764] RSP: 0018:ffffc90002647bf0 EFLAGS: 00010283
[   57.025157][ T2764] RAX: ffffffff81f63b07 RBX: 0000000000000000 RCX: 0000000000080000
[   57.033256][ T2764] RDX: ffffc90003943000 RSI: 0000000000002507 RDI: 0000000000002508
[   57.050775][ T2764] RBP: ffffc90002647c30 R08: ffff888131880467 R09: 1ffff1102631008c
[   57.065804][ T2454] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   57.080986][ T2764] R10: dffffc0000000000 R11: ffffed102631008d R12: ffff8881318803c0
[   57.099740][ T2764] R13: 1ffff11022073fc0 R14: dffffc0000000000 R15: ffff88811039fe00
[   57.124814][ T2764] FS:  00007f47426586c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   57.136295][ T2764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.143123][ T2764] CR2: 0000001b2fd1fff8 CR3: 0000000117b1d000 CR4: 00000000003506b0
[   57.151517][ T2764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.159548][ T2764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.167564][ T2764] Call Trace:
[   57.170873][ T2764]  ovl_do_remove+0x6f3/0xc50
[   57.175473][ T2764]  ? may_create+0x7c0/0x7c0
[   57.180021][ T2764]  ? ovl_set_redirect+0x620/0x620
[   57.185060][ T2764]  ? down_write+0xb2/0x120
[   57.189527][ T2764]  ? selinux_inode_rmdir+0x22/0x30
[   57.195324][ T2764]  ovl_rmdir+0x1a/0x20
[   57.199617][ T2764]  vfs_rmdir+0x1ab/0x3c0
[   57.203884][ T2764]  incfs_kill_sb+0xf7/0x200
[   57.208720][ T2764]  deactivate_locked_super+0xa0/0x100
[   57.221193][ T2764]  deactivate_super+0xaf/0xe0
[   57.228792][ T2764]  cleanup_mnt+0x44f/0x500
[   57.233295][ T2764]  __cleanup_mnt+0x19/0x20
[   57.238041][ T2764]  task_work_run+0x127/0x190
[   57.248174][ T2764]  exit_to_user_mode_loop+0xcb/0xe0
[   57.254157][ T2764]  exit_to_user_mode_prepare+0x76/0xa0
[   57.260851][ T2764]  syscall_exit_to_user_mode+0x1d/0x40
[   57.276041][ T2764]  do_syscall_64+0x3d/0x40
[   57.280576][ T2764]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   57.292600][ T2764] RIP: 0033:0x7f4743c00b19
[   57.297855][ T2764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.320907][ T2764] RSP: 002b:00007f4742658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   57.335775][ T2454] usb 5-1: Using ep0 maxpacket: 8
[   57.336329][ T2764] RAX: ffffffffffffffec RBX: 00007f4743e86fa0 RCX: 00007f4743c00b19
[   57.365807][ T2764] RDX: 0000200000001640 RSI: 0000200000000000 RDI: 0000200000000040
[   57.376357][ T2764] RBP: 00007f4743c98b70 R08: 0000000000000000 R09: 0000000000000000
[   57.384364][ T2764] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[   57.393192][ T2764] R13: 00007f4743e87038 R14: 00007f4743e86fa0 R15: 00007ffd5b8fa398
[   57.402179][ T2764] ---[ end trace abb898edc2c6581d ]---
[   57.408310][ T2764] ------------[ cut here ]------------
[   57.413987][ T2764] WARNING: CPU: 0 PID: 2764 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0
[   57.423952][ T2764] Modules linked in:
[   57.428262][ T2764] CPU: 0 PID: 2764 Comm: syz.0.952 Tainted: G        W         syzkaller #0
[   57.437191][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   57.447583][ T2764] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0
[   57.454440][ T2764] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 b1 09 a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7b 6e ff <0f> 0b e9 2a ff ff ff e8 ad 7b 6e ff 0f 0b 43 80 7c 35 00 00 0f 85
[   57.476867][ T2454] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[   57.484465][ T2764] RSP: 0018:ffffc90002647bf0 EFLAGS: 00010283
[   57.492772][ T2454] usb 5-1: config 0 has no interface number 0
[   57.503114][ T2764] RAX: ffffffff81f63b07 RBX: 0000000000000000 RCX: 0000000000080000
[   57.503561][ T2454] usb 5-1: config 0 interface 120 has no altsetting 0
[   57.515404][ T2764] RDX: ffffc90003943000 RSI: 00000000000727d8 RDI: 00000000000727d9
[   57.526959][ T2764] RBP: ffffc90002647c30 R08: ffff888131880467 R09: 1ffff1102631008c
[   57.535047][ T2764] R10: dffffc0000000000 R11: ffffed102631008d R12: ffff8881318803c0
[   57.543624][ T2764] R13: 1ffff11022073fc0 R14: dffffc0000000000 R15: ffff88811039fe00
[   57.551865][ T2764] FS:  00007f47426586c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   57.561259][ T2764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.567933][ T2764] CR2: 00007fbd87109c80 CR3: 0000000117b1d000 CR4: 00000000003506b0
[   57.576028][ T2764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.584005][ T2764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.592384][ T2764] Call Trace:
[   57.595726][ T2764]  ovl_do_remove+0x6f3/0xc50
[   57.600554][ T2764]  ? may_create+0x7c0/0x7c0
[   57.605082][ T2764]  ? ovl_set_redirect+0x620/0x620
[   57.610454][ T2764]  ? down_write+0xb2/0x120
[   57.614922][ T2764]  ? selinux_inode_rmdir+0x22/0x30
[   57.620652][ T2764]  ovl_rmdir+0x1a/0x20
[   57.624744][ T2764]  vfs_rmdir+0x1ab/0x3c0
[   57.629212][ T2764]  incfs_kill_sb+0x181/0x200
[   57.633906][ T2764]  deactivate_locked_super+0xa0/0x100
[   57.639346][ T2764]  deactivate_super+0xaf/0xe0
[   57.644028][ T2764]  cleanup_mnt+0x44f/0x500
[   57.648555][ T2764]  __cleanup_mnt+0x19/0x20
[   57.652983][ T2764]  task_work_run+0x127/0x190
[   57.657608][ T2764]  exit_to_user_mode_loop+0xcb/0xe0
[   57.662827][ T2764]  exit_to_user_mode_prepare+0x76/0xa0
[   57.668342][ T2764]  syscall_exit_to_user_mode+0x1d/0x40
[   57.673809][ T2764]  do_syscall_64+0x3d/0x40
[   57.678257][ T2764]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   57.684156][ T2764] RIP: 0033:0x7f4743c00b19
[   57.685840][ T2454] usb 5-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=e8.89
[   57.688603][ T2764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.698021][ T2454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.718497][ T2764] RSP: 002b:00007f4742658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   57.725811][ T2454] usb 5-1: Product: syz
[   57.734084][ T2764] RAX: ffffffffffffffec RBX: 00007f4743e86fa0 RCX: 00007f4743c00b19
[   57.738396][ T2454] usb 5-1: Manufacturer: syz
[   57.746260][ T2764] RDX: 0000200000001640 RSI: 0000200000000000 RDI: 0000200000000040
[   57.751005][ T2454] usb 5-1: SerialNumber: syz
[   57.758819][ T2764] RBP: 00007f4743c98b70 R08: 0000000000000000 R09: 0000000000000000
[   57.767936][ T2454] usb 5-1: config 0 descriptor??
[   57.771423][ T2764] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[   57.784612][ T2764] R13: 00007f4743e87038 R14: 00007f4743e86fa0 R15: 00007ffd5b8fa398
[   57.792657][  T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   57.793524][ T2764] ---[ end trace abb898edc2c6581e ]---
[   57.800144][  T992] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   57.819243][ T2431] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15
[   57.831675][ T2431] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 3043, max 0(0), depth 0(0)
[   57.849859][ T2431] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 3043, max 0(0), depth 0(0)
[   57.975155][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.982472][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.990066][ T2831] device bridge_slave_0 entered promiscuous mode
[   57.998403][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.005452][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.012876][ T2831] device bridge_slave_1 entered promiscuous mode
[   58.035855][  T992] usb 6-1: Using ep0 maxpacket: 32
[   58.052880][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.060145][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.067414][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.074443][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.086389][ T2454] usb 5-1: USB disconnect, device number 7
[   58.099638][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.107550][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.114740][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.126509][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.134876][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.141958][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.154263][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.162652][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.169684][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.177223][  T318] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   58.188392][  T992] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30
[   58.192159][ T2831] device veth0_vlan entered promiscuous mode
[   58.205504][  T992] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.216459][  T318] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.229279][  T992] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146
[   58.242262][  T318] usb 2-1: config 0 interface 0 has no altsetting 0
[   58.249051][  T318] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[   58.258607][  T992] usb 6-1: config 0 interface 0 has no altsetting 0
[   58.258882][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.265217][  T992] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   58.265234][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.274506][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.282518][  T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.307172][  T992] usb 6-1: config 0 descriptor??
[   58.307700][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.312327][  T318] usb 2-1: config 0 descriptor??
[   58.326572][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.334111][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.343058][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.360846][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.370275][ T2831] device veth1_macvtap entered promiscuous mode
[   58.381360][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.396090][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.447373][ T2844] EXT4-fs error (device loop9): ext4_iget_extra_inode:4692: inode #15: comm syz.9.983: corrupted in-inode xattr
[   58.469571][ T2844] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.983: couldn't read orphan inode 15 (err -117)
[   58.482398][ T2844] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,norecovery,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,auto_da_alloc,,errors=continue
[   58.516747][ T2844] EXT4-fs error (device loop9): ext4_find_dest_de:2079: inode #12: block 253: comm syz.9.983: bad entry in directory: inode out of bounds - offset=12, inode=589826, rec_len=12, size=1024 fake=1
[   58.570997][  T192] device bridge_slave_1 left promiscuous mode
[   58.577324][  T192] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.584840][  T192] device bridge_slave_0 left promiscuous mode
[   58.591570][  T192] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.617633][  T192] device veth1_macvtap left promiscuous mode
[   58.623736][  T192] device veth0_vlan left promiscuous mode
[   58.630418][ T2861] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[   58.648015][ T2861] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.987: bg 0: block 336: padding at end of block bitmap is not set
[   58.682975][ T2861] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
[   58.704606][ T2868] ------------[ cut here ]------------
[   58.715825][ T2868] WARNING: CPU: 1 PID: 2868 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0
[   58.735392][ T2868] Modules linked in:
[   58.739730][ T2868] CPU: 1 PID: 2868 Comm: syz.9.987 Tainted: G        W         syzkaller #0
[   58.756822][ T2868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   58.768211][ T2868] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0
[   58.773928][ T2868] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 b1 09 a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7b 6e ff <0f> 0b e9 2a ff ff ff e8 ad 7b 6e ff 0f 0b 43 80 7c 35 00 00 0f 85
[   58.795844][ T2868] RSP: 0018:ffffc90000f37bf0 EFLAGS: 00010287
[   58.798108][  T318] itetech 0003:06CB:2968.0008: ignoring exceeding usage max
[   58.802093][ T2868] RAX: ffffffff81f63b07 RBX: 0000000000000000 RCX: 0000000000080000
[   58.810512][  T992] hid-multitouch 0003:1FD2:6007.0009: No inputs registered, leaving
[   58.826633][ T2865] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   58.831285][  T318] itetech 0003:06CB:2968.0008: No inputs registered, leaving
[   58.833552][ T2865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   58.841691][ T2868] RDX: ffffc9000754f000 RSI: 000000000000232a RDI: 000000000000232b
[   58.857673][  T318] itetech 0003:06CB:2968.0008: hidraw0: USB HID v0.06 Joystick [HID 06cb:2968] on usb-dummy_hcd.1-1/input0
[   58.869750][  T992] hid-multitouch 0003:1FD2:6007.0009: hiddev96,hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[   58.875951][ T2868] RBP: ffffc90000f37c30 R08: ffff88812cf9b387 R09: 1ffff110259f3670
[   58.904426][ T2868] R10: dffffc0000000000 R11: ffffed10259f3671 R12: ffff88812cf9b2e0
[   58.913526][ T2868] R13: 1ffff11021a6a028 R14: dffffc0000000000 R15: ffff88810d350140
[   58.930031][ T2868] FS:  00007fa9996666c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   58.930758][ T2865] F2FS-fs (loop4): Found nat_bits in checkpoint
[   58.947683][ T2868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.961907][ T2868] CR2: 000055b167647300 CR3: 0000000129130000 CR4: 00000000003506a0
[   58.970221][ T2868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   58.979704][ T2868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.987955][ T2868] Call Trace:
[   58.991293][ T2868]  ovl_do_remove+0x6f3/0xc50
[   58.996086][ T2868]  ? may_create+0x7c0/0x7c0
[   59.000716][ T2868]  ? ovl_set_redirect+0x620/0x620
[   59.005851][ T2868]  ? down_write+0xb2/0x120
[   59.010331][ T2868]  ? selinux_inode_rmdir+0x22/0x30
[   59.015578][ T2868]  ovl_rmdir+0x1a/0x20
[   59.020843][ T2868]  vfs_rmdir+0x1ab/0x3c0
[   59.031462][ T2868]  incfs_kill_sb+0xf7/0x200
[   59.036498][ T2868]  deactivate_locked_super+0xa0/0x100
[   59.041935][ T2868]  deactivate_super+0xaf/0xe0
[   59.047227][ T2868]  cleanup_mnt+0x44f/0x500
[   59.051789][ T2868]  __cleanup_mnt+0x19/0x20
[   59.056963][ T2868]  task_work_run+0x127/0x190
[   59.061706][ T2868]  exit_to_user_mode_loop+0xcb/0xe0
[   59.067543][ T2865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   59.067558][ T2868]  exit_to_user_mode_prepare+0x76/0xa0
[   59.067578][ T2868]  syscall_exit_to_user_mode+0x1d/0x40
[   59.076881][ T2865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   59.080467][ T2868]  do_syscall_64+0x3d/0x40
[   59.094473][ T2454] usb 2-1: USB disconnect, device number 4
[   59.105796][ T2868]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   59.111896][ T2868] RIP: 0033:0x7fa99ac2fb19
[   59.117127][ T2868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.137397][ T2360] attempt to access beyond end of device
[   59.137397][ T2360] loop4: rw=2049, want=45104, limit=40427
[   59.137605][ T2868] RSP: 002b:00007fa999666028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   59.157105][ T2868] RAX: ffffffffffffffec RBX: 00007fa99aeb6090 RCX: 00007fa99ac2fb19
[   59.165184][ T2868] RDX: 0000200000001640 RSI: 0000200000000000 RDI: 0000200000000040
[   59.173210][ T2868] RBP: 00007fa99acc7b70 R08: 0000000000000000 R09: 0000000000000000
[   59.177516][ T2455] usb 6-1: USB disconnect, device number 4
[   59.181256][ T2868] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[   59.195051][ T2868] R13: 00007fa99aeb6128 R14: 00007fa99aeb6090 R15: 00007ffd812b1998
[   59.203211][ T2868] ---[ end trace abb898edc2c6581f ]---
[   59.208997][ T2868] ------------[ cut here ]------------
[   59.214491][ T2868] WARNING: CPU: 0 PID: 2868 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e7/0x3f0
[   59.224195][ T2868] Modules linked in:
[   59.228140][ T2868] CPU: 0 PID: 2868 Comm: syz.9.987 Tainted: G        W         syzkaller #0
[   59.236881][ T2868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   59.246967][ T2868] RIP: 0010:ovl_dir_modified+0x2e7/0x3f0
[   59.252711][ T2868] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 b1 09 a9 ff 49 ff 04 24 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7b 6e ff <0f> 0b e9 2a ff ff ff e8 ad 7b 6e ff 0f 0b 43 80 7c 35 00 00 0f 85
[   59.272356][ T2868] RSP: 0018:ffffc90000f37bf0 EFLAGS: 00010246
[   59.278485][ T2868] RAX: ffffffff81f63b07 RBX: 0000000000000000 RCX: 0000000000080000
[   59.286564][ T2868] RDX: ffffc9000754f000 RSI: 000000000007ffff RDI: 0000000000080000
[   59.294539][ T2868] RBP: ffffc90000f37c30 R08: ffff88812cf9b387 R09: 1ffff110259f3670
[   59.302698][ T2868] R10: dffffc0000000000 R11: ffffed10259f3671 R12: ffff88812cf9b2e0
[   59.310703][ T2868] R13: 1ffff11021a6a028 R14: dffffc0000000000 R15: ffff88810d350140
[   59.318702][ T2868] FS:  00007fa9996666c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   59.327654][ T2868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.334244][ T2868] CR2: 0000200000c26000 CR3: 0000000129130000 CR4: 00000000003506b0
[   59.342243][ T2868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.350247][ T2868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   59.358377][ T2868] Call Trace:
[   59.361712][ T2868]  ovl_do_remove+0x6f3/0xc50
[   59.366517][ T2868]  ? may_create+0x7c0/0x7c0
[   59.371105][ T2868]  ? ovl_set_redirect+0x620/0x620
[   59.386607][ T2868]  ? down_write+0xb2/0x120
[   59.391088][ T2868]  ? selinux_inode_rmdir+0x22/0x30
[   59.406111][ T2868]  ovl_rmdir+0x1a/0x20
[   59.410239][ T2868]  vfs_rmdir+0x1ab/0x3c0
[   59.414500][ T2868]  incfs_kill_sb+0x181/0x200
[   59.430371][ T2868]  deactivate_locked_super+0xa0/0x100
[   59.445073][ T2868]  deactivate_super+0xaf/0xe0
[   59.459416][ T2868]  cleanup_mnt+0x44f/0x500
[   59.463986][ T2868]  __cleanup_mnt+0x19/0x20
[   59.468907][ T2868]  task_work_run+0x127/0x190
[   59.474082][ T2868]  exit_to_user_mode_loop+0xcb/0xe0
[   59.486889][ T2868]  exit_to_user_mode_prepare+0x76/0xa0
[   59.492406][ T2868]  syscall_exit_to_user_mode+0x1d/0x40
[   59.498005][ T2868]  do_syscall_64+0x3d/0x40
[   59.502440][ T2868]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   59.508371][ T2868] RIP: 0033:0x7fa99ac2fb19
[   59.512817][ T2868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.532560][ T2868] RSP: 002b:00007fa999666028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   59.536404][ T2901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   59.541556][ T2868] RAX: ffffffffffffffec RBX: 00007fa99aeb6090 RCX: 00007fa99ac2fb19
[   59.555061][ T2901] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.559566][ T2868] RDX: 0000200000001640 RSI: 0000200000000000 RDI: 0000200000000040
[   59.576578][ T2868] RBP: 00007fa99acc7b70 R08: 0000000000000000 R09: 0000000000000000
[   59.584576][ T2868] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000
[   59.592971][ T2868] R13: 00007fa99aeb6128 R14: 00007fa99aeb6090 R15: 00007ffd812b1998
[   59.602448][ T2868] ---[ end trace abb898edc2c65820 ]---
[   59.621061][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 1024
[   59.644200][ T2092] EXT4-fs error (device loop9): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15
[   59.656305][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 8192
[   59.671545][ T2092] EXT4-fs error (device loop9): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 3043, max 0(0), depth 0(0)
[   59.689822][ T2360] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   59.708576][ T2092] EXT4-fs error (device loop9): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 3043, max 0(0), depth 0(0)
[   59.726877][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 1024
[   59.755840][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 8192
[   59.776179][ T2360] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   59.807235][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 1024
[   59.827855][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 8192
[   59.851709][ T2360] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   59.865540][ T2360] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /40/file1/lost+found: directory fails checksum at offset 1024
[   59.875521][   T24] kauditd_printk_skb: 20 callbacks suppressed
[   59.875533][   T24] audit: type=1400 audit(1793804899.290:420): avc:  denied  { read write } for  pid=2931 comm="syz.5.1011" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   59.943253][   T24] audit: type=1400 audit(1793804899.310:421): avc:  denied  { open } for  pid=2931 comm="syz.5.1011" path="/24/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   59.967831][   T24] audit: type=1400 audit(1793804899.310:422): avc:  denied  { ioctl } for  pid=2931 comm="syz.5.1011" path="/24/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   59.976979][ T2934] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   60.030552][ T2934] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   60.113550][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.117159][  T530] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   60.120906][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.137338][ T2942] device bridge_slave_0 entered promiscuous mode
[   60.146827][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.157816][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.165334][ T2942] device bridge_slave_1 entered promiscuous mode
[   60.214670][ T2960] device-mapper: table: 253:5: striped: Target length not divisible by chunk size
[   60.249278][ T2960] device-mapper: ioctl: error adding target to table
[   60.301361][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.308468][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.316770][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.324056][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.398829][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.409605][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.419115][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.426976][   T24] audit: type=1326 audit(1793804899.850:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.452244][   T24] audit: type=1326 audit(1793804899.850:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.479745][   T24] audit: type=1326 audit(1793804899.850:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.504691][   T24] audit: type=1326 audit(1793804899.850:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.530169][   T24] audit: type=1326 audit(1793804899.850:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.559837][   T24] audit: type=1326 audit(1793804899.850:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.584828][   T24] audit: type=1326 audit(1793804899.850:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2983 comm="syz.3.1034" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae10eb19 code=0x7ffc0000
[   60.592694][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.617255][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.624992][ T2966] device bridge_slave_0 entered promiscuous mode
[   60.633028][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.646179][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.653254][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.661679][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.669984][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.677082][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.695426][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.703205][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.710394][ T2454] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   60.719418][ T2966] device bridge_slave_1 entered promiscuous mode
[   60.728702][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.737152][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.745183][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.762249][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.770478][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.778172][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.796273][ T2942] device veth0_vlan entered promiscuous mode
[   60.802947][  T192] device bridge_slave_1 left promiscuous mode
[   60.809620][  T192] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.817810][  T192] device bridge_slave_0 left promiscuous mode
[   60.823978][  T192] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.832000][  T192] device veth1_macvtap left promiscuous mode
[   60.838141][  T192] device veth0_vlan left promiscuous mode
[   60.889447][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.905091][ T2942] device veth1_macvtap entered promiscuous mode
[   60.919473][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.928137][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.937885][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.946584][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.969844][ T3008] FAT-fs (loop1): Directory bread(block 1285) failed
[   60.981930][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.986351][ T3008] FAT-fs (loop1): Directory bread(block 1286) failed
[   60.989904][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.003470][ T3008] FAT-fs (loop1): Directory bread(block 1287) failed
[   61.010771][ T3008] FAT-fs (loop1): Directory bread(block 1288) failed
[   61.021618][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.030003][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.031582][ T3008] FAT-fs (loop1): Directory bread(block 1285) failed
[   61.038251][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.051857][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.068477][ T3008] FAT-fs (loop1): Directory bread(block 1286) failed
[   61.075312][ T3008] FAT-fs (loop1): Directory bread(block 1287) failed
[   61.075371][ T3011] tipc: Started in network mode
[   61.082103][ T3008] FAT-fs (loop1): Directory bread(block 1288) failed
[   61.087344][ T2454] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   61.093769][ T3008] FAT-fs (loop1): Directory bread(block 1285) failed
[   61.107469][ T3011] tipc: Own node identity ac14140f, cluster identity 4711
[   61.120694][ T3008] FAT-fs (loop1): Directory bread(block 1286) failed
[   61.121148][ T3011] tipc: New replicast peer: 255.255.255.255
[   61.134815][ T3011] tipc: Enabled bearer <udp:syz2>, priority 10
[   61.141391][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.149233][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.157776][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.165987][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.173023][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.180682][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.196884][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.205496][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.213696][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.225147][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.233620][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.242171][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1014'.
[   61.255821][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.266338][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.275443][ T2966] device veth0_vlan entered promiscuous mode
[   61.281825][ T2454] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   61.287776][ T2966] device veth1_macvtap entered promiscuous mode
[   61.292069][ T2454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.306071][ T2454] usb 6-1: Product: syz
[   61.310321][ T2454] usb 6-1: Manufacturer: syz
[   61.314997][ T2454] usb 6-1: SerialNumber: syz
[   61.320553][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.329048][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.337861][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.346047][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.354487][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.363396][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.371978][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.986563][  T192] device bridge_slave_1 left promiscuous mode
[   61.992712][  T192] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.000451][  T192] device bridge_slave_0 left promiscuous mode
[   62.006718][  T192] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.014415][  T192] device veth1_macvtap left promiscuous mode
[   62.020722][  T192] device veth0_vlan left promiscuous mode
[   62.034108][ T3022] F2FS-fs (loop7): invalid crc value
[   62.074782][ T3022] F2FS-fs (loop7): Found nat_bits in checkpoint
[   62.116278][ T2454] rtl8150 6-1:1.0: couldn't find required endpoints
[   62.124367][ T2454] rtl8150: probe of 6-1:1.0 failed with error -5
[   62.134390][ T3055] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   62.179084][ T2454] usb 6-1: USB disconnect, device number 5
[   62.195388][ T3022] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   62.245811][   T25] tipc: 32-bit node address hash set to f1414ac
[   62.379271][ T3104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   62.426906][ T3104] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1080: bad orphan inode 13
[   62.440876][ T3104] ext4_test_bit(bit=12, block=18) = 1
[   62.447753][ T3104] is_bad_inode(inode)=0
[   62.451980][ T3104] NEXT_ORPHAN(inode)=0
[   62.456547][ T3104] max_ino=32
[   62.459758][ T3104] i_nlink=1
[   62.463125][ T3104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   62.526266][ T3104] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   62.545250][ T3104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1080: bg 0: block 248: padding at end of block bitmap is not set
[   62.556986][ T3120] tipc: Started in network mode
[   62.565792][ T3120] tipc: Own node identity ac14140f, cluster identity 4711
[   62.577070][ T3104] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.1080: Failed to acquire dquot type 1
[   62.596162][ T3120] tipc: New replicast peer: 255.255.255.255
[   62.608261][ T3120] tipc: Enabled bearer <udp:syz2>, priority 10
[   62.636698][ T3121] tipc: MTU too low for tipc bearer
[   62.719277][ T3123] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[   62.807417][ T3137] sch_fq: defrate 0 ignored.
[   62.903280][ T3146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1098'.
[   62.939612][ T3139] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   62.963924][ T3139] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue
[   62.995880][   T55] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   63.022466][ T3164] device-mapper: ioctl: Invalid geometry supplied.
[   63.057587][ T3159] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,abort,init_itable,,errors=continue
[   63.068861][ T3159] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.098094][ T3159] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   63.102085][ T3173] caif0: tun_chr_ioctl cmd 1074025673
[   63.169025][ T3175] overlayfs: statfs failed on './file0'
[   63.227098][ T3185] erofs: (device loop5): mounted with root inode @ nid 36.
[   63.395823][   T55] usb 9-1: unable to get BOS descriptor or descriptor too short
[   63.419062][ T3219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   63.437295][ T3219] System zones: 1-12
[   63.441750][ T3219] EXT4-fs error (device loop1): dx_probe:796: inode #2: comm syz.1.1128: Directory hole found for htree index block 0
[   63.465868][ T3219] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[   63.484395][ T3219] EXT4-fs error (device loop1): dx_probe:796: inode #2: comm syz.1.1128: Directory hole found for htree index block 0
[   63.499895][   T55] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.507043][ T3219] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   63.518624][   T55] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[   63.519607][ T3219] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jauto_da_alloc,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue
[   63.561732][ T3219] EXT4-fs (loop1): shut down requested (2)
[   63.705959][   T55] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   63.722369][   T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.732186][   T55] usb 9-1: Product: syz
[   63.739322][   T55] usb 9-1: Manufacturer: syz
[   63.746056][  T299] tipc: 32-bit node address hash set to f1414ac
[   63.749566][   T55] usb 9-1: SerialNumber: syz
[   63.765861][ T3266] MTRR 1 not used
[   63.974470][ T3301] MTRR 1 not used
[   64.105055][ T3291] F2FS-fs (loop5): invalid crc value
[   64.119621][ T3291] F2FS-fs (loop5): Found nat_bits in checkpoint
[   64.152361][ T3291] F2FS-fs (loop5): Start checkpoint disabled!
[   64.159368][ T3316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   64.174114][ T3291] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   64.375904][   T55] usb 9-1: cannot find UAC_HEADER
[   64.381077][   T55] snd-usb-audio: probe of 9-1:1.0 failed with error -22
[   64.394650][   T55] usb 9-1: USB disconnect, device number 4
[   64.549091][ T3366] overlayfs: statfs failed on './file0'
[   64.573778][ T3369] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[   64.582913][ T3369] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.636194][ T3380] VFS: file-max limit 0 reached
[   64.735972][  T402] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   64.750795][ T3393] netlink: 'syz.7.1202': attribute type 3 has an invalid length.
[   64.758964][ T3393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1202'.
[   64.900132][   T24] kauditd_printk_skb: 21 callbacks suppressed
[   64.900153][   T24] audit: type=1400 audit(1793805160.321:449): avc:  denied  { bind } for  pid=3406 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.970656][   T24] audit: type=1400 audit(1793805160.321:450): avc:  denied  { node_bind } for  pid=3406 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   65.145972][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.158312][ T3378] F2FS-fs (loop5): invalid crc value
[   65.159154][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.173589][  T402] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.186590][  T402] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   65.193605][ T3378] F2FS-fs (loop5): Found nat_bits in checkpoint
[   65.195635][  T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.196506][  T402] usb 2-1: config 0 descriptor??
[   65.222829][ T3378] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[   65.229869][ T3378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   65.285820][   T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   65.545769][   T55] usb 4-1: Using ep0 maxpacket: 32
[   65.665880][   T55] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30
[   65.670568][ T3430] F2FS-fs (loop7): invalid crc value
[   65.677042][   T55] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.693209][   T55] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146
[   65.707371][  T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xe
[   65.710318][ T3430] F2FS-fs (loop7): Found nat_bits in checkpoint
[   65.714813][  T402] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description
[   65.730954][   T55] usb 4-1: config 0 interface 0 has no altsetting 0
[   65.737718][   T55] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   65.743130][ T3430] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2
[   65.746957][  T301] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   65.754017][ T3430] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   65.760945][   T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.776830][  T402] plantronics 0003:047F:FFFF.000A: parse failed
[   65.783164][  T402] plantronics: probe of 0003:047F:FFFF.000A failed with error -22
[   65.801375][   T55] usb 4-1: config 0 descriptor??
[   65.849004][  T402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=402 comm=kworker/1:4
[   65.915475][  T402] usb 2-1: USB disconnect, device number 5
[   66.035767][  T301] usb 6-1: Using ep0 maxpacket: 32
[   66.155843][  T301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.166776][  T301] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   66.180046][  T301] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.186691][  T301] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[   66.195750][  T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.204225][  T301] usb 6-1: config 0 descriptor??
[   66.276721][   T55] hid-multitouch 0003:1FD2:6007.000B: No inputs registered, leaving
[   66.285891][   T55] hid-multitouch 0003:1FD2:6007.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[   66.430283][ T3447] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   66.448253][ T3449] device veth1_macvtap left promiscuous mode
[   66.454308][ T3449] device macsec0 entered promiscuous mode
[   66.462333][ T3449] device veth1_macvtap entered promiscuous mode
[   66.468819][ T3449] device macsec0 left promiscuous mode
[   66.474633][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.496781][   T24] audit: type=1400 audit(1793805161.921:451): avc:  denied  { unmount } for  pid=2442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   66.586067][ T3420] usb 4-1: USB disconnect, device number 2
[   66.905825][  T301] sony 0003:054C:042F.000C: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[   66.928266][  T301] sony 0003:054C:042F.000C: hiddev96,hidraw0: USB HID v0.07 Device [HID 054c:042f] on usb-dummy_hcd.5-1/input0
[   66.940208][  T301] sony 0003:054C:042F.000C: failed to claim input
[   66.959847][  T301] usb 6-1: USB disconnect, device number 6
[   66.976545][ T3465] fido_id[3465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[   67.107786][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.114892][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.161392][ T3486] input: syz1 as /devices/virtual/input/input21
[   67.224997][ T3492] cpuidle: using governor haltpoll
[   67.247854][   T24] audit: type=1400 audit(1793805162.671:452): avc:  denied  { append } for  pid=3495 comm="syz.7.1242" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   67.410580][   T24] audit: type=1400 audit(1793805162.831:453): avc:  denied  { getopt } for  pid=3514 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.556522][   T24] audit: type=1400 audit(1793805162.981:454): avc:  denied  { map } for  pid=3541 comm="syz.1.1263" path="/dev/usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   67.593199][   T24] audit: type=1400 audit(1793805163.011:455): avc:  denied  { mount } for  pid=3536 comm="syz.5.1261" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   67.635799][   T24] audit: type=1400 audit(1793805163.041:456): avc:  denied  { unmount } for  pid=2456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   67.666937][ T3547] kvm [3545]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x1234
[   67.703216][ T3553] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   67.812759][ T3563] device veth0_to_bond entered promiscuous mode
[   67.819507][ T3563] device macsec1 entered promiscuous mode
[   67.820594][ T3561] input: syz1 as /devices/virtual/input/input22
[   67.895801][ T3420] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   67.917568][ T3571] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,
[   67.972346][ T3571] EXT4-fs (loop8): shut down requested (1)
[   68.100573][ T3583] EXT4-fs (loop7): Ignoring removed bh option
[   68.139430][ T3583] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,abort,bh,,errors=continue
[   68.155893][ T3420] usb 2-1: Using ep0 maxpacket: 32
[   68.176657][   T24] audit: type=1400 audit(1793805163.601:457): avc:  denied  { read write } for  pid=3600 comm="syz.5.1287" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.203108][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.215121][ T3583] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.226396][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.239441][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.253432][   T24] audit: type=1400 audit(1793805163.631:458): avc:  denied  { open } for  pid=3600 comm="syz.5.1287" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.286777][ T3583] EXT4-fs error (device loop7): ext4_free_blocks:5690: comm syz.7.1280: Freeing blocks not in datazone - block = 0, count = 16
[   68.289238][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.313922][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.315811][ T3420] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.321610][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.339930][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.340097][ T3420] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   68.347593][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.368034][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.375549][ T3420] usb 2-1: config 0 interface 0 has no altsetting 0
[   68.375565][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.382435][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.397236][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.404814][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.412348][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.415199][ T3420] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[   68.420081][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.429182][ T3420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.448214][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.454702][ T3420] usb 2-1: config 0 descriptor??
[   68.465824][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.475810][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.493452][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.503557][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.523803][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.531301][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.545787][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.553325][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.560780][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.575792][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.585783][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.593305][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.602877][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.610365][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.617831][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.625287][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.632750][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.640250][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.647721][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.655172][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.662632][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.670224][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.677702][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.685147][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.692606][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.700084][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.707521][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.714961][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.722441][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.729930][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.737397][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.744847][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.752414][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.759923][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.767362][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.774786][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.782200][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.789633][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.797081][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.804495][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.811907][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.819389][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.826853][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.834311][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.841768][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.849205][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.856624][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.864000][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.871496][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.878898][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.886296][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.893764][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.901196][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.908614][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.916004][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.923384][   T55] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[   68.931218][   T55] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[   68.959506][ T3622] fido_id[3622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   69.023887][ T3626] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   69.068830][ T3626] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   69.091649][ T3646] fuse: blksize only supported for fuseblk
[   69.165871][ T3420] sony 0003:054C:042F.000E: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[   69.196900][ T3420] sony 0003:054C:042F.000E: hiddev96,hidraw0: USB HID v0.07 Device [HID 054c:042f] on usb-dummy_hcd.1-1/input0
[   69.223008][ T3420] sony 0003:054C:042F.000E: failed to claim input
[   69.257367][ T3420] usb 2-1: USB disconnect, device number 6
[   69.289073][ T3663] fido_id[3663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   69.343530][ T3665] overlayfs: failed to resolve './bus': -2
[   69.526242][ T3695] netlink: 'syz.8.1326': attribute type 9 has an invalid length.
[   69.779739][ T3732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'.
[   69.907310][ T3757] EXT4-fs (loop1): Test dummy encryption mode enabled
[   69.922621][ T3759] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1358: inode has both inline data and extents flags
[   69.928732][ T3757] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   69.956072][ T3759] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1358: couldn't read orphan inode 15 (err -117)
[   69.975685][ T3759] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue
[   69.991651][ T3757] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,mblk_io_submit,usrquota,max_dir_size_kb=0x0000000000000008,
[   70.137097][ T3777] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[   70.416390][ T3799] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   70.491658][ T3755] F2FS-fs (loop8): invalid crc value
[   70.522322][ T3755] F2FS-fs (loop8): Found nat_bits in checkpoint
[   70.537756][ T3822] rtc_cmos 00:00: in use; can't configure
[   70.553473][ T3755] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2
[   70.566858][ T3755] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[   70.683897][ T3837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   70.697016][ T3837] System zones: 1-12
[   70.702938][ T3837] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1387: missing EA_INODE flag
[   70.715520][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   70.715532][   T24] audit: type=1400 audit(1793805166.131:461): avc:  denied  { connect } for  pid=3847 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.726552][ T3837] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1387: error while reading EA inode 12 err=-117
[   70.742044][   T24] audit: type=1400 audit(1793805166.141:462): avc:  denied  { shutdown } for  pid=3847 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.775156][ T3837] EXT4-fs (loop1): 1 orphan inode deleted
[   70.781056][ T3837] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   70.833762][ T3852] 9p: Unknown uid 18446744073709551615
[   71.000418][ T3878] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1408'.
[   71.009664][ T3878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   71.029431][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'.
[   71.039001][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'.
[   71.129180][ T3903] tap0: tun_chr_ioctl cmd 1074812118
[   71.156647][   T24] audit: type=1400 audit(1793805166.581:463): avc:  denied  { setopt } for  pid=3905 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   71.179914][ T3894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   71.300791][ T3919] EXT4-fs (loop7): Ignoring removed nobh option
[   71.308536][ T3925] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1429'.
[   71.321836][ T3925] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1429'.
[   71.350188][ T3919] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue
[   71.362008][ T3919] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.476874][ T3933] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[   71.494354][ T3936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1433'.
[   72.041860][ T3916] SELinux: (dev overlay, type overlay) getxattr errno 107
[   72.208694][ T3987] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[   72.218583][ T3987] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   72.233407][ T3987] F2FS-fs (loop8): fault_injection options not supported
[   72.252875][ T3987] F2FS-fs (loop8): fault_type options not supported
[   72.263318][   T24] audit: type=1400 audit(1793805167.681:464): avc:  denied  { mount } for  pid=4022 comm="syz.5.1472" name="/" dev="configfs" ino=13747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   72.286463][ T3987] F2FS-fs (loop8): invalid crc value
[   72.293127][   T24] audit: type=1400 audit(1793805167.711:465): avc:  denied  { search } for  pid=4022 comm="syz.5.1472" name="/" dev="configfs" ino=13747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   72.325566][   T24] audit: type=1400 audit(1793805167.711:466): avc:  denied  { setattr } for  pid=4022 comm="syz.5.1472" name="/" dev="configfs" ino=13747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   72.349472][ T4029] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1474'.
[   72.349700][ T3987] F2FS-fs (loop8): Found nat_bits in checkpoint
[   72.368190][ T4029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'.
[   72.377233][ T4029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'.
[   72.410621][ T3987] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   72.417852][ T3987] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   72.440209][ T3987] attempt to access beyond end of device
[   72.440209][ T3987] loop8: rw=2049, want=53320, limit=40427
[   72.458790][ T4034] EXT4-fs (loop5): Test dummy encryption mode enabled
[   72.465841][ T4034] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[   72.474686][ T4034] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,mblk_io_submit,usrquota,max_dir_size_kb=0x0000000000000008,
[   72.509535][ T2966] attempt to access beyond end of device
[   72.509535][ T2966] loop8: rw=2049, want=45104, limit=40427
[   72.537129][ T4037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1477: bg 0: block 5: invalid block bitmap
[   72.563497][ T4037] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   72.578933][ T4037] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.1477: invalid indirect mapped block 3 (level 2)
[   72.593015][ T4037] EXT4-fs (loop1): 1 orphan inode deleted
[   72.604243][ T4037] EXT4-fs (loop1): 1 truncate cleaned up
[   72.615850][ T4037] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue
[   72.827870][ T4068] overlayfs: upper fs does not support tmpfile.
[   72.892197][ T4050] F2FS-fs (loop7): fault_type options not supported
[   72.916713][ T4050] F2FS-fs (loop7): invalid crc value
[   72.957004][ T4050] F2FS-fs (loop7): Found nat_bits in checkpoint
[   73.056461][ T4050] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1
[   73.069462][   T24] audit: type=1400 audit(1793805168.491:467): avc:  denied  { create } for  pid=4081 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   73.091705][ T4050] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   73.251922][   T24] audit: type=1400 audit(1793805168.671:468): avc:  denied  { mounton } for  pid=4091 comm="syz.8.1501" path="/76/file0/file0" dev="loop8" ino=1048864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   73.348323][  T530] tipc: Disabling bearer <udp:syz2>
[   73.353773][  T530] tipc: Left network mode
[   73.579745][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.598869][ T4103] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.606900][ T4103] device bridge_slave_0 entered promiscuous mode
[   73.629071][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.636348][ T4103] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.643837][ T4103] device bridge_slave_1 entered promiscuous mode
[   73.817930][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.824993][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.832286][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.839328][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.925778][ T1175] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   73.948102][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.976175][  T192] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.005954][  T192] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.047320][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.060439][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.067536][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.075519][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.083821][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.090881][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.103690][   T24] audit: type=1400 audit(1793805169.521:469): avc:  denied  { name_bind } for  pid=4117 comm="syz.1.1511" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   74.129019][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.137157][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.171461][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.188770][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.193321][ T1175] usb 6-1: Using ep0 maxpacket: 16
[   74.202673][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.225027][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.276603][ T4103] device veth0_vlan entered promiscuous mode
[   74.293717][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.306840][ T4103] device veth1_macvtap entered promiscuous mode
[   74.312160][   T24] audit: type=1400 audit(1793805169.731:470): avc:  denied  { read } for  pid=4135 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   74.333207][ T1175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.344342][ T1175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.354522][ T1175] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   74.368175][ T1175] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.377433][ T1175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.385913][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.386987][ T1175] usb 6-1: config 0 descriptor??
[   74.399429][  T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.409695][  T530] device bridge_slave_1 left promiscuous mode
[   74.416075][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.423521][  T530] device bridge_slave_0 left promiscuous mode
[   74.429677][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.437780][  T530] device veth1_macvtap left promiscuous mode
[   74.443775][  T530] device veth0_vlan left promiscuous mode
[   74.565914][ T3421] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   74.609919][ T4147] EXT4-fs (loop6): 1 truncate cleaned up
[   74.616177][ T4147] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,,errors=continue
[   74.805831][ T3421] usb 8-1: Using ep0 maxpacket: 8
[   74.901723][ T1175] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input24
[   74.915209][ T1175] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   74.927533][ T3421] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   74.938128][ T3421] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.949668][ T3421] usb 8-1: config 1 has no interface number 0
[   74.956025][ T3421] usb 8-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xFF, skipping
[   74.994374][ T4190] netlink: 'syz.6.1543': attribute type 2 has an invalid length.
[   75.056897][ T4196] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   75.072153][ T4196] exFAT-fs (loop6): hint_cluster is invalid (17)
[   75.125969][ T3421] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   75.135049][ T3421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.158314][ T3421] usb 8-1: Product: syz
[   75.162515][ T3421] usb 8-1: Manufacturer: syz
[   75.174890][ T3421] usb 8-1: SerialNumber: syz
[   75.183102][ T3420] usb 6-1: USB disconnect, device number 7
[   75.370026][ T4210] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,inlinecrypt,auto_da_alloc,
[   75.436786][ T3421] snd-usb-audio: probe of 8-1:1.1 failed with error -22
[   75.544503][ T4210] EXT4-fs error (device loop1): ext4_remount:5882: Abort forced by user
[   75.564555][ T4210] EXT4-fs (loop1): Remounting filesystem read-only
[   75.575037][ T4210] EXT4-fs (loop1): re-mounted. Opts: (null)
[   75.713149][ T4217] option changes via remount are deprecated (pid=4215 comm=syz.1.1553)
[   75.721878][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   75.721891][   T24] audit: type=1400 audit(1793805171.131:477): avc:  denied  { remount } for  pid=4215 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   75.760502][ T4217] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[   75.836861][   T24] audit: type=1400 audit(1793805171.261:478): avc:  denied  { ioctl } for  pid=4221 comm="syz.3.1556" path="socket:[32825]" dev="sockfs" ino=32825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.864192][ T4222] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[   75.901458][ T4224] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[   76.011185][ T4208] F2FS-fs (loop6): invalid crc value
[   76.056775][ T4208] F2FS-fs (loop6): Found nat_bits in checkpoint
[   76.113880][ T4208] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[   76.121072][ T4208] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   76.136534][ T4258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   76.155811][ T4258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   76.166847][ T4258] EXT4-fs error (device loop1): ext4_get_journal_inode:5247: inode #5: comm syz.1.1571: unexpected bad inode w/o EXT4_IGET_BAD
[   76.180826][ T4258] EXT4-fs (loop1): no journal found
[   76.186273][ T4258] EXT4-fs (loop1): can't get journal size
[   76.194376][   T24] audit: type=1400 audit(1793805171.611:479): avc:  denied  { read } for  pid=4267 comm="syz.5.1574" path="socket:[33920]" dev="sockfs" ino=33920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.218733][ T4258] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue
[   76.259233][ T4258] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1465: inode #12: block 16: comm syz.1.1571: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[   76.284761][ T2442] EXT4-fs error (device loop1): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[   76.309913][ T2442] EXT4-fs error (device loop1): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[   76.548452][   T24] audit: type=1400 audit(1793805171.971:480): avc:  denied  { setattr } for  pid=4307 comm="syz.5.1596" name="file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   76.597973][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.605055][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.614495][ T4309] device bridge_slave_0 entered promiscuous mode
[   76.623020][ T4311] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1597: bg 0: block 5: invalid block bitmap
[   76.645667][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.656847][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.663929][ T4311] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   76.664525][ T4309] device bridge_slave_1 entered promiscuous mode
[   76.680158][ T4311] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.1597: invalid indirect mapped block 3 (level 2)
[   76.698419][   T24] audit: type=1400 audit(1793805172.121:481): avc:  denied  { read } for  pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   76.738627][ T4311] EXT4-fs (loop6): 1 orphan inode deleted
[   76.757491][ T4311] EXT4-fs (loop6): 1 truncate cleaned up
[   76.762532][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.770235][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.775546][ T4311] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   76.777544][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.793466][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.827884][   T24] audit: type=1400 audit(1793805172.251:482): avc:  denied  { execute } for  pid=4310 comm="syz.6.1597" name="file0" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.856493][   T24] audit: type=1400 audit(1793805172.251:483): avc:  denied  { execute_no_trans } for  pid=4310 comm="syz.6.1597" path="/30/file0/file0" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.862130][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.902359][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.910172][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.920084][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.935194][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.942302][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.953336][   T24] audit: type=1400 audit(1793805172.381:484): avc:  denied  { connect } for  pid=4358 comm="syz.6.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   76.997626][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.012052][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.019178][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.052703][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.067551][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.105236][ T4309] device veth0_vlan entered promiscuous mode
[   77.127258][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.136270][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.144327][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.151984][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.186273][ T2325] device bridge_slave_1 left promiscuous mode
[   77.192609][ T2325] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.226071][ T2325] device bridge_slave_0 left promiscuous mode
[   77.232299][ T2325] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.305255][ T3421] usb 8-1: USB disconnect, device number 4
[   77.316268][ T2325] device veth1_macvtap left promiscuous mode
[   77.327589][ T2325] device veth0_vlan left promiscuous mode
[   77.409917][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.426973][ T4309] device veth1_macvtap entered promiscuous mode
[   77.458742][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.476632][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.502714][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.526237][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.604128][ T4389] __nla_validate_parse: 1 callbacks suppressed
[   77.604136][ T4389] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1623'.
[   77.746211][ T4397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   77.754192][ T4397] System zones: 1-12
[   77.806306][ T4397] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1627: missing EA_INODE flag
[   77.832193][ T4397] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1627: error while reading EA inode 12 err=-117
[   77.879027][ T4397] EXT4-fs (loop7): 1 orphan inode deleted
[   77.884811][ T4397] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   77.951338][ T4397] fscrypt (loop7, inode 15): Can't use IV_INO_LBLK_64 policy on filesystem 'loop7' because it doesn't have stable inode numbers
[   78.111406][ T4432] ip_tables: iptables: counters copy to user failed while replacing table
[   78.233292][ T4435] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.266764][ T4435] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1645: bg 0: block 5: invalid block bitmap
[   78.279298][ T4435] EXT4-fs (loop7): Remounting filesystem read-only
[   78.286026][ T4435] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   78.294989][ T4435] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.1645: invalid indirect mapped block 3 (level 2)
[   78.308612][ T4435] EXT4-fs (loop7): 2 truncates cleaned up
[   78.314336][ T4435] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,
[   78.334649][ T4448] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   78.348179][ T4435] EXT4-fs error (device loop7): empty_inline_dir:1876: inode #12: block 7: comm syz.7.1645: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[   78.367831][ T4435] EXT4-fs (loop7): Remounting filesystem read-only
[   78.374523][ T4435] EXT4-fs warning (device loop7): empty_inline_dir:1883: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[   78.625824][  T301] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   78.865826][ T1243] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   78.912373][   T24] audit: type=1400 audit(1793805174.331:485): avc:  denied  { write } for  pid=4510 comm="syz.6.1677" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   78.937463][   T24] audit: type=1400 audit(1793805174.331:486): avc:  denied  { open } for  pid=4510 comm="syz.6.1677" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   79.011290][ T4523] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x85aaa8f8, utbl_chksum : 0xe619d30d)
[   79.045925][  T301] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.056922][  T301] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   79.073613][  T301] usb 3-1: config 0 interface 0 has no altsetting 0
[   79.081375][  T301] usb 3-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00
[   79.090771][  T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.100232][  T301] usb 3-1: config 0 descriptor??
[   79.129317][ T4517] F2FS-fs (loop5): invalid crc value
[   79.137782][ T4517] F2FS-fs (loop5): Found nat_bits in checkpoint
[   79.158954][ T4517] F2FS-fs (loop5): Start checkpoint disabled!
[   79.165863][ T4517] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   79.186972][ T4529] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[   79.196654][ T4529] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[   79.204129][ T4529] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.217206][ T4529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   79.225638][ T4529] System zones: 0-1, 3-36
[   79.232419][ T4529] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue
[   79.239722][    T9] attempt to access beyond end of device
[   79.239722][    T9] loop5: rw=2049, want=40984, limit=40427
[   79.296005][ T1243] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   79.311300][ T1243] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   79.321637][ T1243] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   79.330901][ T1243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.559665][ T4537] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0)
[   79.576933][ T4537] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   79.577673][  T301] input: HID 1b96:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0006.0010/input/input26
[   79.585192][ T4537] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value
[   79.687639][   T20] kernel read not supported for file /bus/input/devices (pid: 20 comm: kworker/1:0)
[   79.700839][  T301] ntrig 0003:1B96:0006.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 1b96:0006] on usb-dummy_hcd.2-1/input0
[   79.785865][  T301] ntrig 0003:1B96:0006.0010: Firmware version: 0.0.12.3.3 (c140 6390)
[   79.825807][ T1243] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[   79.833994][ T1243] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input25
[   79.855668][ T4551] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   79.863892][ T1243] input: failed to attach handler kbd to device input25, error: -5
[   79.878595][ T1243] usb 4-1: USB disconnect, device number 3
[   79.900296][ T4539] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945)
[   79.910527][ T4539] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   79.931038][ T4539] F2FS-fs (loop5): invalid crc value
[   79.954195][ T4562] netlink: 'syz.7.1697': attribute type 1 has an invalid length.
[   79.963758][ T4562] netlink: 'syz.7.1697': attribute type 1 has an invalid length.
[   79.978685][ T4539] F2FS-fs (loop5): Found nat_bits in checkpoint
[   80.000845][  T301] usb 3-1: USB disconnect, device number 5
[   80.023058][ T4539] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   80.029977][ T4572] WARNING! power/level is deprecated; use power/control instead
[   80.030208][ T4539] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   80.149302][ T4585] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   80.237002][ T4589] FAULT_INJECTION: forcing a failure.
[   80.237002][ T4589] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   80.250353][ T4589] CPU: 0 PID: 4589 Comm: syz.7.1708 Tainted: G        W         syzkaller #0
[   80.259128][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   80.269201][ T4589] Call Trace:
[   80.272510][ T4589]  __dump_stack+0x21/0x24
[   80.276849][ T4589]  dump_stack_lvl+0x1a7/0x208
[   80.281533][ T4589]  ? show_regs_print_info+0x18/0x18
[   80.286750][ T4589]  dump_stack+0x15/0x1c
[   80.290916][ T4589]  should_fail+0x3ab/0x500
[   80.295321][ T4589]  should_fail_alloc_page+0x4f/0x60
[   80.300507][ T4589]  __alloc_pages_nodemask+0x11a/0x640
[   80.305870][ T4589]  ? __this_cpu_preempt_check+0x13/0x20
[   80.311434][ T4589]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   80.316981][ T4589]  ? ttwu_do_wakeup+0x3a2/0x3d0
[   80.321828][ T4589]  __get_free_pages+0xe/0x30
[   80.326411][ T4589]  __tlb_remove_page_size+0x18a/0x310
[   80.331781][ T4589]  unmap_page_range+0x1303/0x2190
[   80.336822][ T4589]  ? lru_cache_disable+0xa0/0xa0
[   80.341769][ T4589]  ? copy_page_range+0x27a0/0x27a0
[   80.346875][ T4589]  unmap_vmas+0x25f/0x360
[   80.351203][ T4589]  ? unmap_page_range+0x2190/0x2190
[   80.356398][ T4589]  ? __kasan_check_write+0x14/0x20
[   80.361501][ T4589]  ? tlb_gather_mmu+0x269/0x330
[   80.366341][ T4589]  exit_mmap+0x309/0x590
[   80.370580][ T4589]  ? vm_brk+0x30/0x30
[   80.374554][ T4589]  ? mutex_lock+0x92/0xf0
[   80.378876][ T4589]  ? mutex_unlock+0x1c/0x40
[   80.383378][ T4589]  __mmput+0x92/0x2d0
[   80.387349][ T4589]  mmput+0x4e/0x150
[   80.391178][ T4589]  do_exit+0x9d8/0x24e0
[   80.395358][ T4589]  ? put_task_struct+0x90/0x90
[   80.400207][ T4589]  ? __kasan_check_write+0x14/0x20
[   80.405398][ T4589]  ? _raw_spin_lock_irq+0x95/0xf0
[   80.410428][ T4589]  do_group_exit+0x149/0x310
[   80.415013][ T4589]  ? __kasan_check_write+0x14/0x20
[   80.420118][ T4589]  ? recalc_sigpending+0x1ac/0x230
[   80.425223][ T4589]  get_signal+0xfb1/0x1300
[   80.429638][ T4589]  arch_do_signal_or_restart+0xe7/0x11b0
[   80.435265][ T4589]  ? futex_exit_release+0x1e0/0x1e0
[   80.440457][ T4589]  ? __ia32_sys_rt_sigreturn+0x730/0x730
[   80.446080][ T4589]  ? __se_sys_futex+0x2ba/0x370
[   80.450928][ T4589]  ? __x64_sys_pwritev+0x1d9/0x2b0
[   80.456029][ T4589]  exit_to_user_mode_loop+0xa2/0xe0
[   80.461219][ T4589]  exit_to_user_mode_prepare+0x76/0xa0
[   80.466667][ T4589]  syscall_exit_to_user_mode+0x1d/0x40
[   80.472116][ T4589]  do_syscall_64+0x3d/0x40
[   80.476525][ T4589]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   80.482406][ T4589] RIP: 0033:0x7f8ed9720b19
[   80.486808][ T4589] Code: Unable to access opcode bytes at RIP 0x7f8ed9720aef.
[   80.494162][ T4589] RSP: 002b:00007f8ed81780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   80.502570][ T4589] RAX: fffffffffffffe00 RBX: 00007f8ed99a6fa8 RCX: 00007f8ed9720b19
[   80.510534][ T4589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ed99a6fa8
[   80.518500][ T4589] RBP: 00007f8ed99a6fa0 R08: 0000000000000000 R09: 0000000000000000
[   80.526473][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.534436][ T4589] R13: 00007f8ed99a7038 R14: 00007fff3e5164e0 R15: 00007fff3e5165c8
[   80.609326][ T4598] EXT4-fs (loop5): Test dummy encryption mode enabled
[   80.617680][ T4598] EXT4-fs (loop5): Ignoring removed bh option
[   80.623873][ T4598] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   80.635644][ T4598] EXT4-fs (loop5): 1 truncate cleaned up
[   80.642608][ T4598] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,test_dummy_encryption=v1,debug_want_extra_isize=0x0000000000000068,lazytime,bh,nogrpid,noquota,,errors=continue
[   80.768345][ T4622] EXT4-fs (loop5): Can't support bigalloc feature without extents feature
[   80.768345][ T4622] 
[   80.786387][ T4622] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   80.881778][   T24] kauditd_printk_skb: 5 callbacks suppressed
[   80.881791][   T24] audit: type=1400 audit(1793805176.301:492): avc:  denied  { listen } for  pid=4633 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.936332][   T24] audit: type=1400 audit(1793805176.301:493): avc:  denied  { shutdown } for  pid=4633 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.974840][ T4649] netlink: 165 bytes leftover after parsing attributes in process `syz.7.1733'.
[   81.068138][ T4673] xt_hashlimit: size too large, truncated to 1048576
[   81.194176][ T4692] sd 0:0:1:0: PR command failed: 134217730
[   81.207156][ T4692] sd 0:0:1:0: Sense Key : 0x5 [current] 
[   81.222389][ T4692] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 
[   81.546080][ T4728] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   81.821089][ T4732] F2FS-fs (loop5): fault_injection options not supported
[   81.836505][ T4732] F2FS-fs (loop5): invalid crc value
[   81.856242][ T4732] F2FS-fs (loop5): Found nat_bits in checkpoint
[   81.926411][ T4732] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   81.987158][ T4743] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   81.991620][ T4732] attempt to access beyond end of device
[   81.991620][ T4732] loop5: rw=2049, want=45104, limit=40427
[   82.060243][ T4732] attempt to access beyond end of device
[   82.060243][ T4732] loop5: rw=0, want=45104, limit=40427
[   82.124717][ T2456] attempt to access beyond end of device
[   82.124717][ T2456] loop5: rw=2049, want=45112, limit=40427
[   82.142597][ T4750] tipc: Started in network mode
[   82.165698][ T4750] tipc: Own node identity ac14140f, cluster identity 4711
[   82.184411][ T4750] tipc: New replicast peer: 255.255.255.255
[   82.198184][ T4750] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.281266][   T24] audit: type=1400 audit(1793805177.701:494): avc:  denied  { setopt } for  pid=4757 comm="syz.2.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.349637][ T4761] EXT4-fs error (device loop6): ext4_fill_super:4959: inode #2: comm syz.6.1785: iget: checksum invalid
[   82.361415][ T4761] EXT4-fs (loop6): get root inode failed
[   82.370095][ T4761] EXT4-fs (loop6): mount failed
[   82.489231][   T24] audit: type=1400 audit(1793805177.911:495): avc:  granted  { setsecparam } for  pid=4760 comm="syz.6.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   82.642055][ T4799] /dev/loop0: Can't open blockdev
[   82.706073][ T4808] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[   82.719731][ T4810] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'.
[   82.873340][ T4826] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[   82.895243][   T24] audit: type=1400 audit(1793805178.311:496): avc:  denied  { read } for  pid=4830 comm="syz.3.1814" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   82.934823][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   82.945789][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   82.959820][ T4840] input: syz0 as /devices/virtual/input/input27
[   82.964986][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   82.973709][   T24] audit: type=1400 audit(1793805178.311:497): avc:  denied  { open } for  pid=4830 comm="syz.3.1814" path="/193/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   83.005937][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.019220][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.035794][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.051411][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.065788][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.084250][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.097064][   T24] audit: type=1400 audit(1793805178.521:498): avc:  denied  { ioctl } for  pid=4848 comm="syz.2.1823" path="socket:[35303]" dev="sockfs" ino=35303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   83.131811][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.165777][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.173260][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.195763][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.203221][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.220938][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.235801][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.245889][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.253322][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.260877][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.268620][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.276163][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.283587][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.291142][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.298801][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.306340][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.313781][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.321334][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.325759][  T301] tipc: 32-bit node address hash set to f1414ac
[   83.328934][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.342513][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.350050][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.357612][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.365024][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.372615][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.380117][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.387670][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.395174][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.402775][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.410459][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.425846][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.439712][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.454761][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.469800][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.484764][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.499798][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.515847][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.530805][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.545755][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.560712][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.575681][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.583253][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.590761][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.598373][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.606027][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.613483][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.621115][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.628740][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.636260][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.643791][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.651395][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.659096][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.666669][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.674128][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.681848][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.689468][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.697080][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.704593][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.712205][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.719832][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.727410][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.734914][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.742515][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.761279][ T1175] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[   83.785881][ T1175] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[   83.839569][ T4862] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   83.896613][ T4866] fido_id[4866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   83.936283][ T4862] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,dioread_nolock,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   83.986217][   T24] audit: type=1400 audit(1793805179.411:499): avc:  denied  { search } for  pid=4869 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.041405][   T24] audit: type=1400 audit(1793805179.411:500): avc:  denied  { read write } for  pid=4869 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   84.096812][   T24] audit: type=1400 audit(1793805179.411:501): avc:  denied  { open } for  pid=4869 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1

syzkaller
syzkaller login: [   84.150930][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.158237][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.166159][ T4884] device bridge_slave_0 entered promiscuous mode
[   84.173385][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.180891][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.199334][ T4884] device bridge_slave_1 entered promiscuous mode
[   84.203417][ T4893] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   84.249545][ T4881] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[   84.275909][ T4881] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.352865][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.360320][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.367650][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.374683][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.462041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.466541][ T4899] EXT4-fs (loop7): Ignoring removed nobh option
[   84.481358][ T4899] EXT4-fs (loop7): Test dummy encryption mode enabled
[   84.488407][ T4899] EXT4-fs (loop7): Ignoring removed bh option
[   84.494932][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.506533][ T4899] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue
[   84.544716][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.584443][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.594951][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.602078][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.620596][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.635219][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.642354][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.662091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.673994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.693740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.713155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.721427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.729881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.738079][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1848'.
[   84.748895][ T4884] device veth0_vlan entered promiscuous mode
[   84.771418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.781821][ T4884] device veth1_macvtap entered promiscuous mode
[   84.795091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.824427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.837452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.857485][ T2325] device bridge_slave_1 left promiscuous mode
[   84.863954][ T2325] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.885094][ T2325] device bridge_slave_0 left promiscuous mode
[   84.892937][ T2325] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.901559][ T2325] device veth1_macvtap left promiscuous mode
[   84.907681][ T2325] device veth0_vlan left promiscuous mode
[   84.933261][ T4939] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[   85.071747][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.079619][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.087390][ T4943] device bridge_slave_0 entered promiscuous mode
[   85.094681][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.101973][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.109937][ T4943] device bridge_slave_1 entered promiscuous mode
[   85.217405][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.224528][ T4943] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.231863][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.238931][ T4943] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.315609][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.323585][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.331208][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.350136][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.362366][ T4974] F2FS-fs (loop7): invalid crc value
[   85.372179][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.379298][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.386920][  T530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.387537][ T4974] F2FS-fs (loop7): Found nat_bits in checkpoint
[   85.395126][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.408373][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.423434][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1881'.
[   85.436867][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.446079][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.448050][ T4974] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   85.463630][  T530] tipc: Disabling bearer <udp:syz2>
[   85.470064][  T530] tipc: Left network mode
[   85.483148][ T4943] device veth0_vlan entered promiscuous mode
[   85.492273][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.506589][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.515208][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.523381][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.549943][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.565059][ T2942] attempt to access beyond end of device
[   85.565059][ T2942] loop7: rw=2049, want=45104, limit=40427
[   85.578730][ T4943] device veth1_macvtap entered promiscuous mode
[   85.589866][ T5006] futex_wake_op: syz.5.1887 tries to shift op by 146; fix this program
[   85.599630][ T5006] futex_wake_op: syz.5.1887 tries to shift op by 146; fix this program
[   85.626914][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.645679][ T2325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.868512][ T5036] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[   85.891666][   T15] kernel write not supported for file 433/net/vlan/vlan0 (pid: 15 comm: kworker/0:1)
[   85.911461][ T5036] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   85.948105][ T1243] kernel write not supported for file [eventfd] (pid: 1243 comm: kworker/1:10)
[   85.965622][ T5036] EXT4-fs error (device loop5): ext4_ext_check_inode:500: inode #11: comm syz.5.1901: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   85.984973][ T5036] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1901: couldn't read orphan inode 11 (err -117)
[   85.999960][ T5036] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue
[   86.023107][ T5036] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1901: Invalid block bitmap block 0 in block_group 0
[   86.037207][ T5036] __quota_error: 32 callbacks suppressed
[   86.037217][ T5036] Quota error (device loop5): write_blk: dquota write failed
[   86.050738][ T5036] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   86.061629][ T5036] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.1901: Failed to acquire dquot type 0
[   86.083189][   T24] audit: type=1400 audit(1793805181.501:534): avc:  denied  { write } for  pid=5035 comm="syz.5.1901" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.108173][   T24] audit: type=1400 audit(1793805181.521:535): avc:  denied  { write } for  pid=5063 comm="syz.3.1911" path="socket:[37311]" dev="sockfs" ino=37311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   86.109179][ T5051] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   86.145322][ T5069] dyndbg: expected <4096 bytes into control
[   86.149835][ T5051] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.167315][  T530] device bridge_slave_1 left promiscuous mode
[   86.173701][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.186515][  T530] device bridge_slave_0 left promiscuous mode
[   86.203841][   T24] audit: type=1400 audit(1793805181.621:536): avc:  denied  { ioctl } for  pid=5076 comm="syz.3.1917" path="socket:[37343]" dev="sockfs" ino=37343 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.234196][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.246771][  T530] device veth1_macvtap left promiscuous mode
[   86.265637][  T530] device veth0_vlan left promiscuous mode
[   86.339148][ T5083] exfat: Deprecated parameter 'utf8'
[   86.344494][ T5083] exfat: Deprecated parameter 'namecase'
[   86.370129][ T5083] exfat: Deprecated parameter 'namecase'
[   86.375853][ T1243] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   86.402183][ T5083] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   86.435393][   T24] audit: type=1400 audit(1793805181.851:537): avc:  denied  { setattr } for  pid=5082 comm="syz.6.1919" name="file0" dev="loop6" ino=1048934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.458359][ T2389] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.622249][ T1243] usb 6-1: Using ep0 maxpacket: 16
[   86.658511][ T5073] F2FS-fs (loop7): invalid crc value
[   86.670705][ T5073] F2FS-fs (loop7): Found nat_bits in checkpoint
[   86.714224][ T5073] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   86.785891][ T1243] usb 6-1: unable to read config index 0 descriptor/start: -61
[   86.793701][ T1243] usb 6-1: can't read configurations, error -61
[   86.845905][ T2389] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   86.857075][ T2389] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.870872][ T2389] usb 1-1: config 0 interface 0 has no altsetting 0
[   86.878080][ T2389] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[   86.887630][ T2389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.900527][ T2389] usb 1-1: config 0 descriptor??
[   86.946593][ T5136] ip_tables: iptables: counters copy to user failed while replacing table
[   86.956065][ T5136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   86.974580][ T1243] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   87.215804][ T1243] usb 6-1: Using ep0 maxpacket: 16
[   87.258076][   T24] audit: type=1400 audit(1793805182.681:538): avc:  denied  { map } for  pid=5166 comm="syz.7.1950" path="socket:[37997]" dev="sockfs" ino=37997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.281267][   T24] audit: type=1400 audit(1793805182.681:539): avc:  denied  { accept } for  pid=5166 comm="syz.7.1950" path="socket:[37997]" dev="sockfs" ino=37997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.375853][ T1243] usb 6-1: unable to read config index 0 descriptor/start: -61
[   87.377146][ T2389] hid (null): usage index exceeded
[   87.383634][ T1243] usb 6-1: can't read configurations, error -61
[   87.383770][ T1243] usb usb6-port1: attempt power cycle
[   87.390240][ T2389] itetech 0003:06CB:2968.0012: ignoring exceeding usage max
[   87.408807][ T2389] itetech 0003:06CB:2968.0012: usage index exceeded
[   87.415477][ T2389] itetech 0003:06CB:2968.0012: item 0 2 2 0 parsing failed
[   87.422892][ T2389] itetech: probe of 0003:06CB:2968.0012 failed with error -22
[   87.588587][ T2389] usb 1-1: USB disconnect, device number 2
[   87.805811][ T1243] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   87.916000][ T1243] usb 6-1: Using ep0 maxpacket: 16
[   88.045773][  T402] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   88.075817][ T1243] usb 6-1: unable to read config index 0 descriptor/start: -61
[   88.083416][ T1243] usb 6-1: can't read configurations, error -61
[   88.095772][   T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   88.245878][ T1243] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   88.345911][ T1243] usb 6-1: Using ep0 maxpacket: 16
[   88.375815][  T301] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   88.385942][  T402] usb 8-1: not running at top speed; connect to a high speed hub
[   88.465888][  T402] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.476887][  T402] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.505848][ T1243] usb 6-1: unable to read config index 0 descriptor/start: -61
[   88.513424][ T1243] usb 6-1: can't read configurations, error -61
[   88.519833][ T1243] usb usb6-port1: unable to enumerate USB device
[   88.535933][   T15] usb 4-1: unable to get BOS descriptor or descriptor too short
[   88.606427][  T402] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   88.615575][  T402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   88.623659][  T301] usb 1-1: Using ep0 maxpacket: 8
[   88.628875][  T402] usb 8-1: Product: syz
[   88.633048][  T402] usb 8-1: Manufacturer: syz
[   88.645820][   T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.676379][  T402] hub 8-1:1.0: USB hub found
[   88.745842][  T301] usb 1-1: config 129 has an invalid interface number: 90 but max is 1
[   88.754180][  T301] usb 1-1: config 129 has an invalid interface number: 154 but max is 1
[   88.762852][  T301] usb 1-1: config 129 has no interface number 0
[   88.769174][  T301] usb 1-1: config 129 has no interface number 1
[   88.775505][  T301] usb 1-1: config 129 interface 90 has no altsetting 0
[   88.782814][  T301] usb 1-1: config 129 interface 154 has no altsetting 0
[   88.791872][  T530] EXT4-fs error (device loop5): __ext4_get_inode_loc:4451: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0
[   88.795833][   T15] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   88.814863][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   88.823083][   T15] usb 4-1: Product: syz
[   88.827583][   T15] usb 4-1: Manufacturer: syz
[   88.866322][   T15] uvcvideo: Found UVC 1.00 device syz (8086:0ad2)
[   88.896046][  T402] hub 8-1:1.0: 9 ports detected
[   88.901309][   T24] audit: type=1400 audit(1793805184.321:540): avc:  denied  { mount } for  pid=5197 comm="syz.5.1960" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   88.923464][  T402] hub 8-1:1.0: insufficient power available to use all downstream ports
[   88.923593][   T24] audit: type=1400 audit(1793805184.321:541): avc:  denied  { unmount } for  pid=2456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   88.955974][  T301] usb 1-1: New USB device found, idVendor=13b1, idProduct=0018, bcdDevice=24.27
[   88.965130][  T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.973173][  T301] usb 1-1: Product: syz
[   88.977555][  T301] usb 1-1: Manufacturer: syz
[   88.982132][  T301] usb 1-1: SerialNumber: syz
[   89.105996][  T402] hub 8-1:1.0: hub_hub_status failed (err = 0)
[   89.112249][  T402] hub 8-1:1.0: config failed, can't get hub status (err -5)
[   89.240109][ T1175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.248184][ T1175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.265824][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.305798][   T15] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   89.306073][  T301] asix: probe of 1-1:129.90 failed with error -22
[   89.329326][ T5237] xt_hashlimit: size too large, truncated to 1048576
[   89.357411][  T301] asix: probe of 1-1:129.154 failed with error -22
[   89.358331][   T15] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input28
[   89.369668][  T301] usb 1-1: USB disconnect, device number 3
[   89.436303][ T1175] usb 8-1: USB disconnect, device number 5
[   89.505847][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.563453][ T5252] ------------[ cut here ]------------
[   89.568995][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   89.579239][ T5252] Modules linked in:
[   89.583166][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G        W         syzkaller #0
[   89.592063][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   89.594438][  T301] usb 4-1: USB disconnect, device number 4
[   89.602233][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   89.602245][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   89.602253][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   89.602267][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   89.602283][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   89.655682][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   89.663760][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365005d
[   89.671752][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   89.679743][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   89.688690][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.695292][ T5252] CR2: 0000001b2d921ff8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   89.703289][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   89.711289][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   89.719276][ T5252] Call Trace:
[   89.722594][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   89.728251][ T5252]  ? vsnprintf+0x14e/0x1990
[   89.732776][ T5252]  ? __kasan_check_write+0x14/0x20
[   89.737908][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   89.742590][ T5252]  rb_buffer_peek+0x60/0x7a0
[   89.747168][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   89.752522][ T5252]  ring_buffer_peek+0x183/0x360
[   89.757365][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   89.762925][ T5252]  ? ring_buffer_empty+0x450/0x450
[   89.768046][ T5252]  peek_next_entry+0x141/0x200
[   89.772810][ T5252]  __find_next_entry+0x534/0x6b0
[   89.777744][ T5252]  ? rb_advance_reader+0x39c/0x6b0
[   89.782840][ T5252]  ? ring_buffer_consume+0x304/0x350
[   89.788119][ T5252]  ? trace_find_next_entry+0x370/0x370
[   89.793564][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   89.799100][ T5252]  ? print_trace_line+0x385/0x690
[   89.804121][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   89.809401][ T5252]  ? s_show+0x320/0x320
[   89.813550][ T5252]  vfs_read+0x209/0xa50
[   89.817706][ T5252]  ? kernel_read+0x70/0x70
[   89.822117][ T5252]  ? __kasan_check_write+0x14/0x20
[   89.827220][ T5252]  ? mutex_lock+0x92/0xf0
[   89.831540][ T5252]  ? mutex_trylock+0xb0/0xb0
[   89.836121][ T5252]  ? __fget_files+0x2e1/0x340
[   89.840798][ T5252]  ? __fdget_pos+0x2d2/0x380
[   89.845378][ T5252]  ? ksys_read+0x70/0x260
[   89.849698][ T5252]  ksys_read+0x14a/0x260
[   89.853934][ T5252]  ? vfs_write+0xd70/0xd70
[   89.858347][ T5252]  ? mntput+0x5f/0xc0
[   89.862409][ T5252]  ? __kasan_check_read+0x11/0x20
[   89.867430][ T5252]  __x64_sys_read+0x7b/0x90
[   89.872021][ T5252]  do_syscall_64+0x31/0x40
[   89.876430][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   89.882316][ T5252] RIP: 0033:0x7f58a9306b19
[   89.886726][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.906326][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   89.914735][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   89.922701][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   89.930665][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   89.938630][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.946593][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   89.954559][ T5252] ---[ end trace abb898edc2c65821 ]---
[   89.960015][ T5252] ==================================================================
[   89.968163][ T5252] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0
[   89.975347][ T5252] Read of size 4 at addr ffff8881636bb06d by task syz.6.1985/5252
[   89.983136][ T5252] 
[   89.985471][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G        W         syzkaller #0
[   89.994215][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.004265][ T5252] Call Trace:
[   90.007549][ T5252]  __dump_stack+0x21/0x24
[   90.011871][ T5252]  dump_stack_lvl+0x1a7/0x208
[   90.016542][ T5252]  ? show_regs_print_info+0x18/0x18
[   90.021736][ T5252]  ? thaw_kernel_threads+0x220/0x220
[   90.027016][ T5252]  print_address_description+0x7f/0x2c0
[   90.032552][ T5252]  ? rb_buffer_peek+0x71a/0x7a0
[   90.037394][ T5252]  kasan_report+0x100/0x140
[   90.041889][ T5252]  ? rb_buffer_peek+0x71a/0x7a0
[   90.046732][ T5252]  __asan_report_load4_noabort+0x14/0x20
[   90.052357][ T5252]  rb_buffer_peek+0x71a/0x7a0
[   90.057025][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   90.062391][ T5252]  ring_buffer_peek+0x183/0x360
[   90.067247][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   90.072795][ T5252]  ? ring_buffer_empty+0x450/0x450
[   90.077897][ T5252]  peek_next_entry+0x141/0x200
[   90.082671][ T5252]  __find_next_entry+0x534/0x6b0
[   90.087600][ T5252]  ? rb_advance_reader+0x39c/0x6b0
[   90.092720][ T5252]  ? ring_buffer_consume+0x304/0x350
[   90.097999][ T5252]  ? trace_find_next_entry+0x370/0x370
[   90.103452][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   90.108998][ T5252]  ? print_trace_line+0x385/0x690
[   90.114014][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   90.118945][ T5252]  ? s_show+0x320/0x320
[   90.123099][ T5252]  vfs_read+0x209/0xa50
[   90.127247][ T5252]  ? kernel_read+0x70/0x70
[   90.131655][ T5252]  ? __kasan_check_write+0x14/0x20
[   90.136766][ T5252]  ? mutex_lock+0x92/0xf0
[   90.141106][ T5252]  ? mutex_trylock+0xb0/0xb0
[   90.145701][ T5252]  ? __fget_files+0x2e1/0x340
[   90.150387][ T5252]  ? __fdget_pos+0x2d2/0x380
[   90.154980][ T5252]  ? ksys_read+0x70/0x260
[   90.159312][ T5252]  ksys_read+0x14a/0x260
[   90.163552][ T5252]  ? vfs_write+0xd70/0xd70
[   90.167958][ T5252]  ? mntput+0x5f/0xc0
[   90.171932][ T5252]  ? __kasan_check_read+0x11/0x20
[   90.176950][ T5252]  __x64_sys_read+0x7b/0x90
[   90.181449][ T5252]  do_syscall_64+0x31/0x40
[   90.185857][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   90.191739][ T5252] RIP: 0033:0x7f58a9306b19
[   90.196148][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.215743][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   90.224148][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   90.232119][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   90.240090][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   90.248053][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.256024][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   90.263995][ T5252] 
[   90.266318][ T5252] The buggy address belongs to the page:
[   90.271946][ T5252] page:ffffea00058daec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1636bb
[   90.282167][ T5252] flags: 0x4000000000000000()
[   90.286840][ T5252] raw: 4000000000000000 ffffea00058daec8 ffffea00058daec8 0000000000000000
[   90.295416][ T5252] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   90.303986][ T5252] page dumped because: kasan: bad access detected
[   90.310388][ T5252] page_owner info is not present (never set?)
[   90.316438][ T5252] 
[   90.318756][ T5252] Memory state around the buggy address:
[   90.324377][ T5252]  ffff8881636baf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   90.332433][ T5252]  ffff8881636baf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   90.340485][ T5252] >ffff8881636bb000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   90.348538][ T5252]                                                           ^
[   90.355985][ T5252]  ffff8881636bb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   90.364036][ T5252]  ffff8881636bb100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   90.372091][ T5252] ==================================================================
[   90.380138][ T5252] Disabling lock debugging due to kernel taint
[   90.387227][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   90.398652][ T5252] ------------[ cut here ]------------
[   90.404199][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   90.414422][ T5252] Modules linked in:
[   90.418321][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   90.427083][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.437141][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   90.442940][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   90.462538][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010002
[   90.468603][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   90.476568][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   90.484532][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   90.492498][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365005d
[   90.500466][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   90.508443][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   90.517368][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.523947][ T5252] CR2: 000055555fd4b908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   90.532001][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.539968][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   90.547937][ T5252] Call Trace:
[   90.551229][ T5252]  ? trace_seq_printf+0x201/0x330
[   90.556247][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   90.561875][ T5252]  ? __kasan_check_write+0x14/0x20
[   90.566980][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   90.571652][ T5252]  rb_buffer_peek+0x60/0x7a0
[   90.576235][ T5252]  ring_buffer_consume+0x1b2/0x350
[   90.581340][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   90.586879][ T5252]  ? print_trace_line+0x385/0x690
[   90.591901][ T5252]  tracing_read_pipe+0x599/0xab0
[   90.596830][ T5252]  ? s_show+0x320/0x320
[   90.600979][ T5252]  vfs_read+0x209/0xa50
[   90.605129][ T5252]  ? kernel_read+0x70/0x70
[   90.609554][ T5252]  ? __kasan_check_write+0x14/0x20
[   90.614655][ T5252]  ? mutex_lock+0x92/0xf0
[   90.618982][ T5252]  ? mutex_trylock+0xb0/0xb0
[   90.623563][ T5252]  ? __fget_files+0x2e1/0x340
[   90.628239][ T5252]  ? __fdget_pos+0x2d2/0x380
[   90.632817][ T5252]  ? ksys_read+0x70/0x260
[   90.637136][ T5252]  ksys_read+0x14a/0x260
[   90.641372][ T5252]  ? vfs_write+0xd70/0xd70
[   90.645793][ T5252]  ? mntput+0x5f/0xc0
[   90.649766][ T5252]  ? __kasan_check_read+0x11/0x20
[   90.654784][ T5252]  __x64_sys_read+0x7b/0x90
[   90.659281][ T5252]  do_syscall_64+0x31/0x40
[   90.663690][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   90.669574][ T5252] RIP: 0033:0x7f58a9306b19
[   90.673982][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.693581][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   90.701986][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   90.709952][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   90.717920][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   90.725884][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.733854][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   90.741819][ T5252] ---[ end trace abb898edc2c65822 ]---
[   90.747307][ T5252] ------------[ cut here ]------------
[   90.752777][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   90.762997][ T5252] Modules linked in:
[   90.766897][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   90.775645][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.785696][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   90.791493][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   90.811094][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   90.817161][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   90.825127][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   90.833095][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   90.841064][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365005d
[   90.849031][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   90.857001][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   90.865920][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.872499][ T5252] CR2: 000055555fd4b908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   90.880473][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.888442][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   90.896405][ T5252] Call Trace:
[   90.899693][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   90.905320][ T5252]  ? __kasan_check_write+0x14/0x20
[   90.910426][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   90.915182][ T5252]  rb_advance_reader+0x2b/0x6b0
[   90.920024][ T5252]  ring_buffer_consume+0x1e6/0x350
[   90.925131][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   90.930668][ T5252]  ? print_trace_line+0x385/0x690
[   90.935787][ T5252]  tracing_read_pipe+0x599/0xab0
[   90.940718][ T5252]  ? s_show+0x320/0x320
[   90.944864][ T5252]  vfs_read+0x209/0xa50
[   90.949017][ T5252]  ? kernel_read+0x70/0x70
[   90.953430][ T5252]  ? __kasan_check_write+0x14/0x20
[   90.958532][ T5252]  ? mutex_lock+0x92/0xf0
[   90.962864][ T5252]  ? mutex_trylock+0xb0/0xb0
[   90.967450][ T5252]  ? __fget_files+0x2e1/0x340
[   90.972121][ T5252]  ? __fdget_pos+0x2d2/0x380
[   90.976701][ T5252]  ? ksys_read+0x70/0x260
[   90.981020][ T5252]  ksys_read+0x14a/0x260
[   90.985281][ T5252]  ? vfs_write+0xd70/0xd70
[   90.989689][ T5252]  ? mntput+0x5f/0xc0
[   90.993684][ T5252]  ? __kasan_check_read+0x11/0x20
[   90.998699][ T5252]  __x64_sys_read+0x7b/0x90
[   91.003194][ T5252]  do_syscall_64+0x31/0x40
[   91.007606][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   91.013491][ T5252] RIP: 0033:0x7f58a9306b19
[   91.017905][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.037501][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.045911][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   91.053888][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   91.061852][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   91.069818][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.077784][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   91.085752][ T5252] ---[ end trace abb898edc2c65823 ]---
[   91.092622][ T5252] ------------[ cut here ]------------
[   91.098121][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   91.108361][ T5252] Modules linked in:
[   91.112262][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   91.121008][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   91.131070][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   91.136876][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   91.156565][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   91.162627][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   91.170592][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   91.178559][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   91.186527][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650061
[   91.194508][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   91.202486][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   91.211416][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   91.217996][ T5252] CR2: 0000001b2d921ff8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   91.225969][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   91.233933][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   91.241894][ T5252] Call Trace:
[   91.245183][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   91.250811][ T5252]  ? __kasan_check_write+0x14/0x20
[   91.255914][ T5252]  ? __kasan_check_write+0x14/0x20
[   91.261015][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   91.265683][ T5252]  rb_buffer_peek+0x60/0x7a0
[   91.270274][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   91.275637][ T5252]  ring_buffer_peek+0x183/0x360
[   91.280487][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   91.286025][ T5252]  ? ring_buffer_empty+0x450/0x450
[   91.291136][ T5252]  ? preempt_schedule+0xbc/0xd0
[   91.295984][ T5252]  peek_next_entry+0x141/0x200
[   91.300748][ T5252]  __find_next_entry+0x534/0x6b0
[   91.305699][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   91.311079][ T5252]  ? ring_buffer_consume+0x304/0x350
[   91.316357][ T5252]  ? trace_find_next_entry+0x370/0x370
[   91.321809][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   91.327348][ T5252]  ? print_trace_line+0x385/0x690
[   91.332368][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   91.337296][ T5252]  ? s_show+0x320/0x320
[   91.341446][ T5252]  vfs_read+0x209/0xa50
[   91.345591][ T5252]  ? kernel_read+0x70/0x70
[   91.350001][ T5252]  ? __kasan_check_write+0x14/0x20
[   91.355104][ T5252]  ? mutex_lock+0x92/0xf0
[   91.359424][ T5252]  ? mutex_trylock+0xb0/0xb0
[   91.364003][ T5252]  ? __fget_files+0x2e1/0x340
[   91.368670][ T5252]  ? __fdget_pos+0x2d2/0x380
[   91.373251][ T5252]  ? ksys_read+0x70/0x260
[   91.377572][ T5252]  ksys_read+0x14a/0x260
[   91.381807][ T5252]  ? vfs_write+0xd70/0xd70
[   91.386220][ T5252]  ? mntput+0x5f/0xc0
[   91.390198][ T5252]  ? __kasan_check_read+0x11/0x20
[   91.395211][ T5252]  __x64_sys_read+0x7b/0x90
[   91.399712][ T5252]  do_syscall_64+0x31/0x40
[   91.404130][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   91.410015][ T5252] RIP: 0033:0x7f58a9306b19
[   91.414424][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.434035][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.442454][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   91.450427][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   91.458391][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   91.466357][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.474323][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   91.482310][ T5252] ---[ end trace abb898edc2c65824 ]---
[   91.496990][ T5252] ------------[ cut here ]------------
[   91.502514][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   91.512759][ T5252] Modules linked in:
[   91.516687][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   91.517642][ T5253] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   91.525452][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   91.525474][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   91.525493][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   91.559147][ T5253] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   91.567304][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010006
[   91.567319][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   91.567327][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   91.567336][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   91.567343][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650061
[   91.567363][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   91.583296][ T5253] F2FS-fs (loop5): invalid crc value
[   91.589550][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   91.589559][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   91.589567][ T5252] CR2: 0000001b2d921ff8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   91.589580][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   91.589587][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   91.589591][ T5252] Call Trace:
[   91.589617][ T5252]  ? trace_seq_printf+0x201/0x330
[   91.613145][ T5253] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   91.613555][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   91.613577][ T5252]  ? __kasan_check_write+0x14/0x20
[   91.638431][ T5253] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   91.642341][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   91.642360][ T5252]  rb_buffer_peek+0x60/0x7a0
[   91.650502][ T5253] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   91.658396][ T5252]  ring_buffer_consume+0x1b2/0x350
[   91.658409][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   91.658420][ T5252]  ? print_trace_line+0x385/0x690
[   91.658437][ T5252]  tracing_read_pipe+0x599/0xab0
[   91.740919][ T5252]  ? s_show+0x320/0x320
[   91.745099][ T5252]  vfs_read+0x209/0xa50
[   91.749299][ T5252]  ? kernel_read+0x70/0x70
[   91.753743][ T5252]  ? __kasan_check_write+0x14/0x20
[   91.758868][ T5252]  ? mutex_lock+0x92/0xf0
[   91.763189][ T5252]  ? mutex_trylock+0xb0/0xb0
[   91.767779][ T5252]  ? __fget_files+0x2e1/0x340
[   91.772456][ T5252]  ? __fdget_pos+0x2d2/0x380
[   91.777054][ T5252]  ? ksys_read+0x70/0x260
[   91.781398][ T5252]  ksys_read+0x14a/0x260
[   91.785635][ T5252]  ? vfs_write+0xd70/0xd70
[   91.790047][ T5252]  ? mntput+0x5f/0xc0
[   91.794024][ T5252]  ? __kasan_check_read+0x11/0x20
[   91.799124][ T5252]  __x64_sys_read+0x7b/0x90
[   91.803615][ T5252]  do_syscall_64+0x31/0x40
[   91.808020][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   91.813899][ T5252] RIP: 0033:0x7f58a9306b19
[   91.818332][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.837939][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.846345][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   91.854311][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   91.862282][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   91.870248][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.878217][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   91.886191][ T5252] ---[ end trace abb898edc2c65825 ]---
[   91.891692][ T5252] ------------[ cut here ]------------
[   91.897145][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   91.907374][ T5252] Modules linked in:
[   91.911262][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   91.920007][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   91.930065][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   91.935867][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   91.955733][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   91.961811][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   91.969858][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   91.977827][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   91.985790][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650061
[   91.993764][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   92.001813][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   92.010727][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.017302][ T5252] CR2: 0000001b2d921ff8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   92.025264][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.033223][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.041181][ T5252] Call Trace:
[   92.044464][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   92.050085][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.055184][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   92.059867][ T5252]  rb_advance_reader+0x2b/0x6b0
[   92.064703][ T5252]  ring_buffer_consume+0x1e6/0x350
[   92.069806][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   92.075336][ T5252]  ? print_trace_line+0x385/0x690
[   92.080350][ T5252]  tracing_read_pipe+0x599/0xab0
[   92.085274][ T5252]  ? s_show+0x320/0x320
[   92.089429][ T5252]  vfs_read+0x209/0xa50
[   92.093572][ T5252]  ? kernel_read+0x70/0x70
[   92.097977][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.103073][ T5252]  ? mutex_lock+0x92/0xf0
[   92.107392][ T5252]  ? mutex_trylock+0xb0/0xb0
[   92.111970][ T5252]  ? __fget_files+0x2e1/0x340
[   92.116633][ T5252]  ? __fdget_pos+0x2d2/0x380
[   92.121225][ T5252]  ? ksys_read+0x70/0x260
[   92.125563][ T5252]  ksys_read+0x14a/0x260
[   92.129795][ T5252]  ? vfs_write+0xd70/0xd70
[   92.134194][ T5252]  ? mntput+0x5f/0xc0
[   92.138167][ T5252]  ? __kasan_check_read+0x11/0x20
[   92.143189][ T5252]  __x64_sys_read+0x7b/0x90
[   92.147681][ T5252]  do_syscall_64+0x31/0x40
[   92.152096][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   92.157986][ T5252] RIP: 0033:0x7f58a9306b19
[   92.162391][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.181982][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.190399][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   92.198366][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   92.206326][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   92.214303][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.222264][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   92.230249][ T5252] ---[ end trace abb898edc2c65826 ]---
[   92.245946][ T5252] ------------[ cut here ]------------
[   92.251462][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   92.261702][ T5252] Modules linked in:
[   92.265602][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   92.274351][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   92.284406][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   92.290201][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   92.309811][ T5252] RSP: 0000:ffffc90000c677c0 EFLAGS: 00010002
[   92.315874][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   92.323838][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   92.331828][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   92.339878][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650065
[   92.347932][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   92.355899][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   92.364818][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.371395][ T5252] CR2: 0000001b2e012ff8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   92.379362][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.387328][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.395287][ T5252] Call Trace:
[   92.398584][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   92.404228][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.409353][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.414472][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   92.419147][ T5252]  rb_buffer_peek+0x60/0x7a0
[   92.423731][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   92.429095][ T5252]  ring_buffer_peek+0x183/0x360
[   92.434116][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   92.439663][ T5252]  ? ring_buffer_empty+0x450/0x450
[   92.444770][ T5252]  ? preempt_schedule+0xbc/0xd0
[   92.449614][ T5252]  peek_next_entry+0x141/0x200
[   92.454373][ T5252]  __find_next_entry+0x534/0x6b0
[   92.459307][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   92.464671][ T5252]  ? ring_buffer_consume+0x304/0x350
[   92.469947][ T5252]  ? trace_find_next_entry+0x370/0x370
[   92.475397][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   92.480932][ T5252]  ? print_trace_line+0x385/0x690
[   92.485947][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   92.490875][ T5252]  ? s_show+0x320/0x320
[   92.495021][ T5252]  vfs_read+0x209/0xa50
[   92.499253][ T5252]  ? kernel_read+0x70/0x70
[   92.503662][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.508765][ T5252]  ? mutex_lock+0x92/0xf0
[   92.513084][ T5252]  ? mutex_trylock+0xb0/0xb0
[   92.517665][ T5252]  ? __fget_files+0x2e1/0x340
[   92.522337][ T5252]  ? __fdget_pos+0x2d2/0x380
[   92.526917][ T5252]  ? ksys_read+0x70/0x260
[   92.531238][ T5252]  ksys_read+0x14a/0x260
[   92.535470][ T5252]  ? vfs_write+0xd70/0xd70
[   92.539874][ T5252]  ? mntput+0x5f/0xc0
[   92.543846][ T5252]  ? __kasan_check_read+0x11/0x20
[   92.548859][ T5252]  __x64_sys_read+0x7b/0x90
[   92.553359][ T5252]  do_syscall_64+0x31/0x40
[   92.557768][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   92.563651][ T5252] RIP: 0033:0x7f58a9306b19
[   92.568064][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.587661][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.596332][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   92.604300][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   92.612267][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   92.620231][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.628200][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   92.636175][ T5252] ---[ end trace abb898edc2c65827 ]---
[   92.645491][ T5252] ------------[ cut here ]------------
[   92.651000][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   92.661243][ T5252] Modules linked in:
[   92.665154][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   92.673914][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   92.683979][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   92.689789][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   92.709390][ T5252] RSP: 0000:ffffc90000c67940 EFLAGS: 00010002
[   92.715451][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   92.723417][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   92.731386][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   92.739354][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650065
[   92.747324][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   92.755289][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   92.764214][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.770794][ T5252] CR2: 000055557cd76908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   92.778765][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.786818][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.794783][ T5252] Call Trace:
[   92.798074][ T5252]  ? trace_seq_printf+0x201/0x330
[   92.803106][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   92.808733][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.813836][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   92.818511][ T5252]  rb_buffer_peek+0x60/0x7a0
[   92.823111][ T5252]  ring_buffer_consume+0x1b2/0x350
[   92.828213][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   92.833754][ T5252]  ? print_trace_line+0x385/0x690
[   92.838770][ T5252]  tracing_read_pipe+0x599/0xab0
[   92.843703][ T5252]  ? s_show+0x320/0x320
[   92.847851][ T5252]  vfs_read+0x209/0xa50
[   92.852000][ T5252]  ? kernel_read+0x70/0x70
[   92.856413][ T5252]  ? __kasan_check_write+0x14/0x20
[   92.861519][ T5252]  ? mutex_lock+0x92/0xf0
[   92.865840][ T5252]  ? mutex_trylock+0xb0/0xb0
[   92.870419][ T5252]  ? __fget_files+0x2e1/0x340
[   92.875087][ T5252]  ? __fdget_pos+0x2d2/0x380
[   92.879668][ T5252]  ? ksys_read+0x70/0x260
[   92.883989][ T5252]  ksys_read+0x14a/0x260
[   92.888223][ T5252]  ? vfs_write+0xd70/0xd70
[   92.892630][ T5252]  ? mntput+0x5f/0xc0
[   92.896605][ T5252]  ? __kasan_check_read+0x11/0x20
[   92.901630][ T5252]  __x64_sys_read+0x7b/0x90
[   92.906128][ T5252]  do_syscall_64+0x31/0x40
[   92.910538][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   92.916423][ T5252] RIP: 0033:0x7f58a9306b19
[   92.920832][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.940427][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.948833][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   92.956800][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   92.964766][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   92.972729][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.980692][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   92.988658][ T5252] ---[ end trace abb898edc2c65828 ]---
[   92.994144][ T5252] ------------[ cut here ]------------
[   92.999603][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   93.009822][ T5252] Modules linked in:
[   93.013717][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   93.022463][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   93.032516][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   93.038316][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   93.057912][ T5252] RSP: 0000:ffffc90000c67960 EFLAGS: 00010006
[   93.063970][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   93.071938][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   93.079904][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   93.087870][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650065
[   93.095834][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   93.103813][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   93.112732][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.119310][ T5252] CR2: 000055557cd76908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   93.127278][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.135241][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.143203][ T5252] Call Trace:
[   93.146488][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   93.152114][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.157217][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   93.161883][ T5252]  rb_advance_reader+0x2b/0x6b0
[   93.166727][ T5252]  ring_buffer_consume+0x1e6/0x350
[   93.171840][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   93.177381][ T5252]  ? print_trace_line+0x385/0x690
[   93.182398][ T5252]  tracing_read_pipe+0x599/0xab0
[   93.187327][ T5252]  ? s_show+0x320/0x320
[   93.191477][ T5252]  vfs_read+0x209/0xa50
[   93.195624][ T5252]  ? kernel_read+0x70/0x70
[   93.200072][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.205180][ T5252]  ? mutex_lock+0x92/0xf0
[   93.209500][ T5252]  ? mutex_trylock+0xb0/0xb0
[   93.214082][ T5252]  ? __fget_files+0x2e1/0x340
[   93.218750][ T5252]  ? __fdget_pos+0x2d2/0x380
[   93.223333][ T5252]  ? ksys_read+0x70/0x260
[   93.227654][ T5252]  ksys_read+0x14a/0x260
[   93.231889][ T5252]  ? vfs_write+0xd70/0xd70
[   93.236306][ T5252]  ? mntput+0x5f/0xc0
[   93.240296][ T5252]  ? __kasan_check_read+0x11/0x20
[   93.245327][ T5252]  __x64_sys_read+0x7b/0x90
[   93.249844][ T5252]  do_syscall_64+0x31/0x40
[   93.254261][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   93.260145][ T5252] RIP: 0033:0x7f58a9306b19
[   93.264557][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.284155][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   93.292565][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   93.295799][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.300538][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   93.315966][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   93.323930][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.331902][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   93.339871][ T5252] ---[ end trace abb898edc2c65829 ]---
[   93.353236][ T5252] ------------[ cut here ]------------
[   93.358753][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   93.368992][ T5252] Modules linked in:
[   93.372899][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   93.381646][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   93.391712][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   93.397513][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   93.417113][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010006
[   93.423177][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   93.431142][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   93.439107][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   93.447090][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650069
[   93.455080][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   93.463065][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   93.472168][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.478754][ T5252] CR2: 000055557e49f908 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   93.486730][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.494696][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.502747][ T5252] Call Trace:
[   93.506042][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   93.511669][ T5252]  ? _raw_spin_unlock_irq+0x4e/0x70
[   93.516862][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.521983][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   93.526657][ T5252]  rb_buffer_peek+0x60/0x7a0
[   93.531238][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   93.536600][ T5252]  ring_buffer_peek+0x183/0x360
[   93.541444][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   93.546998][ T5252]  ? ring_buffer_empty+0x450/0x450
[   93.552191][ T5252]  ? preempt_schedule+0xbc/0xd0
[   93.557032][ T5252]  peek_next_entry+0x141/0x200
[   93.561795][ T5252]  __find_next_entry+0x534/0x6b0
[   93.566739][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   93.572101][ T5252]  ? ring_buffer_consume+0x304/0x350
[   93.577379][ T5252]  ? trace_find_next_entry+0x370/0x370
[   93.582837][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   93.588386][ T5252]  ? print_trace_line+0x385/0x690
[   93.593400][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   93.598335][ T5252]  ? s_show+0x320/0x320
[   93.602484][ T5252]  vfs_read+0x209/0xa50
[   93.606631][ T5252]  ? kernel_read+0x70/0x70
[   93.611039][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.616143][ T5252]  ? mutex_lock+0x92/0xf0
[   93.620489][ T5252]  ? mutex_trylock+0xb0/0xb0
[   93.625103][ T5252]  ? __fget_files+0x2e1/0x340
[   93.629795][ T5252]  ? __fdget_pos+0x2d2/0x380
[   93.634381][ T5252]  ? ksys_read+0x70/0x260
[   93.638707][ T5252]  ksys_read+0x14a/0x260
[   93.642984][ T5252]  ? vfs_write+0xd70/0xd70
[   93.647391][ T5252]  ? mntput+0x5f/0xc0
[   93.651370][ T5252]  ? __kasan_check_read+0x11/0x20
[   93.656387][ T5252]  __x64_sys_read+0x7b/0x90
[   93.660885][ T5252]  do_syscall_64+0x31/0x40
[   93.665297][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   93.671180][ T5252] RIP: 0033:0x7f58a9306b19
[   93.675593][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.695192][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   93.703597][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   93.711936][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   93.719987][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   93.727953][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.735919][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   93.743889][ T5252] ---[ end trace abb898edc2c6582a ]---
[   93.750702][ T5252] ------------[ cut here ]------------
[   93.756207][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   93.766436][ T5252] Modules linked in:
[   93.770335][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   93.779081][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   93.789138][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   93.794941][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   93.814542][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010002
[   93.820603][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   93.828567][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   93.836534][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   93.844502][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650069
[   93.852472][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   93.860444][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   93.869373][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.875952][ T5252] CR2: 000055557cd76908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   93.883922][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.891886][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.899848][ T5252] Call Trace:
[   93.903136][ T5252]  ? trace_seq_printf+0x201/0x330
[   93.908243][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   93.913869][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.918970][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   93.923647][ T5252]  rb_buffer_peek+0x60/0x7a0
[   93.928231][ T5252]  ring_buffer_consume+0x1b2/0x350
[   93.933335][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   93.938877][ T5252]  ? print_trace_line+0x385/0x690
[   93.943894][ T5252]  tracing_read_pipe+0x599/0xab0
[   93.948825][ T5252]  ? s_show+0x320/0x320
[   93.952973][ T5252]  vfs_read+0x209/0xa50
[   93.957120][ T5252]  ? kernel_read+0x70/0x70
[   93.961529][ T5252]  ? __kasan_check_write+0x14/0x20
[   93.966641][ T5252]  ? mutex_lock+0x92/0xf0
[   93.970963][ T5252]  ? mutex_trylock+0xb0/0xb0
[   93.975550][ T5252]  ? __fget_files+0x2e1/0x340
[   93.980222][ T5252]  ? __fdget_pos+0x2d2/0x380
[   93.984802][ T5252]  ? ksys_read+0x70/0x260
[   93.989122][ T5252]  ksys_read+0x14a/0x260
[   93.993369][ T5252]  ? vfs_write+0xd70/0xd70
[   93.997777][ T5252]  ? mntput+0x5f/0xc0
[   94.001751][ T5252]  ? __kasan_check_read+0x11/0x20
[   94.006766][ T5252]  __x64_sys_read+0x7b/0x90
[   94.011263][ T5252]  do_syscall_64+0x31/0x40
[   94.015675][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.021560][ T5252] RIP: 0033:0x7f58a9306b19
[   94.025969][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.045566][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.053973][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   94.061940][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   94.069905][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   94.077869][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.085835][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   94.093802][ T5252] ---[ end trace abb898edc2c6582b ]---
[   94.099290][ T5252] ------------[ cut here ]------------
[   94.104840][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   94.115054][ T5252] Modules linked in:
[   94.118945][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   94.127692][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   94.137747][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   94.143545][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   94.163138][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   94.169200][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   94.177170][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   94.185135][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   94.193110][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650069
[   94.201076][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   94.209042][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   94.217962][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.224537][ T5252] CR2: 000055557cd76908 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   94.232505][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.240480][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.248450][ T5252] Call Trace:
[   94.251737][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   94.257362][ T5252]  ? __kasan_check_write+0x14/0x20
[   94.262473][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   94.267150][ T5252]  rb_advance_reader+0x2b/0x6b0
[   94.272000][ T5252]  ring_buffer_consume+0x1e6/0x350
[   94.277105][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   94.282641][ T5252]  ? print_trace_line+0x385/0x690
[   94.287657][ T5252]  tracing_read_pipe+0x599/0xab0
[   94.292589][ T5252]  ? s_show+0x320/0x320
[   94.296737][ T5252]  vfs_read+0x209/0xa50
[   94.300888][ T5252]  ? kernel_read+0x70/0x70
[   94.305297][ T5252]  ? __kasan_check_write+0x14/0x20
[   94.310400][ T5252]  ? mutex_lock+0x92/0xf0
[   94.314722][ T5252]  ? mutex_trylock+0xb0/0xb0
[   94.319305][ T5252]  ? __fget_files+0x2e1/0x340
[   94.323974][ T5252]  ? __fdget_pos+0x2d2/0x380
[   94.328555][ T5252]  ? ksys_read+0x70/0x260
[   94.332875][ T5252]  ksys_read+0x14a/0x260
[   94.337109][ T5252]  ? vfs_write+0xd70/0xd70
[   94.341517][ T5252]  ? mntput+0x5f/0xc0
[   94.345492][ T5252]  ? __kasan_check_read+0x11/0x20
[   94.350506][ T5252]  __x64_sys_read+0x7b/0x90
[   94.355004][ T5252]  do_syscall_64+0x31/0x40
[   94.359414][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.365298][ T5252] RIP: 0033:0x7f58a9306b19
[   94.369713][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.389425][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.397856][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   94.405833][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   94.413802][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   94.421778][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.429742][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   94.437712][ T5252] ---[ end trace abb898edc2c6582c ]---
[   94.443889][ T5252] ------------[ cut here ]------------
[   94.449391][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   94.459631][ T5252] Modules linked in:
[   94.463548][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   94.472315][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   94.482397][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   94.488219][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   94.507828][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   94.513901][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   94.521876][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   94.529841][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   94.537805][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365006d
[   94.545770][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   94.553736][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   94.562656][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.569238][ T5252] CR2: 000055557e49f908 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   94.577208][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.585174][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.593139][ T5252] Call Trace:
[   94.596430][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   94.602054][ T5252]  ? __kasan_check_write+0x14/0x20
[   94.607157][ T5252]  ? __kasan_check_write+0x14/0x20
[   94.612256][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   94.616924][ T5252]  rb_buffer_peek+0x60/0x7a0
[   94.621505][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   94.626869][ T5252]  ring_buffer_peek+0x183/0x360
[   94.631731][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   94.637266][ T5252]  ? ring_buffer_empty+0x450/0x450
[   94.642367][ T5252]  ? preempt_schedule+0xbc/0xd0
[   94.647230][ T5252]  peek_next_entry+0x141/0x200
[   94.651997][ T5252]  __find_next_entry+0x534/0x6b0
[   94.656933][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   94.662302][ T5252]  ? ring_buffer_consume+0x304/0x350
[   94.667581][ T5252]  ? trace_find_next_entry+0x370/0x370
[   94.673030][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   94.678566][ T5252]  ? print_trace_line+0x385/0x690
[   94.683581][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   94.688509][ T5252]  ? s_show+0x320/0x320
[   94.692657][ T5252]  vfs_read+0x209/0xa50
[   94.696813][ T5252]  ? kernel_read+0x70/0x70
[   94.701222][ T5252]  ? __kasan_check_write+0x14/0x20
[   94.706328][ T5252]  ? mutex_lock+0x92/0xf0
[   94.710648][ T5252]  ? mutex_trylock+0xb0/0xb0
[   94.715230][ T5252]  ? __fget_files+0x2e1/0x340
[   94.719900][ T5252]  ? __fdget_pos+0x2d2/0x380
[   94.724478][ T5252]  ? ksys_read+0x70/0x260
[   94.728798][ T5252]  ksys_read+0x14a/0x260
[   94.733033][ T5252]  ? vfs_write+0xd70/0xd70
[   94.737443][ T5252]  ? mntput+0x5f/0xc0
[   94.741416][ T5252]  ? __kasan_check_read+0x11/0x20
[   94.746435][ T5252]  __x64_sys_read+0x7b/0x90
[   94.750934][ T5252]  do_syscall_64+0x31/0x40
[   94.755353][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.761237][ T5252] RIP: 0033:0x7f58a9306b19
[   94.765646][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.785248][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.793655][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   94.801624][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   94.809588][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   94.817554][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.825520][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   94.833486][ T5252] ---[ end trace abb898edc2c6582d ]---
[   94.841086][ T5252] ------------[ cut here ]------------
[   94.846613][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   94.856844][ T5252] Modules linked in:
[   94.860733][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   94.869469][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   94.879526][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   94.885337][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   94.904945][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010002
[   94.910996][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   94.919067][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   94.927047][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   94.935022][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365006d
[   94.942981][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   94.950968][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   94.959892][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.966472][ T5252] CR2: 00007f36b4f852f8 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   94.974445][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.982974][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.990929][ T5252] Call Trace:
[   94.994217][ T5252]  ? trace_seq_printf+0x201/0x330
[   94.999225][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   95.004840][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.009932][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   95.014603][ T5252]  rb_buffer_peek+0x60/0x7a0
[   95.019190][ T5252]  ring_buffer_consume+0x1b2/0x350
[   95.024291][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   95.029828][ T5252]  ? print_trace_line+0x385/0x690
[   95.034832][ T5252]  tracing_read_pipe+0x599/0xab0
[   95.039747][ T5252]  ? s_show+0x320/0x320
[   95.043972][ T5252]  vfs_read+0x209/0xa50
[   95.048215][ T5252]  ? kernel_read+0x70/0x70
[   95.052611][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.057703][ T5252]  ? mutex_lock+0x92/0xf0
[   95.062023][ T5252]  ? mutex_trylock+0xb0/0xb0
[   95.066594][ T5252]  ? __fget_files+0x2e1/0x340
[   95.071259][ T5252]  ? __fdget_pos+0x2d2/0x380
[   95.075838][ T5252]  ? ksys_read+0x70/0x260
[   95.080160][ T5252]  ksys_read+0x14a/0x260
[   95.084401][ T5252]  ? vfs_write+0xd70/0xd70
[   95.088802][ T5252]  ? mntput+0x5f/0xc0
[   95.092764][ T5252]  ? __kasan_check_read+0x11/0x20
[   95.097767][ T5252]  __x64_sys_read+0x7b/0x90
[   95.102254][ T5252]  do_syscall_64+0x31/0x40
[   95.106650][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   95.112536][ T5252] RIP: 0033:0x7f58a9306b19
[   95.116935][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.136531][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.145011][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   95.152962][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   95.160913][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   95.168863][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.176908][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   95.184867][ T5252] ---[ end trace abb898edc2c6582e ]---
[   95.190333][ T5252] ------------[ cut here ]------------
[   95.195799][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   95.206017][ T5252] Modules linked in:
[   95.209924][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   95.218683][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   95.228763][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   95.234558][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   95.254151][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   95.260206][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   95.268187][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   95.276165][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   95.284234][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365006d
[   95.292212][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   95.300178][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   95.309103][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.315675][ T5252] CR2: 00007f36b4f852f8 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   95.323643][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   95.331597][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   95.339546][ T5252] Call Trace:
[   95.342821][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   95.348434][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.353525][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   95.358182][ T5252]  rb_advance_reader+0x2b/0x6b0
[   95.363011][ T5252]  ring_buffer_consume+0x1e6/0x350
[   95.368102][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   95.373647][ T5252]  ? print_trace_line+0x385/0x690
[   95.378671][ T5252]  tracing_read_pipe+0x599/0xab0
[   95.383600][ T5252]  ? s_show+0x320/0x320
[   95.387753][ T5252]  vfs_read+0x209/0xa50
[   95.391934][ T5252]  ? kernel_read+0x70/0x70
[   95.396348][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.401446][ T5252]  ? mutex_lock+0x92/0xf0
[   95.405864][ T5252]  ? mutex_trylock+0xb0/0xb0
[   95.410434][ T5252]  ? __fget_files+0x2e1/0x340
[   95.415097][ T5252]  ? __fdget_pos+0x2d2/0x380
[   95.419683][ T5252]  ? ksys_read+0x70/0x260
[   95.424005][ T5252]  ksys_read+0x14a/0x260
[   95.428240][ T5252]  ? vfs_write+0xd70/0xd70
[   95.432641][ T5252]  ? mntput+0x5f/0xc0
[   95.436605][ T5252]  ? __kasan_check_read+0x11/0x20
[   95.441608][ T5252]  __x64_sys_read+0x7b/0x90
[   95.446092][ T5252]  do_syscall_64+0x31/0x40
[   95.450509][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   95.456383][ T5252] RIP: 0033:0x7f58a9306b19
[   95.460798][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.480387][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.488782][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   95.496754][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   95.504709][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   95.512679][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.520633][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   95.528590][ T5252] ---[ end trace abb898edc2c6582f ]---
[   95.537179][ T5252] ------------[ cut here ]------------
[   95.542693][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   95.552910][ T5252] Modules linked in:
[   95.556804][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   95.565543][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   95.575597][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   95.581386][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   95.600981][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010012
[   95.607049][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   95.615016][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   95.622998][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   95.630957][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650071
[   95.638917][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   95.646877][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   95.655802][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.662394][ T5252] CR2: 00007f36b4f852f8 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   95.670374][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   95.678421][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   95.686377][ T5252] Call Trace:
[   95.689671][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   95.695302][ T5252]  ? _raw_spin_unlock_irq+0x4e/0x70
[   95.700503][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.705596][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   95.710260][ T5252]  rb_buffer_peek+0x60/0x7a0
[   95.714840][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   95.720195][ T5252]  ring_buffer_peek+0x183/0x360
[   95.725029][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   95.730558][ T5252]  ? ring_buffer_empty+0x450/0x450
[   95.735668][ T5252]  ? preempt_schedule+0xbc/0xd0
[   95.740524][ T5252]  peek_next_entry+0x141/0x200
[   95.745271][ T5252]  __find_next_entry+0x534/0x6b0
[   95.750201][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   95.755576][ T5252]  ? ring_buffer_consume+0x304/0x350
[   95.760845][ T5252]  ? trace_find_next_entry+0x370/0x370
[   95.766301][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   95.771852][ T5252]  ? print_trace_line+0x385/0x690
[   95.776863][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   95.781792][ T5252]  ? s_show+0x320/0x320
[   95.785949][ T5252]  vfs_read+0x209/0xa50
[   95.790089][ T5252]  ? kernel_read+0x70/0x70
[   95.794490][ T5252]  ? __kasan_check_write+0x14/0x20
[   95.799599][ T5252]  ? mutex_lock+0x92/0xf0
[   95.803920][ T5252]  ? mutex_trylock+0xb0/0xb0
[   95.808495][ T5252]  ? __fget_files+0x2e1/0x340
[   95.813179][ T5252]  ? __fdget_pos+0x2d2/0x380
[   95.817765][ T5252]  ? ksys_read+0x70/0x260
[   95.822094][ T5252]  ksys_read+0x14a/0x260
[   95.826340][ T5252]  ? vfs_write+0xd70/0xd70
[   95.830758][ T5252]  ? mntput+0x5f/0xc0
[   95.834728][ T5252]  ? __kasan_check_read+0x11/0x20
[   95.839745][ T5252]  __x64_sys_read+0x7b/0x90
[   95.844268][ T5252]  do_syscall_64+0x31/0x40
[   95.848691][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   95.854576][ T5252] RIP: 0033:0x7f58a9306b19
[   95.858979][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.878574][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.886978][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   95.894953][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   95.902940][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   95.911232][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.919199][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   95.927161][ T5252] ---[ end trace abb898edc2c65830 ]---
[   95.936421][ T5252] ------------[ cut here ]------------
[   95.941916][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   95.952145][ T5252] Modules linked in:
[   95.956029][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   95.964777][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   95.974822][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   95.980622][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   96.000318][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010006
[   96.006382][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   96.014336][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   96.022314][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   96.030275][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650071
[   96.038238][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   96.046207][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   96.055129][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.061708][ T5252] CR2: 00007fe1ae3662f8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   96.069675][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   96.077642][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   96.085623][ T5252] Call Trace:
[   96.088923][ T5252]  ? trace_seq_printf+0x201/0x330
[   96.093941][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   96.099579][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.104680][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   96.109351][ T5252]  rb_buffer_peek+0x60/0x7a0
[   96.113943][ T5252]  ring_buffer_consume+0x1b2/0x350
[   96.119047][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   96.124592][ T5252]  ? print_trace_line+0x385/0x690
[   96.129608][ T5252]  tracing_read_pipe+0x599/0xab0
[   96.134537][ T5252]  ? s_show+0x320/0x320
[   96.138691][ T5252]  vfs_read+0x209/0xa50
[   96.142840][ T5252]  ? kernel_read+0x70/0x70
[   96.147253][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.152356][ T5252]  ? mutex_lock+0x92/0xf0
[   96.156678][ T5252]  ? mutex_trylock+0xb0/0xb0
[   96.161270][ T5252]  ? __fget_files+0x2e1/0x340
[   96.165937][ T5252]  ? __fdget_pos+0x2d2/0x380
[   96.170516][ T5252]  ? ksys_read+0x70/0x260
[   96.174836][ T5252]  ksys_read+0x14a/0x260
[   96.179093][ T5252]  ? vfs_write+0xd70/0xd70
[   96.183510][ T5252]  ? mntput+0x5f/0xc0
[   96.187484][ T5252]  ? __kasan_check_read+0x11/0x20
[   96.192499][ T5252]  __x64_sys_read+0x7b/0x90
[   96.196997][ T5252]  do_syscall_64+0x31/0x40
[   96.201404][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   96.207285][ T5252] RIP: 0033:0x7f58a9306b19
[   96.211709][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.231738][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.240144][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   96.248114][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   96.256079][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   96.264045][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.272016][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   96.279999][ T5252] ---[ end trace abb898edc2c65831 ]---
[   96.285484][ T5252] ------------[ cut here ]------------
[   96.290939][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   96.301157][ T5252] Modules linked in:
[   96.305059][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   96.313802][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   96.323857][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   96.329658][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   96.349255][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   96.355317][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   96.363282][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   96.371252][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   96.379216][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650071
[   96.387184][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   96.395242][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   96.404194][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.410769][ T5252] CR2: 00007fe1ae3662f8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   96.418737][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   96.426710][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   96.434767][ T5252] Call Trace:
[   96.438052][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   96.443676][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.448788][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   96.453456][ T5252]  rb_advance_reader+0x2b/0x6b0
[   96.458308][ T5252]  ring_buffer_consume+0x1e6/0x350
[   96.463410][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   96.468948][ T5252]  ? print_trace_line+0x385/0x690
[   96.473973][ T5252]  tracing_read_pipe+0x599/0xab0
[   96.478939][ T5252]  ? s_show+0x320/0x320
[   96.483088][ T5252]  vfs_read+0x209/0xa50
[   96.487240][ T5252]  ? kernel_read+0x70/0x70
[   96.491659][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.496761][ T5252]  ? mutex_lock+0x92/0xf0
[   96.501082][ T5252]  ? mutex_trylock+0xb0/0xb0
[   96.505663][ T5252]  ? __fget_files+0x2e1/0x340
[   96.510333][ T5252]  ? __fdget_pos+0x2d2/0x380
[   96.514916][ T5252]  ? ksys_read+0x70/0x260
[   96.519235][ T5252]  ksys_read+0x14a/0x260
[   96.523468][ T5252]  ? vfs_write+0xd70/0xd70
[   96.527878][ T5252]  ? mntput+0x5f/0xc0
[   96.531852][ T5252]  ? __kasan_check_read+0x11/0x20
[   96.536875][ T5252]  __x64_sys_read+0x7b/0x90
[   96.541370][ T5252]  do_syscall_64+0x31/0x40
[   96.545782][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   96.551663][ T5252] RIP: 0033:0x7f58a9306b19
[   96.556073][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.575686][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.584128][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   96.592098][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   96.600066][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   96.608031][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.615996][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   96.623965][ T5252] ---[ end trace abb898edc2c65832 ]---
[   96.635006][ T5252] ------------[ cut here ]------------
[   96.640500][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   96.650741][ T5252] Modules linked in:
[   96.654645][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   96.663384][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   96.673430][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   96.679224][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   96.698902][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   96.704966][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   96.712920][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   96.720903][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   96.728889][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650075
[   96.736849][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   96.744819][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   96.753743][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.760315][ T5252] CR2: 00007fe1ae3662f8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   96.768274][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   96.776230][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   96.784196][ T5252] Call Trace:
[   96.787474][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   96.793087][ T5252]  ? _raw_spin_unlock_irq+0x4e/0x70
[   96.798272][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.803363][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   96.808021][ T5252]  rb_buffer_peek+0x60/0x7a0
[   96.812594][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   96.818043][ T5252]  ring_buffer_peek+0x183/0x360
[   96.822873][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   96.828403][ T5252]  ? ring_buffer_empty+0x450/0x450
[   96.833494][ T5252]  ? preempt_schedule+0xbc/0xd0
[   96.838339][ T5252]  peek_next_entry+0x141/0x200
[   96.843085][ T5252]  __find_next_entry+0x534/0x6b0
[   96.848011][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   96.853366][ T5252]  ? ring_buffer_consume+0x304/0x350
[   96.858647][ T5252]  ? trace_find_next_entry+0x370/0x370
[   96.864090][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   96.869617][ T5252]  ? print_trace_line+0x385/0x690
[   96.874621][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   96.879542][ T5252]  ? s_show+0x320/0x320
[   96.883692][ T5252]  vfs_read+0x209/0xa50
[   96.887851][ T5252]  ? kernel_read+0x70/0x70
[   96.892270][ T5252]  ? __kasan_check_write+0x14/0x20
[   96.897380][ T5252]  ? mutex_lock+0x92/0xf0
[   96.901706][ T5252]  ? mutex_trylock+0xb0/0xb0
[   96.906304][ T5252]  ? __fget_files+0x2e1/0x340
[   96.910976][ T5252]  ? __fdget_pos+0x2d2/0x380
[   96.915632][ T5252]  ? ksys_read+0x70/0x260
[   96.919946][ T5252]  ksys_read+0x14a/0x260
[   96.924170][ T5252]  ? vfs_write+0xd70/0xd70
[   96.928572][ T5252]  ? mntput+0x5f/0xc0
[   96.932553][ T5252]  ? __kasan_check_read+0x11/0x20
[   96.937559][ T5252]  __x64_sys_read+0x7b/0x90
[   96.942044][ T5252]  do_syscall_64+0x31/0x40
[   96.946445][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   96.952318][ T5252] RIP: 0033:0x7f58a9306b19
[   96.956733][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.976412][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.984808][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   96.992770][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   97.000725][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   97.008698][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.016656][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   97.024628][ T5252] ---[ end trace abb898edc2c65833 ]---
[   97.031931][ T5252] ------------[ cut here ]------------
[   97.037422][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   97.047740][ T5252] Modules linked in:
[   97.051642][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   97.060389][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   97.070446][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   97.076250][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   97.095852][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010006
[   97.101926][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   97.109976][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   97.117945][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   97.125909][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650075
[   97.133876][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   97.141869][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   97.150794][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.157371][ T5252] CR2: 00007fe1ae3662f8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   97.165341][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   97.173307][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   97.181269][ T5252] Call Trace:
[   97.184559][ T5252]  ? trace_seq_printf+0x201/0x330
[   97.189577][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   97.195207][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.200310][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   97.204982][ T5252]  rb_buffer_peek+0x60/0x7a0
[   97.209563][ T5252]  ring_buffer_consume+0x1b2/0x350
[   97.214671][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   97.220211][ T5252]  ? print_trace_line+0x385/0x690
[   97.225225][ T5252]  tracing_read_pipe+0x599/0xab0
[   97.230245][ T5252]  ? s_show+0x320/0x320
[   97.234404][ T5252]  vfs_read+0x209/0xa50
[   97.238645][ T5252]  ? kernel_read+0x70/0x70
[   97.243053][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.248158][ T5252]  ? mutex_lock+0x92/0xf0
[   97.252478][ T5252]  ? mutex_trylock+0xb0/0xb0
[   97.257087][ T5252]  ? __fget_files+0x2e1/0x340
[   97.261843][ T5252]  ? __fdget_pos+0x2d2/0x380
[   97.266422][ T5252]  ? ksys_read+0x70/0x260
[   97.270741][ T5252]  ksys_read+0x14a/0x260
[   97.274980][ T5252]  ? vfs_write+0xd70/0xd70
[   97.279387][ T5252]  ? mntput+0x5f/0xc0
[   97.283363][ T5252]  ? __kasan_check_read+0x11/0x20
[   97.288378][ T5252]  __x64_sys_read+0x7b/0x90
[   97.292876][ T5252]  do_syscall_64+0x31/0x40
[   97.297288][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   97.303172][ T5252] RIP: 0033:0x7f58a9306b19
[   97.307585][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.327183][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.335590][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   97.343553][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   97.351517][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   97.359482][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.367533][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   97.375610][ T5252] ---[ end trace abb898edc2c65834 ]---
[   97.381357][ T5252] ------------[ cut here ]------------
[   97.386817][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   97.397071][ T5252] Modules linked in:
[   97.401008][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   97.409765][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   97.419832][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   97.425631][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   97.445231][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010002
[   97.451380][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   97.459344][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   97.467320][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   97.475286][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650075
[   97.483255][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   97.491224][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   97.500145][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.506738][ T5252] CR2: 00007fe1ae3662f8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   97.514718][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   97.522690][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   97.530653][ T5252] Call Trace:
[   97.533947][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   97.539572][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.544673][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   97.549344][ T5252]  rb_advance_reader+0x2b/0x6b0
[   97.554187][ T5252]  ring_buffer_consume+0x1e6/0x350
[   97.559288][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   97.564828][ T5252]  ? print_trace_line+0x385/0x690
[   97.569844][ T5252]  tracing_read_pipe+0x599/0xab0
[   97.574773][ T5252]  ? s_show+0x320/0x320
[   97.578920][ T5252]  vfs_read+0x209/0xa50
[   97.583067][ T5252]  ? kernel_read+0x70/0x70
[   97.587496][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.592624][ T5252]  ? mutex_lock+0x92/0xf0
[   97.596962][ T5252]  ? mutex_trylock+0xb0/0xb0
[   97.601545][ T5252]  ? __fget_files+0x2e1/0x340
[   97.606213][ T5252]  ? __fdget_pos+0x2d2/0x380
[   97.610794][ T5252]  ? ksys_read+0x70/0x260
[   97.615115][ T5252]  ksys_read+0x14a/0x260
[   97.619357][ T5252]  ? vfs_write+0xd70/0xd70
[   97.623763][ T5252]  ? mntput+0x5f/0xc0
[   97.627739][ T5252]  ? __kasan_check_read+0x11/0x20
[   97.632754][ T5252]  __x64_sys_read+0x7b/0x90
[   97.637253][ T5252]  do_syscall_64+0x31/0x40
[   97.641662][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   97.647544][ T5252] RIP: 0033:0x7f58a9306b19
[   97.651966][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.671583][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.679996][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   97.687961][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   97.695929][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   97.703892][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.711860][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   97.719830][ T5252] ---[ end trace abb898edc2c65835 ]---
[   97.731935][ T5252] ------------[ cut here ]------------
[   97.737446][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   97.747689][ T5252] Modules linked in:
[   97.751601][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   97.760366][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   97.770430][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   97.776218][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   97.795817][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   97.801873][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   97.809827][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   97.817782][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   97.825740][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650079
[   97.833694][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   97.841650][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   97.850559][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.857127][ T5252] CR2: 0000556a903feb78 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   97.865085][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   97.873055][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   97.881009][ T5252] Call Trace:
[   97.884305][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   97.889916][ T5252]  ? _raw_spin_unlock_irq+0x4e/0x70
[   97.895097][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.900201][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   97.904858][ T5252]  rb_buffer_peek+0x60/0x7a0
[   97.909426][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   97.914776][ T5252]  ring_buffer_peek+0x183/0x360
[   97.919605][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   97.925128][ T5252]  ? ring_buffer_empty+0x450/0x450
[   97.930231][ T5252]  ? preempt_schedule+0xbc/0xd0
[   97.935075][ T5252]  peek_next_entry+0x141/0x200
[   97.939841][ T5252]  __find_next_entry+0x534/0x6b0
[   97.944760][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   97.950113][ T5252]  ? ring_buffer_consume+0x304/0x350
[   97.955377][ T5252]  ? trace_find_next_entry+0x370/0x370
[   97.960814][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   97.966340][ T5252]  ? print_trace_line+0x385/0x690
[   97.971343][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   97.976261][ T5252]  ? s_show+0x320/0x320
[   97.980395][ T5252]  vfs_read+0x209/0xa50
[   97.984529][ T5252]  ? kernel_read+0x70/0x70
[   97.988924][ T5252]  ? __kasan_check_write+0x14/0x20
[   97.994014][ T5252]  ? mutex_lock+0x92/0xf0
[   97.998322][ T5252]  ? mutex_trylock+0xb0/0xb0
[   98.002889][ T5252]  ? __fget_files+0x2e1/0x340
[   98.007544][ T5252]  ? __fdget_pos+0x2d2/0x380
[   98.012127][ T5252]  ? ksys_read+0x70/0x260
[   98.016440][ T5252]  ksys_read+0x14a/0x260
[   98.020679][ T5252]  ? vfs_write+0xd70/0xd70
[   98.025089][ T5252]  ? mntput+0x5f/0xc0
[   98.029052][ T5252]  ? __kasan_check_read+0x11/0x20
[   98.034055][ T5252]  __x64_sys_read+0x7b/0x90
[   98.038551][ T5252]  do_syscall_64+0x31/0x40
[   98.043126][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   98.049018][ T5252] RIP: 0033:0x7f58a9306b19
[   98.053413][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.073001][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   98.081394][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   98.089350][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   98.097304][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   98.105275][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.113230][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   98.121194][ T5252] ---[ end trace abb898edc2c65836 ]---
[   98.127095][ T5252] ------------[ cut here ]------------
[   98.132581][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   98.142882][ T5252] Modules linked in:
[   98.146765][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   98.155500][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   98.165554][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   98.171343][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   98.191106][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010006
[   98.197156][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   98.205112][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   98.213066][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   98.221029][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650079
[   98.228987][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   98.236947][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   98.245867][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.252439][ T5252] CR2: 0000556a901a4f98 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   98.260406][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   98.268369][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   98.276329][ T5252] Call Trace:
[   98.279616][ T5252]  ? trace_seq_printf+0x201/0x330
[   98.284631][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   98.290256][ T5252]  ? __kasan_check_write+0x14/0x20
[   98.295443][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   98.300108][ T5252]  rb_buffer_peek+0x60/0x7a0
[   98.304689][ T5252]  ring_buffer_consume+0x1b2/0x350
[   98.309793][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   98.315332][ T5252]  ? print_trace_line+0x385/0x690
[   98.320350][ T5252]  tracing_read_pipe+0x599/0xab0
[   98.325404][ T5252]  ? s_show+0x320/0x320
[   98.329562][ T5252]  vfs_read+0x209/0xa50
[   98.333712][ T5252]  ? kernel_read+0x70/0x70
[   98.338122][ T5252]  ? __kasan_check_write+0x14/0x20
[   98.343224][ T5252]  ? mutex_lock+0x92/0xf0
[   98.347550][ T5252]  ? mutex_trylock+0xb0/0xb0
[   98.352477][ T5252]  ? __fget_files+0x2e1/0x340
[   98.357147][ T5252]  ? __fdget_pos+0x2d2/0x380
[   98.361724][ T5252]  ? ksys_read+0x70/0x260
[   98.366130][ T5252]  ksys_read+0x14a/0x260
[   98.370365][ T5252]  ? vfs_write+0xd70/0xd70
[   98.374772][ T5252]  ? mntput+0x5f/0xc0
[   98.378744][ T5252]  ? __kasan_check_read+0x11/0x20
[   98.383757][ T5252]  __x64_sys_read+0x7b/0x90
[   98.388253][ T5252]  do_syscall_64+0x31/0x40
[   98.392688][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   98.398578][ T5252] RIP: 0033:0x7f58a9306b19
[   98.402994][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.422599][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   98.431009][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   98.439111][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   98.447098][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   98.455072][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.463040][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   98.471007][ T5252] ---[ end trace abb898edc2c65837 ]---
[   98.476494][ T5252] ------------[ cut here ]------------
[   98.481957][ T5252] WARNING: CPU: 1 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   98.492178][ T5252] Modules linked in:
[   98.496073][ T5252] CPU: 1 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   98.504814][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   98.514874][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   98.520673][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   98.540268][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   98.546325][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   98.554289][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   98.562252][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   98.570225][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000063650079
[   98.578275][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   98.586243][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   98.595165][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.601739][ T5252] CR2: 0000556a901a4f98 CR3: 000000012f0fc000 CR4: 00000000003506a0
[   98.609707][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   98.617686][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   98.625656][ T5252] Call Trace:
[   98.628953][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   98.634669][ T5252]  ? __kasan_check_write+0x14/0x20
[   98.639790][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   98.644546][ T5252]  rb_advance_reader+0x2b/0x6b0
[   98.649388][ T5252]  ring_buffer_consume+0x1e6/0x350
[   98.654488][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   98.660028][ T5252]  ? print_trace_line+0x385/0x690
[   98.665052][ T5252]  tracing_read_pipe+0x599/0xab0
[   98.669979][ T5252]  ? s_show+0x320/0x320
[   98.674125][ T5252]  vfs_read+0x209/0xa50
[   98.678272][ T5252]  ? kernel_read+0x70/0x70
[   98.682692][ T5252]  ? __kasan_check_write+0x14/0x20
[   98.687793][ T5252]  ? mutex_lock+0x92/0xf0
[   98.692112][ T5252]  ? mutex_trylock+0xb0/0xb0
[   98.696689][ T5252]  ? __fget_files+0x2e1/0x340
[   98.701357][ T5252]  ? __fdget_pos+0x2d2/0x380
[   98.705939][ T5252]  ? ksys_read+0x70/0x260
[   98.710257][ T5252]  ksys_read+0x14a/0x260
[   98.714492][ T5252]  ? vfs_write+0xd70/0xd70
[   98.718896][ T5252]  ? mntput+0x5f/0xc0
[   98.722868][ T5252]  ? __kasan_check_read+0x11/0x20
[   98.727881][ T5252]  __x64_sys_read+0x7b/0x90
[   98.732378][ T5252]  do_syscall_64+0x31/0x40
[   98.736784][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   98.742754][ T5252] RIP: 0033:0x7f58a9306b19
[   98.747162][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.766768][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   98.775176][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   98.783139][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   98.791107][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   98.799070][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.807033][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   98.814998][ T5252] ---[ end trace abb898edc2c65838 ]---
[   98.821256][ T5252] ------------[ cut here ]------------
[   98.826740][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   98.836957][ T5252] Modules linked in:
[   98.840847][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   98.849586][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   98.859634][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   98.865424][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   98.885025][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   98.891076][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   98.899119][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   98.907073][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   98.915030][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365007d
[   98.923000][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   98.930980][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   98.939890][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.946456][ T5252] CR2: 0000555573fda4e8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   98.954428][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   98.962384][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   98.970421][ T5252] Call Trace:
[   98.973704][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   98.979320][ T5252]  ? _raw_spin_unlock_irq+0x4e/0x70
[   98.984501][ T5252]  ? __kasan_check_write+0x14/0x20
[   98.989593][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   98.994250][ T5252]  rb_buffer_peek+0x60/0x7a0
[   98.998824][ T5252]  ? _raw_spin_trylock_bh+0x150/0x150
[   99.004176][ T5252]  ring_buffer_peek+0x183/0x360
[   99.009013][ T5252]  ? ring_buffer_iter_empty+0x370/0x370
[   99.014555][ T5252]  ? ring_buffer_empty+0x450/0x450
[   99.019648][ T5252]  ? preempt_schedule+0xbc/0xd0
[   99.024482][ T5252]  peek_next_entry+0x141/0x200
[   99.029230][ T5252]  __find_next_entry+0x534/0x6b0
[   99.034149][ T5252]  ? preempt_schedule_thunk+0x16/0x18
[   99.039521][ T5252]  ? ring_buffer_consume+0x304/0x350
[   99.044803][ T5252]  ? trace_find_next_entry+0x370/0x370
[   99.050242][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   99.055782][ T5252]  ? print_trace_line+0x385/0x690
[   99.060792][ T5252]  tracing_read_pipe+0x3b8/0xab0
[   99.065721][ T5252]  ? s_show+0x320/0x320
[   99.069867][ T5252]  vfs_read+0x209/0xa50
[   99.074020][ T5252]  ? kernel_read+0x70/0x70
[   99.078435][ T5252]  ? __kasan_check_write+0x14/0x20
[   99.083531][ T5252]  ? mutex_lock+0x92/0xf0
[   99.087842][ T5252]  ? mutex_trylock+0xb0/0xb0
[   99.092462][ T5252]  ? __fget_files+0x2e1/0x340
[   99.097123][ T5252]  ? __fdget_pos+0x2d2/0x380
[   99.101705][ T5252]  ? ksys_read+0x70/0x260
[   99.106014][ T5252]  ksys_read+0x14a/0x260
[   99.110251][ T5252]  ? vfs_write+0xd70/0xd70
[   99.114649][ T5252]  ? mntput+0x5f/0xc0
[   99.118613][ T5252]  ? __kasan_check_read+0x11/0x20
[   99.124050][ T5252]  __x64_sys_read+0x7b/0x90
[   99.128549][ T5252]  do_syscall_64+0x31/0x40
[   99.132947][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   99.138822][ T5252] RIP: 0033:0x7f58a9306b19
[   99.143220][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.162988][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   99.171489][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   99.179443][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   99.187414][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   99.195367][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.203595][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   99.211552][ T5252] ---[ end trace abb898edc2c65839 ]---
[   99.218600][ T5252] ------------[ cut here ]------------
[   99.224082][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   99.234295][ T5252] Modules linked in:
[   99.238198][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   99.246935][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   99.256983][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   99.262790][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   99.282391][ T5252] RSP: 0018:ffffc90000c67940 EFLAGS: 00010002
[   99.288446][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   99.296403][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   99.304361][ T5252] RBP: ffffc90000c67ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   99.312323][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365007d
[   99.320386][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   99.328369][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   99.337495][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.344076][ T5252] CR2: 0000555573fda4e8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   99.352062][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   99.360022][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   99.367979][ T5252] Call Trace:
[   99.371260][ T5252]  ? trace_seq_printf+0x201/0x330
[   99.376269][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   99.381886][ T5252]  ? __kasan_check_write+0x14/0x20
[   99.386982][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   99.391649][ T5252]  rb_buffer_peek+0x60/0x7a0
[   99.396226][ T5252]  ring_buffer_consume+0x1b2/0x350
[   99.401324][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   99.406876][ T5252]  ? print_trace_line+0x385/0x690
[   99.411887][ T5252]  tracing_read_pipe+0x599/0xab0
[   99.416811][ T5252]  ? s_show+0x320/0x320
[   99.420952][ T5252]  vfs_read+0x209/0xa50
[   99.425094][ T5252]  ? kernel_read+0x70/0x70
[   99.429512][ T5252]  ? __kasan_check_write+0x14/0x20
[   99.434607][ T5252]  ? mutex_lock+0x92/0xf0
[   99.438921][ T5252]  ? mutex_trylock+0xb0/0xb0
[   99.443494][ T5252]  ? __fget_files+0x2e1/0x340
[   99.448155][ T5252]  ? __fdget_pos+0x2d2/0x380
[   99.452744][ T5252]  ? ksys_read+0x70/0x260
[   99.457057][ T5252]  ksys_read+0x14a/0x260
[   99.461285][ T5252]  ? vfs_write+0xd70/0xd70
[   99.465687][ T5252]  ? mntput+0x5f/0xc0
[   99.469667][ T5252]  ? __kasan_check_read+0x11/0x20
[   99.474676][ T5252]  __x64_sys_read+0x7b/0x90
[   99.479167][ T5252]  do_syscall_64+0x31/0x40
[   99.483585][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   99.489466][ T5252] RIP: 0033:0x7f58a9306b19
[   99.493867][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.513546][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   99.522051][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   99.530013][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   99.537983][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   99.545942][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.553899][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   99.561865][ T5252] ---[ end trace abb898edc2c6583a ]---
[   99.567348][ T5252] ------------[ cut here ]------------
[   99.572815][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   99.583036][ T5252] Modules linked in:
[   99.586926][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   99.595663][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   99.605727][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   99.611518][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   99.632317][ T5252] RSP: 0018:ffffc90000c67960 EFLAGS: 00010006
[   99.638376][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   99.646339][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   99.654296][ T5252] RBP: ffffc90000c67ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   99.662256][ T5252] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000006365007d
[   99.670210][ T5252] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   99.678167][ T5252] FS:  00007f58a7d5e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   99.687081][ T5252] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.693660][ T5252] CR2: 0000555573fda4e8 CR3: 000000012f0fc000 CR4: 00000000003506b0
[   99.701632][ T5252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   99.709599][ T5252] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   99.717551][ T5252] Call Trace:
[   99.720873][ T5252]  ? ring_buffer_read_page+0x1210/0x1210
[   99.726503][ T5252]  ? __kasan_check_write+0x14/0x20
[   99.731626][ T5252]  ? _raw_spin_lock+0x94/0xf0
[   99.736287][ T5252]  rb_advance_reader+0x2b/0x6b0
[   99.741154][ T5252]  ring_buffer_consume+0x1e6/0x350
[   99.746252][ T5252]  ? ring_buffer_iter_dropped+0x60/0x60
[   99.751780][ T5252]  ? print_trace_line+0x385/0x690
[   99.756792][ T5252]  tracing_read_pipe+0x599/0xab0
[   99.761713][ T5252]  ? s_show+0x320/0x320
[   99.765973][ T5252]  vfs_read+0x209/0xa50
[   99.770447][ T5252]  ? kernel_read+0x70/0x70
[   99.774889][ T5252]  ? __kasan_check_write+0x14/0x20
[   99.779996][ T5252]  ? mutex_lock+0x92/0xf0
[   99.784319][ T5252]  ? mutex_trylock+0xb0/0xb0
[   99.788908][ T5252]  ? __fget_files+0x2e1/0x340
[   99.793568][ T5252]  ? __fdget_pos+0x2d2/0x380
[   99.798150][ T5252]  ? ksys_read+0x70/0x260
[   99.802474][ T5252]  ksys_read+0x14a/0x260
[   99.806700][ T5252]  ? vfs_write+0xd70/0xd70
[   99.811101][ T5252]  ? mntput+0x5f/0xc0
[   99.815069][ T5252]  ? __kasan_check_read+0x11/0x20
[   99.820091][ T5252]  __x64_sys_read+0x7b/0x90
[   99.824581][ T5252]  do_syscall_64+0x31/0x40
[   99.828983][ T5252]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   99.834866][ T5252] RIP: 0033:0x7f58a9306b19
[   99.839275][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.858869][ T5252] RSP: 002b:00007f58a7d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   99.867284][ T5252] RAX: ffffffffffffffda RBX: 00007f58a958cfa0 RCX: 00007f58a9306b19
[   99.875249][ T5252] RDX: 0000000000002020 RSI: 0000200000000880 RDI: 0000000000000003
[   99.883207][ T5252] RBP: 00007f58a939eb70 R08: 0000000000000000 R09: 0000000000000000
[   99.891172][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.899142][ T5252] R13: 00007f58a958d038 R14: 00007f58a958cfa0 R15: 00007ffd9ca800b8
[   99.907227][ T5252] ---[ end trace abb898edc2c6583b ]---
[   99.913770][ T5252] ------------[ cut here ]------------
[   99.919258][ T5252] WARNING: CPU: 0 PID: 5252 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0
[   99.929494][ T5252] Modules linked in:
[   99.933394][ T5252] CPU: 0 PID: 5252 Comm: syz.6.1985 Tainted: G    B   W         syzkaller #0
[   99.942173][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   99.952231][ T5252] RIP: 0010:rb_get_reader_page+0xa78/0xbf0
[   99.958041][ T5252] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 ad 3d 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 9c 3f 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 a9 af fd ff e9 45 fe ff ff e8 9f
[   99.977650][ T5252] RSP: 0018:ffffc90000c677c0 EFLAGS: 00010002
[   99.983727][ T5252] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff81670704
[   99.991699][ T5252] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   99.999744][ T5252] RBP: ffffc90000c67938 R08: ffff88810005260b R09: 1ffff1102000a4c1