last executing test programs:

12.217233777s ago: executing program 4 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)

12.188619767s ago: executing program 4 (id=271):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
close(0xffffffffffffffff)
r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r3, &(0x7f0000000780)='333333', 0x6)
close(r3)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
close(r4)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

12.172770168s ago: executing program 4 (id=272):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

12.119991368s ago: executing program 4 (id=273):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
chdir(&(0x7f0000000140)='./file0\x00')
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

11.738857728s ago: executing program 4 (id=278):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

11.370708217s ago: executing program 4 (id=300):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff)
write(r3, &(0x7f00000006c0)='1843200', 0x7)
r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r4, &(0x7f0000000780)='33', 0x2)
close(r4)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(0x0, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb)
close(r5)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

11.370206106s ago: executing program 32 (id=300):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff)
write(r3, &(0x7f00000006c0)='1843200', 0x7)
r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r4, &(0x7f0000000780)='33', 0x2)
close(r4)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(0x0, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb)
close(r5)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

5.031892209s ago: executing program 3 (id=452):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, <r0=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180))
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='add 1-1\x00', 0x8)
write(r1, &(0x7f0000000240)='add 2-1\x00', 0x8)
close(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1-1\x00', 0x4)
write(r2, &(0x7f0000000340)='2-1\x00', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1-1\x00', 0x4)
write(r3, &(0x7f0000000400)='2-1\x00', 0x4)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/1-1/usbip_sockfd\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='3\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='3\x00', 0x2)
close(r5)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(r0, &(0x7f0000000540)="00000001000000010001000200"/48, 0x30)
write(r0, &(0x7f0000000580)="00000002000000030001000200000000000000000000000100"/48, 0x30)
write(r0, &(0x7f00000005c0)="00000001000000050001000200"/48, 0x30)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

3.595285763s ago: executing program 2 (id=487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x1000, 0x0, r2})

3.547701665s ago: executing program 2 (id=488):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
close(0xffffffffffffffff)
r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r3, &(0x7f0000000780)='333333', 0x6)
close(r3)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
close(r4)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

3.511912205s ago: executing program 2 (id=489):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

3.34390107s ago: executing program 2 (id=491):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000e00)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

3.164271894s ago: executing program 2 (id=495):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0)
recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)

3.071503426s ago: executing program 2 (id=499):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
close(0xffffffffffffffff)
r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r3, &(0x7f0000000780)='333333', 0x6)
close(r3)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
close(r4)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

3.048817466s ago: executing program 33 (id=499):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='0123456789', 0xa)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540)='1280', 0x4)
close(r1)
r2 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='720', 0x3)
close(r2)
close(0xffffffffffffffff)
r3 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r3, &(0x7f0000000780)='333333', 0x6)
close(r3)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
close(r4)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

3.040106697s ago: executing program 0 (id=501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
pwrite64(r0, &(0x7f0000000000), 0x1000000, 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
process_madvise(r1, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

2.786893483s ago: executing program 0 (id=502):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

2.572695848s ago: executing program 0 (id=506):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r1, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2.538522299s ago: executing program 0 (id=507):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0xa, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

2.439277191s ago: executing program 3 (id=509):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)

2.372031442s ago: executing program 3 (id=511):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)="303f28a0db6c3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a302d505245464552454e43453d6d4b785f61756469745f6c6f673d3000ff0755188b3f2c9230815b2e7b2fb4556a4e2fe5216e501ffb62b17606c08e121be3a228d036b606c9e04a594016d045758868a360217e3284a2d4a3437fb286e5484928f58e85a8342e40d0f47013d7cf88a815eb40f3f0b160b41f26f01050eea978e0011811aca8e5d5d65771166135406880d69833217f501b91956f4d7964d0945e27f5ff7b48d8c6a675c6447f1879e7ef699235d359812f186b2eef7e5ef9af77566787a8190a", 0xe8)

2.371748342s ago: executing program 3 (id=512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
pwrite64(r0, &(0x7f0000000000), 0x1000000, 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
process_madvise(r1, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

1.939999333s ago: executing program 0 (id=517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)

1.939500603s ago: executing program 3 (id=518):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1.688001569s ago: executing program 0 (id=522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1.687629449s ago: executing program 34 (id=522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1.64284867s ago: executing program 3 (id=524):
syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000012f9dc0846154213b0100102030109022400010000000009045e000009"], 0x0)
syz_open_dev$usbfs(&(0x7f0000000200), 0x10000001d, 0x8041)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

1.575883152s ago: executing program 5 (id=525):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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")
sync()

1.276101469s ago: executing program 1 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
pwrite64(r1, &(0x7f0000000000), 0x1000000, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
process_madvise(r2, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

1.23637397s ago: executing program 5 (id=530):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

1.21386555s ago: executing program 6 (id=531):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='012345678', 0x9)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540), 0x0)
close(r1)
r2 = open(0x0, 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='72', 0x2)
close(r2)
r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff)
write(r3, &(0x7f00000006c0)='1843200', 0x7)
close(r3)
r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r4, &(0x7f0000000780)='333333', 0x6)
close(r4)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0)
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb)
close(r5)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

1.171681531s ago: executing program 6 (id=532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="90c3", 0x2}], 0x1, 0x39, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x1, 0x0, 0x2080, {0x26000, 0xd000}, {"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"}})

1.055917584s ago: executing program 5 (id=533):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0x40}, 0x15, 0x3, 'fo\x00', 0x1, 0x6, 0x48}, 0x2c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x1, 0x12c, @pic={0x80, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}})

1.055498734s ago: executing program 6 (id=534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1.032324395s ago: executing program 5 (id=535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

601.506956ms ago: executing program 1 (id=536):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

532.131007ms ago: executing program 7 (id=523):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 512)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 512)

300.981122ms ago: executing program 1 (id=537):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)

300.577832ms ago: executing program 1 (id=538):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000001b00), 0x0)
close(r0)

300.420423ms ago: executing program 1 (id=539):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x41}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

243.854084ms ago: executing program 1 (id=540):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)
getdents64(r4, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0})

209.520835ms ago: executing program 6 (id=541):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000300)='012345678', 0x9)
close(r0)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r1, &(0x7f0000000540), 0x0)
close(r1)
r2 = open(0x0, 0x241, 0x1ff)
write(r2, &(0x7f0000000600)='72', 0x2)
close(r2)
r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff)
write(r3, &(0x7f00000006c0)='1843200', 0x7)
close(r3)
r4 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff)
write(r4, &(0x7f0000000780)='333333', 0x6)
close(r4)
mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00')
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0)
symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlink(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b80)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r5 = open(&(0x7f0000000c40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000000c80)='dummy_udc.0', 0xb)
close(r5)
unlink(&(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')

174.872106ms ago: executing program 6 (id=542):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

124.172757ms ago: executing program 5 (id=543):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffecd)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000b40)=0x20000, 0x4)
poll(&(0x7f0000000a00)=[{r0, 0x140}], 0x1, 0x3)

123.685757ms ago: executing program 5 (id=544):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1/file0\x00'}, 0x6e)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10683, &(0x7f0000011040)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

51.787358ms ago: executing program 7 (id=545):
r0 = syz_open_dev$usbmon(&(0x7f0000002000), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000ffc))

0s ago: executing program 6 (id=546):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
pwrite64(r1, &(0x7f0000000000), 0x1000000, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
process_madvise(r2, &(0x7f0000000600)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

0s ago: executing program 7 (id=547):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts.
[   21.079384][   T30] audit: type=1400 audit(1785415125.589:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.080588][  T277] cgroup: Unknown subsys name 'net'
[   21.102716][   T30] audit: type=1400 audit(1785415125.589:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.131101][   T30] audit: type=1400 audit(1785415125.639:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.137436][  T277] cgroup: Unknown subsys name 'devices'
[   21.249570][  T277] cgroup: Unknown subsys name 'hugetlb'
[   21.255216][  T277] cgroup: Unknown subsys name 'rlimit'
[   21.363164][   T30] audit: type=1400 audit(1785415125.869:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.386643][   T30] audit: type=1400 audit(1785415125.869:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.400031][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.411876][   T30] audit: type=1400 audit(1785415125.869:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.434222][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.443903][   T30] audit: type=1400 audit(1785415125.929:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.478148][   T30] audit: type=1400 audit(1785415125.929:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.504315][   T30] audit: type=1400 audit(1785415125.939:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.529923][   T30] audit: type=1400 audit(1785415125.939:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.262238][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.269347][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.276868][  T285] device bridge_slave_0 entered promiscuous mode
[   22.284712][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.291784][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.299293][  T285] device bridge_slave_1 entered promiscuous mode
[   22.377338][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.384393][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.391817][  T286] device bridge_slave_0 entered promiscuous mode
[   22.401261][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.408463][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.415782][  T286] device bridge_slave_1 entered promiscuous mode
[   22.445897][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.453076][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.460699][  T289] device bridge_slave_0 entered promiscuous mode
[   22.470295][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.477781][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.485215][  T289] device bridge_slave_1 entered promiscuous mode
[   22.527462][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.534608][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.542123][  T288] device bridge_slave_0 entered promiscuous mode
[   22.550812][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.558009][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.565302][  T288] device bridge_slave_1 entered promiscuous mode
[   22.647954][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.655013][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.662328][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.669398][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.692647][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.699957][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.707750][  T287] device bridge_slave_0 entered promiscuous mode
[   22.738314][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.745372][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.752780][  T287] device bridge_slave_1 entered promiscuous mode
[   22.769784][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.776956][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.784358][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.791408][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.806901][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.814188][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.821488][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.828539][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.882921][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.890563][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.897925][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.905079][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.913035][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.920454][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.928645][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.936133][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.965515][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.973710][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.980927][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.000388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.007848][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.016060][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.023277][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.030939][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.039295][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.046325][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.053765][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.061907][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.068998][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.087275][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.095350][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.103046][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.111299][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.118367][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.125862][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.134680][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.141938][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.165203][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.173388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.181855][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.190837][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.207391][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.215635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.223949][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.232308][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.239380][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.247559][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.267656][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.276240][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.284756][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.291846][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.299567][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.307976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.315966][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.324254][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.332539][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.340136][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.354425][  T285] device veth0_vlan entered promiscuous mode
[   23.367394][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.375953][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.384573][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.393314][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.402314][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.410379][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.419410][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.427470][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.435445][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.444070][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.452591][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.459861][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.467358][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.475652][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.484404][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.491956][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.499388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.506865][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.514923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.524308][  T289] device veth0_vlan entered promiscuous mode
[   23.535463][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.543950][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.552514][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.559597][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.571898][  T288] device veth0_vlan entered promiscuous mode
[   23.582119][  T285] device veth1_macvtap entered promiscuous mode
[   23.593801][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.602110][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.610446][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.619114][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.627556][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.635652][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.643890][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.651658][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.660151][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.668553][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.677106][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.686681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.694247][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.704453][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.712823][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.723147][  T286] device veth0_vlan entered promiscuous mode
[   23.730718][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.738911][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.747286][  T289] device veth1_macvtap entered promiscuous mode
[   23.760713][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.768620][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.776284][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.784169][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.792716][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.801499][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.810046][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.818868][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.827037][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.837669][  T288] device veth1_macvtap entered promiscuous mode
[   23.855344][  T285] request_module fs-gadgetfs succeeded, but still no fs?
[   23.864455][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.872970][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.881459][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.890266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.899021][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.907586][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.915802][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.933394][  T286] device veth1_macvtap entered promiscuous mode
[   23.947353][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.955667][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.983414][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.986583][  T312] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000]
[   23.998932][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.001272][  T312] dwc3: probe of dwc3.1.auto failed with error -16
[   24.008743][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.032606][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.042164][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.051422][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.060372][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.069237][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.076791][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.084729][  T287] device veth0_vlan entered promiscuous mode
[   24.094273][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.102683][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.120802][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.129444][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.149388][  T287] device veth1_macvtap entered promiscuous mode
[   24.158418][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.187709][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.196403][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.201048][  T324] UDC core: couldn't find an available UDC or it's busy: -16
[   24.222352][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.235449][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.257202][  T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.280394][  T328] UDC core: couldn't find an available UDC or it's busy: -16
[   24.313984][  T330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.330748][   T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.538890][  T306] usb 2-1: Using ep0 maxpacket: 8
[   24.638763][  T330] syz.2.8 (330) used greatest stack depth: 21224 bytes left
[   24.667721][  T306] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[   24.676651][  T306] usb 2-1: config 0 has no interface number 0
[   24.683294][  T306] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   24.692678][  T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.707998][  T306] usb 2-1: config 0 descriptor??
[   24.716545][  T336] UDC core: couldn't find an available UDC or it's busy: -16
[   24.737883][  T339] using random self ethernet address
[   24.743347][  T339] using random host ethernet address
[   24.751487][  T339] UDC core: couldn't find an available UDC or it's busy: -16
[   24.759301][  T340] UDC core: couldn't find an available UDC or it's busy: -16
[   24.877345][   T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.01
[   24.886600][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.894923][   T39] usb 1-1: Product: syz
[   24.899143][   T39] usb 1-1: Manufacturer: syz
[   24.903747][   T39] usb 1-1: SerialNumber: syz
[   25.149156][   T39] usb 1-1: USB disconnect, device number 2
[   25.609566][  T350] loop3: detected capacity change from 0 to 1024
[   25.666230][  T360] loop0: detected capacity change from 0 to 512
[   25.668946][  T350] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   25.713750][  T360] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.19: inode has both inline data and extents flags
[   25.727855][  T360] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.19: couldn't read orphan inode 15 (err -117)
[   25.761894][  T360] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   25.792032][  T360] syz.0.19 (pid 360) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   25.803819][  T360] overlayfs: failed to resolve './file1': -2
[   25.847209][   T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   25.857256][   T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   25.923706][   T26] android_work: sent uevent USB_STATE=CONNECTED
[   25.968664][   T63] usb 2-1: USB disconnect, device number 2
[   26.087247][   T20] usb 5-1: Using ep0 maxpacket: 8
[   26.207315][   T20] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   26.221815][   T20] usb 5-1: config 179 has no interface number 0
[   26.229264][   T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   26.240724][   T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   26.246363][  T418] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000]
[   26.253031][   T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   26.262448][  T418] dwc3: probe of dwc3.1.auto failed with error -16
[   26.273327][   T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   26.280540][   T39] usb 1-1: Dual-Role OTG device on HNP port
[   26.291601][   T20] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   26.327227][   T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 5.15
[   26.329114][   T20] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   26.338108][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.346135][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.354719][   T39] usb 1-1: SerialNumber: 0123456789
[   26.387852][  T293] android_work: sent uevent USB_STATE=CONFIGURED
[   26.397242][  T347] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   26.479056][   T39] input: HID 1d6b:0104 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0001/input/input4
[   26.560379][   T30] kauditd_printk_skb: 76 callbacks suppressed
[   26.560393][   T30] audit: type=1400 audit(1785415131.069:150): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=575 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.560439][   T39] hid-generic 0003:1D6B:0104.0001: input,hidraw0: USB HID v1.01 Keyboard [HID 1d6b:0104] on usb-dummy_hcd.0-1/input0
[   26.566986][   T30] audit: type=1400 audit(1785415131.069:151): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=575 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.648213][   T30] audit: type=1400 audit(1785415131.069:152): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=575 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.721501][   T20] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5
[   26.833230][   T30] audit: type=1400 audit(1785415131.339:153): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   26.903700][   T30] audit: type=1400 audit(1785415131.409:154): avc:  denied  { read } for  pid=345 comm="syz.4.12" name="event4" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   26.930204][   T39] usb 5-1: USB disconnect, device number 2
[   26.941864][   T30] audit: type=1400 audit(1785415131.409:155): avc:  denied  { open } for  pid=345 comm="syz.4.12" path="/dev/input/event4" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   26.967163][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   26.975706][   T39] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   27.000496][   T30] audit: type=1400 audit(1785415131.409:156): avc:  denied  { ioctl } for  pid=345 comm="syz.4.12" path="/dev/input/event4" dev="devtmpfs" ino=583 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.013881][  T458] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000]
[   27.036153][  T458] dwc3: probe of dwc3.1.auto failed with error -16
[   27.110115][   T30] audit: type=1400 audit(1785415131.619:157): avc:  denied  { mount } for  pid=463 comm="syz.3.61" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   27.191800][   T30] audit: type=1400 audit(1785415131.699:158): avc:  denied  { write } for  pid=465 comm="syz.3.62" name="003" dev="devtmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   27.313089][  T482] loop0: detected capacity change from 0 to 512
[   27.323052][  T484] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000]
[   27.333687][  T484] dwc3: probe of dwc3.1.auto failed with error -16
[   27.416462][  T482] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.68: inode has both inline data and extents flags
[   27.472151][  T482] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.68: couldn't read orphan inode 15 (err -117)
[   27.495819][  T482] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   27.526446][  T482] overlayfs: failed to resolve './file1': -2
[   27.657540][  T520] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000]
[   27.669335][  T520] dwc3: probe of dwc3.1.auto failed with error -16
[   27.782209][  T538] loop1: detected capacity change from 0 to 512
[   27.836552][  T538] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.93: inode has both inline data and extents flags
[   27.850452][  T538] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.93: couldn't read orphan inode 15 (err -117)
[   27.862349][  T538] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   27.880482][   T30] audit: type=1400 audit(1785415132.389:159): avc:  denied  { setattr } for  pid=536 comm="syz.1.93" name="work" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   28.270860][  T574] loop1: detected capacity change from 0 to 512
[   28.277292][  T402] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.304693][  T574] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.108: inode has both inline data and extents flags
[   28.328912][  T574] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.108: couldn't read orphan inode 15 (err -117)
[   28.341240][  T574] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   28.519129][  T402] usb 3-1: Using ep0 maxpacket: 32
[   28.647255][  T402] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   28.726447][  T623] loop1: detected capacity change from 0 to 512
[   28.741060][  T623] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.129: inode has both inline data and extents flags
[   28.754799][  T623] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.129: couldn't read orphan inode 15 (err -117)
[   28.767681][  T623] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   28.817232][  T402] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   28.826519][  T402] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   28.835095][  T402] usb 3-1: Product: syz
[   28.839711][  T402] usb 3-1: Manufacturer: syz
[   28.844397][  T402] usb 3-1: SerialNumber: syz
[   28.850476][  T402] usb 3-1: config 0 descriptor??
[   28.867216][  T556] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   28.887595][  T402] hub 3-1:0.0: bad descriptor, ignoring hub
[   28.893849][  T402] hub: probe of 3-1:0.0 failed with error -5
[   29.256515][  T655] loop3: detected capacity change from 0 to 512
[   29.274928][  T655] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.143: inode has both inline data and extents flags
[   29.288305][  T655] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.143: couldn't read orphan inode 15 (err -117)
[   29.303440][  T655] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   29.478194][  T679] loop1: detected capacity change from 0 to 512
[   29.532193][  T679] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.155: inode has both inline data and extents flags
[   29.550810][  T679] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.155: couldn't read orphan inode 15 (err -117)
[   29.563405][  T679] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   29.911324][  T725] loop4: detected capacity change from 0 to 512
[   29.927410][  T725] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.174: inode has both inline data and extents flags
[   29.941316][  T725] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.174: couldn't read orphan inode 15 (err -117)
[   29.953397][  T725] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   30.022650][   T20] usb 3-1: USB disconnect, device number 2
[   30.316005][  T762] loop3: detected capacity change from 0 to 512
[   30.342727][  T762] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.190: inode has both inline data and extents flags
[   30.356097][  T762] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.190: couldn't read orphan inode 15 (err -117)
[   30.368333][  T762] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   30.408351][  T762] overlayfs: failed to resolve './file0': -2
[   30.438449][  T769] =======================================================
[   30.438449][  T769] WARNING: The mand mount option has been deprecated and
[   30.438449][  T769]          and is ignored by this kernel. Remove the mand
[   30.438449][  T769]          option from the mount to silence this warning.
[   30.438449][  T769] =======================================================
[   30.474241][  T769] exfat: Deprecated parameter 'utf8'
[   30.479768][  T769] exfat: Deprecated parameter 'namecase'
[   30.485575][  T769] exfat: Deprecated parameter 'utf8'
[   30.512307][  T769] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   30.545111][  T769] device syzkaller0 entered promiscuous mode
[   30.740212][  T814] set_capacity_and_notify: 1 callbacks suppressed
[   30.740229][  T814] loop0: detected capacity change from 0 to 512
[   30.819850][  T814] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.214: inode has both inline data and extents flags
[   30.855224][  T814] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.214: couldn't read orphan inode 15 (err -117)
[   30.910659][  T814] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   30.970106][  T814] overlayfs: failed to resolve './file0': -2
[   31.147263][  T861] loop2: detected capacity change from 0 to 512
[   31.177241][  T861] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.233: inode has both inline data and extents flags
[   31.191434][  T861] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.233: couldn't read orphan inode 15 (err -117)
[   31.216369][  T861] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   31.239203][  T861] overlayfs: failed to resolve './file0': -2
[   31.633504][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   31.633519][   T30] audit: type=1400 audit(1785415136.139:173): avc:  denied  { unlink } for  pid=902 comm="syz.2.252" name="#13" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   31.756443][   T30] audit: type=1400 audit(1785415136.259:174): avc:  denied  { prog_run } for  pid=879 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.897612][  T936] loop0: detected capacity change from 0 to 512
[   31.920824][  T936] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   31.931672][  T936] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.228542][  T953] loop4: detected capacity change from 0 to 40427
[   32.280986][  T953] F2FS-fs (loop4): fault_injection options not supported
[   32.288457][  T953] F2FS-fs (loop4): fault_type options not supported
[   32.317424][  T953] F2FS-fs (loop4): invalid crc value
[   32.337088][  T953] F2FS-fs (loop4): Found nat_bits in checkpoint
[   32.377219][  T953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   32.403893][   T30] audit: type=1400 audit(1785415136.909:175): avc:  denied  { read append open } for  pid=952 comm="syz.4.273" path="/41/file0/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   32.413931][  T289] attempt to access beyond end of device
[   32.413931][  T289] loop4: rw=524288, want=45072, limit=40427
[   32.431565][   T30] audit: type=1400 audit(1785415136.909:176): avc:  denied  { write } for  pid=952 comm="syz.4.273" path="/41/file0/file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   32.441944][  T289] attempt to access beyond end of device
[   32.441944][  T289] loop4: rw=0, want=45072, limit=40427
[   32.464962][   T30] audit: type=1400 audit(1785415136.909:177): avc:  denied  { create } for  pid=952 comm="syz.4.273" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   32.495655][   T30] audit: type=1400 audit(1785415136.919:178): avc:  denied  { read } for  pid=952 comm="syz.4.273" name="file0" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   32.513813][  T323] attempt to access beyond end of device
[   32.513813][  T323] loop4: rw=2049, want=45128, limit=40427
[   32.666164][   T30] audit: type=1400 audit(1785415137.169:179): avc:  denied  { append } for  pid=989 comm="syz.0.289" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   32.900131][   T30] audit: type=1400 audit(1785415137.409:180): avc:  denied  { read } for  pid=1022 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.923050][   T30] audit: type=1400 audit(1785415137.409:181): avc:  denied  { open } for  pid=1022 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.981167][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.988891][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.996595][ T1022] device bridge_slave_0 entered promiscuous mode
[   33.004358][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.012116][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.019980][ T1022] device bridge_slave_1 entered promiscuous mode
[   33.041329][   T30] audit: type=1400 audit(1785415137.549:182): avc:  denied  { write } for  pid=1029 comm="syz.2.306" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   33.108383][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.115641][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.123034][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.130087][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.138913][  T323] device bridge_slave_1 left promiscuous mode
[   33.145240][  T323] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.152998][  T323] device bridge_slave_0 left promiscuous mode
[   33.159470][  T323] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.167755][  T323] device veth1_macvtap left promiscuous mode
[   33.173816][  T323] device veth0_vlan left promiscuous mode
[   33.241727][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.249368][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.256884][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.269623][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.277923][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.285024][  T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.292549][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.301097][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.308245][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.320598][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.329962][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.343613][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.355255][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.364050][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.371813][   T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   33.372051][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.388263][ T1022] device veth0_vlan entered promiscuous mode
[   33.400328][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.409874][ T1022] device veth1_macvtap entered promiscuous mode
[   33.420066][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.430186][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.458858][ T1039] loop5: detected capacity change from 0 to 512
[   33.523753][ T1039] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.302: inode has both inline data and extents flags
[   33.537523][ T1039] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.302: couldn't read orphan inode 15 (err -117)
[   33.553227][ T1039] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   33.629104][ T1054] Zero length message leads to an empty skb
[   33.727971][ T1066] loop3: detected capacity change from 0 to 512
[   33.737287][   T26] usb 3-1: config index 0 descriptor too short (expected 8251, got 59)
[   33.746526][   T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.760855][   T26] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   33.786688][ T1066] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.318: bad orphan inode 15
[   33.797108][ T1066] ext4_test_bit(bit=14, block=18) = 1
[   33.802807][ T1066] is_bad_inode(inode)=0
[   33.807024][ T1066] NEXT_ORPHAN(inode)=1023
[   33.811463][ T1066] max_ino=32
[   33.816548][ T1066] i_nlink=0
[   33.820015][ T1066] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #15: comm syz.3.318: corrupted xattr block 19
[   33.833335][ T1066] EXT4-fs warning (device loop3): ext4_evict_inode:305: xattr delete (err -117)
[   33.843681][ T1066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   33.848363][   T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.857865][ T1066] ext4 filesystem being mounted at /89/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   33.873348][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   33.882963][   T26] usb 3-1: SerialNumber: syz
[   33.928208][   T26] cdc_ether: probe of 3-1:1.0 failed with error -22
[   33.939264][ T1084] loop3: detected capacity change from 0 to 512
[   34.009818][ T1084] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.327: inode has both inline data and extents flags
[   34.023321][ T1084] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.327: couldn't read orphan inode 15 (err -117)
[   34.035478][ T1084] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   34.052333][ T1084] overlayfs: failed to resolve './file0': -2
[   34.143369][ T1037] Disabled LAPIC found during irq injection
[   34.167678][   T63] usb 3-1: USB disconnect, device number 3
[   34.276133][ T1101] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   34.566984][ T1112] loop3: detected capacity change from 0 to 512
[   34.575655][ T1113] using random self ethernet address
[   34.581376][ T1113] using random host ethernet address
[   34.591110][ T1112] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.339: inode has both inline data and extents flags
[   34.605111][ T1112] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.339: couldn't read orphan inode 15 (err -117)
[   34.618007][ T1112] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   34.642752][ T1112] overlayfs: failed to resolve './file0': -2
[   34.856153][ T1144] loop2: detected capacity change from 0 to 512
[   34.863624][ T1118] loop1: detected capacity change from 0 to 40427
[   34.892454][ T1118] F2FS-fs (loop1): Small segment_count (20 < 1 * 24)
[   34.900397][ T1144] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.353: inode has both inline data and extents flags
[   34.913726][ T1118] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   34.922448][ T1144] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.353: couldn't read orphan inode 15 (err -117)
[   34.931336][ T1118] F2FS-fs (loop1): fault_injection options not supported
[   34.942366][ T1118] F2FS-fs (loop1): fault_type options not supported
[   34.947836][ T1144] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   34.965415][ T1118] F2FS-fs (loop1): invalid crc value
[   35.019836][ T1144] overlayfs: failed to resolve './file0': -2
[   35.031150][ T1118] F2FS-fs (loop1): Found nat_bits in checkpoint
[   35.104285][ T1118] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   35.112829][ T1118] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   35.150673][  T288] attempt to access beyond end of device
[   35.150673][  T288] loop1: rw=2049, want=45104, limit=40427
[   35.345427][ T1176] zero sized request
[   35.382273][ T1179] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.365: inode has both inline data and extents flags
[   35.396188][ T1179] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.365: couldn't read orphan inode 15 (err -117)
[   35.412171][ T1179] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   35.775562][ T1212] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.378: inode has both inline data and extents flags
[   35.842562][ T1212] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.378: couldn't read orphan inode 15 (err -117)
[   35.858273][ T1212] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   36.117183][  T402] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   36.388628][ T1262] set_capacity_and_notify: 2 callbacks suppressed
[   36.388643][ T1262] loop2: detected capacity change from 0 to 512
[   36.415004][ T1262] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.399: inode has both inline data and extents flags
[   36.428488][ T1262] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.399: couldn't read orphan inode 15 (err -117)
[   36.440666][ T1262] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   36.539829][ T1277] loop3: detected capacity change from 0 to 256
[   36.570817][ T1277] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   36.586330][ T1277] exFAT-fs (loop3): hint_cluster is invalid (17)
[   36.593923][ T1277] exFAT-fs (loop3): error, broken FAT chain.
[   36.600225][ T1277] exFAT-fs (loop3): Filesystem has been set read-only
[   36.607002][ T1277] exFAT-fs (loop3): error, failed to bmap (inode : ffff888129411ab0 iblock : 24, err : -5)
[   36.657313][  T402] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[   36.666730][  T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.675202][  T402] usb 2-1: Product: syz
[   36.679992][  T402] usb 2-1: Manufacturer: syz
[   36.684943][  T402] usb 2-1: SerialNumber: syz
[   36.760804][ T1291] loop0: detected capacity change from 0 to 512
[   36.793558][ T1291] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.412: inode has both inline data and extents flags
[   36.807488][ T1291] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.412: couldn't read orphan inode 15 (err -117)
[   36.819924][ T1291] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   37.167208][   T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   37.330440][   T30] kauditd_printk_skb: 34 callbacks suppressed
[   37.330470][   T30] audit: type=1400 audit(1785415141.839:217): avc:  denied  { mounton } for  pid=1315 comm="syz.2.421" path="/88/file0" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.537265][   T20] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   37.547286][   T20] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   37.707238][   T20] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00
[   37.716612][   T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.724716][   T20] usb 6-1: Product: syz
[   37.729054][   T20] usb 6-1: Manufacturer: syz
[   37.733668][   T20] usb 6-1: SerialNumber: syz
[   37.757288][ T1298] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   37.764475][ T1298] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   37.860890][ T1324] loop3: detected capacity change from 0 to 512
[   37.892957][ T1324] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.425: inode has both inline data and extents flags
[   37.906351][ T1324] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.425: couldn't read orphan inode 15 (err -117)
[   37.918384][ T1324] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   37.955816][   T30] audit: type=1400 audit(1785415142.459:218): avc:  denied  { sys_module } for  pid=1328 comm="syz.0.426" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   38.185535][   T63] usb 2-1: USB disconnect, device number 3
[   38.848286][ T1366] loop1: detected capacity change from 0 to 512
[   38.919684][ T1366] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.440: inode has both inline data and extents flags
[   38.933571][ T1366] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.440: couldn't read orphan inode 15 (err -117)
[   38.946315][ T1366] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   38.987056][   T30] audit: type=1400 audit(1785415143.489:219): avc:  denied  { setopt } for  pid=1370 comm="syz.0.443" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   39.019151][   T30] audit: type=1400 audit(1785415143.509:220): avc:  denied  { shutdown } for  pid=1372 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.167048][ T1395] loop0: detected capacity change from 0 to 512
[   39.274064][ T1395] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.453: inode has both inline data and extents flags
[   39.287953][ T1395] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.453: couldn't read orphan inode 15 (err -117)
[   39.300084][ T1395] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   39.386536][   T30] audit: type=1400 audit(1785415143.889:221): avc:  denied  { create } for  pid=1400 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.427345][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   39.428277][   T30] audit: type=1400 audit(1785415143.899:222): avc:  denied  { write } for  pid=1400 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.482260][   T30] audit: type=1400 audit(1785415143.899:223): avc:  denied  { read } for  pid=1400 comm="syz.0.455" path="socket:[33805]" dev="sockfs" ino=33805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.508041][   T30] audit: type=1400 audit(1785415143.909:224): avc:  denied  { write } for  pid=1402 comm="syz.0.456" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   39.517777][ T1399] loop2: detected capacity change from 0 to 40427
[   39.538191][ T1399] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   39.545513][ T1399] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   39.557178][ T1399] F2FS-fs (loop2): invalid crc value
[   39.568661][ T1399] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.591140][ T1399] F2FS-fs (loop2): Start checkpoint disabled!
[   39.598591][ T1399] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   39.605778][ T1399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   39.623177][ T1399] 9pnet_virtio: no channels available for device syz
[   39.642639][   T45] attempt to access beyond end of device
[   39.642639][   T45] loop2: rw=2049, want=41008, limit=40427
[   39.667233][   T26] usb 4-1: Using ep0 maxpacket: 8
[   39.787285][   T26] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[   39.795841][   T26] usb 4-1: config 0 has no interface number 0
[   39.802028][   T26] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   39.811464][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.820507][   T26] usb 4-1: config 0 descriptor??
[   39.906386][   T26] usb 6-1: USB disconnect, device number 2
[   40.028767][ T1429] loop5: detected capacity change from 0 to 512
[   40.045464][ T1429] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.466: inode has both inline data and extents flags
[   40.058860][ T1429] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.466: couldn't read orphan inode 15 (err -117)
[   40.074088][ T1429] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   40.342662][ T1455] loop1: detected capacity change from 0 to 512
[   40.381943][ T1455] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.477: inode has both inline data and extents flags
[   40.395590][ T1455] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.477: couldn't read orphan inode 15 (err -117)
[   40.408247][ T1455] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   40.446445][   T30] audit: type=1400 audit(1785415144.949:225): avc:  denied  { mount } for  pid=1459 comm="syz.5.479" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   40.469702][   T30] audit: type=1400 audit(1785415144.949:226): avc:  denied  { unmount } for  pid=1022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   40.503319][ T1462] kvm [1461]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0
[   40.830070][ T1489] loop2: detected capacity change from 0 to 512
[   40.858117][ T1489] EXT4-fs (loop2): Ignoring removed bh option
[   40.867397][ T1489] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   40.873482][ T1491] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.490: inode has both inline data and extents flags
[   40.888085][ T1489] EXT4-fs (loop2): 1 truncate cleaned up
[   40.889901][ T1491] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.490: couldn't read orphan inode 15 (err -117)
[   40.895469][ T1489] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[   40.907695][ T1491] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   40.946651][ T1491] overlayfs: failed to resolve './file1': -2
[   40.967642][ T1489] loop_set_status: loop2 () has still dirty pages (nrpages=1)
[   41.012327][  T287] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   41.032966][  T287] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: casefold flag without casefold feature
[   41.045866][  T287] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: casefold flag without casefold feature
[   41.217755][   T63] usb 4-1: USB disconnect, device number 2
[   41.270450][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.277621][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.285489][ T1510] device bridge_slave_0 entered promiscuous mode
[   41.295067][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.302232][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.309802][ T1510] device bridge_slave_1 entered promiscuous mode
[   41.400181][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.407374][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.414686][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.422293][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.479068][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   41.489283][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.496824][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.509125][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.517499][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.523204][ T1522] set_capacity_and_notify: 1 callbacks suppressed
[   41.523219][ T1522] loop5: detected capacity change from 0 to 512
[   41.524673][  T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.556196][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.556845][ T1522] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.505: inode has both inline data and extents flags
[   41.564478][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.577974][ T1522] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.505: couldn't read orphan inode 15 (err -117)
[   41.584611][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.599868][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.603823][ T1522] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   41.617780][ T1526] process 'syz.0.506' launched './file0' with NULL argv: empty string added
[   41.633375][  T987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.647646][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.660809][ T1510] device veth0_vlan entered promiscuous mode
[   41.668947][ T1522] overlayfs: failed to resolve './file1': -2
[   41.670757][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.684037][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.693040][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.707900][  T323] device bridge_slave_1 left promiscuous mode
[   41.714482][  T323] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.722143][  T323] device bridge_slave_0 left promiscuous mode
[   41.728406][  T323] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.767202][  T323] device veth1_macvtap left promiscuous mode
[   41.782403][  T323] device veth0_vlan left promiscuous mode
[   41.940120][ T1528] loop0: detected capacity change from 0 to 40427
[   41.953411][ T1528] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   41.963807][ T1510] device veth1_macvtap entered promiscuous mode
[   41.971626][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.977451][ T1528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   41.990287][ T1528] F2FS-fs (loop0): fault_injection options not supported
[   42.002276][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.010609][ T1528] F2FS-fs (loop0): fault_type options not supported
[   42.019715][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.038734][ T1528] F2FS-fs (loop0): invalid crc value
[   42.078848][ T1528] F2FS-fs (loop0): Found nat_bits in checkpoint
[   42.167860][ T1528] F2FS-fs (loop0): Start checkpoint disabled!
[   42.181509][ T1528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   42.189995][ T1528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   42.233256][  T285] attempt to access beyond end of device
[   42.233256][  T285] loop0: rw=524288, want=45072, limit=40427
[   42.245140][  T285] attempt to access beyond end of device
[   42.245140][  T285] loop0: rw=0, want=45072, limit=40427
[   42.278855][  T323] attempt to access beyond end of device
[   42.278855][  T323] loop0: rw=2049, want=40984, limit=40427
[   42.321489][ T1558] loop3: detected capacity change from 0 to 512
[   42.334921][ T1560] smpboot: CPU 1 is now offline
[   42.372609][ T1558] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.518: inode has both inline data and extents flags
[   42.451942][ T1558] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.518: couldn't read orphan inode 15 (err -117)
[   42.492408][ T1558] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   42.543718][ T1558] overlayfs: failed to resolve './file1': -2
[   42.582017][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.589588][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.597103][ T1568] device bridge_slave_0 entered promiscuous mode
[   42.619139][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.630295][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.650723][ T1575] loop5: detected capacity change from 0 to 16
[   42.657754][ T1568] device bridge_slave_1 entered promiscuous mode
[   42.675708][ T1575] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[   42.722382][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.729906][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.737415][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.744707][ T1568] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.765140][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.773402][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.806119][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.832172][  T323] device bridge_slave_1 left promiscuous mode
[   42.851842][  T323] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.879535][  T323] device bridge_slave_0 left promiscuous mode
[   42.897169][   T63] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   42.909083][  T323] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.919619][  T323] device veth1_macvtap left promiscuous mode
[   42.928213][  T323] device veth0_vlan left promiscuous mode
[   43.092998][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.128280][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.135361][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.209907][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.226530][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.233645][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.265029][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.277467][   T63] usb 4-1: config 0 has an invalid interface number: 94 but max is 0
[   43.291687][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.301303][   T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.319585][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.332151][   T63] usb 4-1: config 0 has no interface number 0
[   43.343896][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.369321][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.387034][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.408669][ T1568] device veth0_vlan entered promiscuous mode
[   43.421612][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.436389][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.461521][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.479522][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.494471][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.507302][   T63] usb 4-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=10.b0
[   43.520878][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.531104][   T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.543673][ T1568] device veth1_macvtap entered promiscuous mode
[   43.555374][   T63] usb 4-1: Product: syz
[   43.565749][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   43.574006][   T63] usb 4-1: Manufacturer: syz
[   43.579134][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.587355][   T63] usb 4-1: SerialNumber: syz
[   43.594074][   T63] usb 4-1: config 0 descriptor??
[   43.599702][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.625642][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.642545][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.651259][   T63] hub 4-1:0.94: bad descriptor, ignoring hub
[   43.661829][   T63] hub: probe of 4-1:0.94 failed with error -5
[   43.691958][ T1606] loop1: detected capacity change from 0 to 512
[   43.737881][ T1606] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.536: inode has both inline data and extents flags
[   43.763375][ T1606] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.536: couldn't read orphan inode 15 (err -117)
[   43.789372][ T1606] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   44.027535][   T63] usb 4-1: USB disconnect, device number 3
[   44.179093][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   44.179104][   T30] audit: type=1400 audit(1785415148.689:235): avc:  denied  { ioctl } for  pid=1634 comm="syz.7.545" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.262968][ T1639] ------------[ cut here ]------------
[   44.268463][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   44.278815][ T1639] Modules linked in:
[   44.282815][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Not tainted syzkaller #0
[   44.290325][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.300822][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   44.306749][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   44.326885][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   44.333044][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   44.341005][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   44.349136][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   44.357092][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041044a
[   44.365050][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   44.373025][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   44.382042][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.389133][ T1639] CR2: 0000200000001000 CR3: 000000011c72f000 CR4: 00000000003526b0
[   44.397269][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   44.405314][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   44.413635][ T1639] Call Trace:
[   44.416997][ T1639]  <TASK>
[   44.420049][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   44.425937][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.431043][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   44.435709][ T1639]  rb_buffer_peek+0x60/0x7a0
[   44.440290][ T1639]  ring_buffer_peek+0x184/0x3b0
[   44.445186][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   44.450862][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.455990][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   44.460737][ T1639]  __find_next_entry+0x34d/0x6b0
[   44.465762][ T1639]  ? rb_advance_reader+0x39c/0x6b0
[   44.471517][ T1639]  ? trace_find_next_entry+0x370/0x370
[   44.477262][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   44.483403][ T1639]  ? print_trace_line+0x385/0x690
[   44.489260][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   44.494229][ T1639]  ? s_show+0x320/0x320
[   44.498766][ T1639]  vfs_read+0x28c/0xc20
[   44.503361][ T1639]  ? kernel_read+0x1f0/0x1f0
[   44.508059][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.513447][ T1639]  ? mutex_lock+0x9b/0x1c0
[   44.517916][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   44.524710][ T1639]  ? __fget_files+0x2e1/0x340
[   44.529516][ T1639]  ? __fdget_pos+0x2d2/0x380
[   44.534342][ T1639]  ? ksys_read+0x70/0x260
[   44.538768][ T1639]  ksys_read+0x14a/0x260
[   44.543049][ T1639]  ? vfs_write+0xfd0/0xfd0
[   44.547888][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.553039][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   44.558237][ T1639]  __x64_sys_read+0x7b/0x90
[   44.562743][ T1639]  x64_sys_call+0x96d/0x9a0
[   44.567245][ T1639]  do_syscall_64+0x4c/0xa0
[   44.571655][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   44.576418][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   44.581485][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.587382][ T1639] RIP: 0033:0x7f99cacb2f99
[   44.591791][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.612006][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.620722][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   44.628864][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   44.637258][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   44.645329][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.653765][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   44.662098][ T1639]  </TASK>
[   44.665128][ T1639] ---[ end trace 2b41b05416fd5f05 ]---
[   44.670591][ T1639] ==================================================================
[   44.678937][ T1639] BUG: KASAN: slab-out-of-bounds in rb_buffer_peek+0x71a/0x7a0
[   44.686573][ T1639] Read of size 4 at addr ffff88810047b45a by task syz.7.547/1639
[   44.695218][ T1639] 
[   44.697899][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G        W         syzkaller #0
[   44.706717][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.718208][ T1639] Call Trace:
[   44.722203][ T1639]  <TASK>
[   44.725381][ T1639]  __dump_stack+0x21/0x30
[   44.730030][ T1639]  dump_stack_lvl+0x110/0x170
[   44.734972][ T1639]  ? show_regs_print_info+0x20/0x20
[   44.740162][ T1639]  ? load_image+0x3f0/0x3f0
[   44.744939][ T1639]  print_address_description+0x7f/0x2c0
[   44.750494][ T1639]  ? rb_buffer_peek+0x71a/0x7a0
[   44.755620][ T1639]  kasan_report+0x10f/0x150
[   44.760131][ T1639]  ? rb_buffer_peek+0x71a/0x7a0
[   44.766281][ T1639]  __asan_report_load4_noabort+0x14/0x20
[   44.772018][ T1639]  rb_buffer_peek+0x71a/0x7a0
[   44.776983][ T1639]  ring_buffer_peek+0x184/0x3b0
[   44.781882][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   44.787432][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.792980][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   44.797824][ T1639]  __find_next_entry+0x34d/0x6b0
[   44.803206][ T1639]  ? rb_advance_reader+0x39c/0x6b0
[   44.808741][ T1639]  ? trace_find_next_entry+0x370/0x370
[   44.814355][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   44.820001][ T1639]  ? print_trace_line+0x385/0x690
[   44.825034][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   44.830354][ T1639]  ? s_show+0x320/0x320
[   44.834734][ T1639]  vfs_read+0x28c/0xc20
[   44.838893][ T1639]  ? kernel_read+0x1f0/0x1f0
[   44.843668][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.848901][ T1639]  ? mutex_lock+0x9b/0x1c0
[   44.853328][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   44.859995][ T1639]  ? __fget_files+0x2e1/0x340
[   44.864824][ T1639]  ? __fdget_pos+0x2d2/0x380
[   44.869506][ T1639]  ? ksys_read+0x70/0x260
[   44.874768][ T1639]  ksys_read+0x14a/0x260
[   44.881420][ T1639]  ? vfs_write+0xfd0/0xfd0
[   44.886028][ T1639]  ? __kasan_check_write+0x14/0x20
[   44.891828][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   44.897094][ T1639]  __x64_sys_read+0x7b/0x90
[   44.901605][ T1639]  x64_sys_call+0x96d/0x9a0
[   44.906114][ T1639]  do_syscall_64+0x4c/0xa0
[   44.910519][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   44.915188][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   44.920507][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.926900][ T1639] RIP: 0033:0x7f99cacb2f99
[   44.931633][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.952895][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.961783][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   44.970015][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   44.978342][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   44.986497][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.994585][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   45.002741][ T1639]  </TASK>
[   45.005763][ T1639] 
[   45.008090][ T1639] Allocated by task 0:
[   45.012164][ T1639] (stack is not available)
[   45.016649][ T1639] 
[   45.019237][ T1639] The buggy address belongs to the object at ffff88810047b300
[   45.019237][ T1639]  which belongs to the cache dax_cache of size 936
[   45.033787][ T1639] The buggy address is located 346 bytes inside of
[   45.033787][ T1639]  936-byte region [ffff88810047b300, ffff88810047b6a8)
[   45.047575][ T1639] The buggy address belongs to the page:
[   45.053302][ T1639] page:ffffea0004011e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100478
[   45.063769][ T1639] head:ffffea0004011e00 order:2 compound_mapcount:0 compound_pincount:0
[   45.072322][ T1639] flags: 0x4000000000010200(slab|head|zone=1)
[   45.079311][ T1639] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081aaf00
[   45.088079][ T1639] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000
[   45.096865][ T1639] page dumped because: kasan: bad access detected
[   45.103748][ T1639] page_owner tracks the page as allocated
[   45.109475][ T1639] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 1, ts 1749504696, free_ts 0
[   45.129747][ T1639]  post_alloc_hook+0x192/0x1b0
[   45.134739][ T1639]  prep_new_page+0x1c/0x110
[   45.139561][ T1639]  get_page_from_freelist+0x2c3a/0x2cd0
[   45.145226][ T1639]  __alloc_pages+0x1a2/0x460
[   45.149935][ T1639]  new_slab+0xa0/0x4d0
[   45.154462][ T1639]  ___slab_alloc+0x3ac/0x840
[   45.159320][ T1639]  __slab_alloc+0x49/0x90
[   45.164103][ T1639]  kmem_cache_alloc+0x138/0x260
[   45.169632][ T1639]  dax_alloc_inode+0x1d/0x80
[   45.174787][ T1639]  new_inode_pseudo+0x62/0x210
[   45.179833][ T1639]  new_inode+0x28/0x1e0
[   45.184071][ T1639]  pseudo_fs_fill_super+0x193/0x370
[   45.189274][ T1639]  get_tree_nodev+0xb3/0x160
[   45.193881][ T1639]  pseudo_fs_get_tree+0x1c/0x20
[   45.199012][ T1639]  vfs_get_tree+0x89/0x260
[   45.203633][ T1639]  vfs_kern_mount+0xcd/0x160
[   45.208642][ T1639] page_owner free stack trace missing
[   45.214134][ T1639] 
[   45.216459][ T1639] Memory state around the buggy address:
[   45.222521][ T1639]  ffff88810047b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.230868][ T1639]  ffff88810047b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.238980][ T1639] >ffff88810047b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.248233][ T1639]                                                     ^
[   45.255178][ T1639]  ffff88810047b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.263326][ T1639]  ffff88810047b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.271670][ T1639] ==================================================================
[   45.280350][ T1639] Disabling lock debugging due to kernel taint
[   45.328435][   T30] audit: type=1400 audit(1785415149.799:236): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   45.382679][   T30] audit: type=1400 audit(1785415149.799:237): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   45.441385][   T30] audit: type=1400 audit(1785415149.799:238): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   45.498571][   T30] audit: type=1400 audit(1785415149.799:239): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   45.552558][   T30] audit: type=1400 audit(1785415149.799:240): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   45.613731][   T30] audit: type=1400 audit(1785415149.799:241): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   45.696089][   T30] audit: type=1400 audit(1785415149.799:242): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   45.885746][ T1631] loop5: detected capacity change from 0 to 131072
[   45.903083][ T1631] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[   45.924781][ T1631] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   45.939940][ T1631] F2FS-fs (loop5): invalid crc value
[   45.954636][ T1631] F2FS-fs (loop5): Found nat_bits in checkpoint
[   45.995288][ T1631] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   46.007052][ T1631] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   46.062923][ T1639] ------------[ cut here ]------------
[   46.068549][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   46.078878][ T1639] Modules linked in:
[   46.082800][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   46.091480][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.101532][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   46.107350][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   46.127650][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010002
[   46.133718][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   46.141866][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   46.150062][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   46.158392][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041044a
[   46.166370][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   46.174877][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   46.183898][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   46.190574][ T1639] CR2: 00007f99c96ebd58 CR3: 000000011c72f000 CR4: 00000000003526b0
[   46.198545][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   46.206794][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   46.215035][ T1639] Call Trace:
[   46.218404][ T1639]  <TASK>
[   46.221349][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   46.227111][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.232225][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   46.236899][ T1639]  rb_buffer_peek+0x60/0x7a0
[   46.241479][ T1639]  ring_buffer_consume+0x1aa/0x370
[   46.246579][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   46.252209][ T1639]  ? print_trace_line+0x385/0x690
[   46.257235][ T1639]  tracing_read_pipe+0x599/0xab0
[   46.262423][ T1639]  ? s_show+0x320/0x320
[   46.266652][ T1639]  vfs_read+0x28c/0xc20
[   46.270809][ T1639]  ? kernel_read+0x1f0/0x1f0
[   46.275387][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.280502][ T1639]  ? mutex_lock+0x9b/0x1c0
[   46.285016][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   46.291778][ T1639]  ? __fget_files+0x2e1/0x340
[   46.296460][ T1639]  ? __fdget_pos+0x2d2/0x380
[   46.301051][ T1639]  ? ksys_read+0x70/0x260
[   46.305371][ T1639]  ksys_read+0x14a/0x260
[   46.309792][ T1639]  ? vfs_write+0xfd0/0xfd0
[   46.314209][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.319306][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   46.324504][ T1639]  __x64_sys_read+0x7b/0x90
[   46.329010][ T1639]  x64_sys_call+0x96d/0x9a0
[   46.333519][ T1639]  do_syscall_64+0x4c/0xa0
[   46.337942][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   46.342632][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   46.347308][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   46.353191][ T1639] RIP: 0033:0x7f99cacb2f99
[   46.357615][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.377383][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   46.385875][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   46.393837][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   46.401910][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   46.409880][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   46.418099][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   46.426075][ T1639]  </TASK>
[   46.429386][ T1639] ---[ end trace 2b41b05416fd5f06 ]---
[   46.435066][ T1639] ------------[ cut here ]------------
[   46.440536][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   46.450908][ T1639] Modules linked in:
[   46.454793][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   46.463570][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.474042][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   46.479860][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   46.500045][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   46.506126][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   46.514093][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   46.522080][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   46.530056][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041044a
[   46.538024][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   46.546003][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   46.555170][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   46.561846][ T1639] CR2: 00007f99c96ebd58 CR3: 000000011c72f000 CR4: 00000000003526b0
[   46.569827][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   46.578089][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   46.586069][ T1639] Call Trace:
[   46.589344][ T1639]  <TASK>
[   46.592356][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   46.597985][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.603099][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   46.608223][ T1639]  rb_advance_reader+0x2b/0x6b0
[   46.613074][ T1639]  ring_buffer_consume+0x1e7/0x370
[   46.618463][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   46.624105][ T1639]  ? print_trace_line+0x385/0x690
[   46.629750][ T1639]  tracing_read_pipe+0x599/0xab0
[   46.639423][ T1639]  ? s_show+0x320/0x320
[   46.643649][ T1639]  vfs_read+0x28c/0xc20
[   46.647934][ T1639]  ? kernel_read+0x1f0/0x1f0
[   46.652818][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.658217][ T1639]  ? mutex_lock+0x9b/0x1c0
[   46.662945][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   46.669800][ T1639]  ? __fget_files+0x2e1/0x340
[   46.674569][ T1639]  ? __fdget_pos+0x2d2/0x380
[   46.679327][ T1639]  ? ksys_read+0x70/0x260
[   46.683838][ T1639]  ksys_read+0x14a/0x260
[   46.688094][ T1639]  ? vfs_write+0xfd0/0xfd0
[   46.692601][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.698045][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   46.703214][ T1639]  __x64_sys_read+0x7b/0x90
[   46.707920][ T1639]  x64_sys_call+0x96d/0x9a0
[   46.712638][ T1639]  do_syscall_64+0x4c/0xa0
[   46.717063][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   46.722196][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   46.726877][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   46.732846][ T1639] RIP: 0033:0x7f99cacb2f99
[   46.737274][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.757284][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   46.766008][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   46.774187][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   46.782160][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   46.790124][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   46.798126][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   46.806120][ T1639]  </TASK>
[   46.809152][ T1639] ---[ end trace 2b41b05416fd5f07 ]---
[   46.822203][ T1639] ------------[ cut here ]------------
[   46.827703][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   46.837951][ T1639] Modules linked in:
[   46.841841][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   46.850591][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.861082][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   46.866890][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   46.886570][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   46.892643][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   46.900778][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   46.908823][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   46.916993][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046a
[   46.925082][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   46.933149][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   46.942096][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   46.949349][ T1639] CR2: 00007f99c96c9ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   46.957905][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   46.965999][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   46.974132][ T1639] Call Trace:
[   46.977528][ T1639]  <TASK>
[   46.980494][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   46.986133][ T1639]  ? __kasan_check_write+0x14/0x20
[   46.991244][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   46.995919][ T1639]  rb_buffer_peek+0x60/0x7a0
[   47.000511][ T1639]  ring_buffer_peek+0x184/0x3b0
[   47.005559][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   47.011125][ T1639]  ? preempt_schedule+0xbc/0xd0
[   47.015971][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   47.021682][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   47.028018][ T1639]  __find_next_entry+0x34d/0x6b0
[   47.033088][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   47.038478][ T1639]  ? trace_find_next_entry+0x370/0x370
[   47.044044][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   47.049605][ T1639]  ? print_trace_line+0x385/0x690
[   47.054637][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   47.059571][ T1639]  ? s_show+0x320/0x320
[   47.063829][ T1639]  vfs_read+0x28c/0xc20
[   47.067993][ T1639]  ? kernel_read+0x1f0/0x1f0
[   47.072722][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.077843][ T1639]  ? mutex_lock+0x9b/0x1c0
[   47.082284][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   47.088869][ T1639]  ? __fget_files+0x2e1/0x340
[   47.093540][ T1639]  ? __fdget_pos+0x2d2/0x380
[   47.098150][ T1639]  ? ksys_read+0x70/0x260
[   47.103052][ T1639]  ksys_read+0x14a/0x260
[   47.107362][ T1639]  ? vfs_write+0xfd0/0xfd0
[   47.111826][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.117204][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   47.122321][ T1639]  __x64_sys_read+0x7b/0x90
[   47.126816][ T1639]  x64_sys_call+0x96d/0x9a0
[   47.131322][ T1639]  do_syscall_64+0x4c/0xa0
[   47.135723][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.140382][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.145317][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   47.151206][ T1639] RIP: 0033:0x7f99cacb2f99
[   47.155697][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.175516][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.184027][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   47.192090][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   47.200195][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   47.209500][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.217769][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   47.225751][ T1639]  </TASK>
[   47.228849][ T1639] ---[ end trace 2b41b05416fd5f08 ]---
[   47.250224][ T1639] ------------[ cut here ]------------
[   47.256047][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   47.266382][ T1639] Modules linked in:
[   47.270376][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   47.279132][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.289457][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   47.295323][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   47.315686][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010006
[   47.321878][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   47.330294][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   47.338506][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   47.346495][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046a
[   47.354471][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   47.362619][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   47.371644][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   47.378423][ T1639] CR2: 00007f99c96c9ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   47.386592][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   47.394653][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   47.402623][ T1639] Call Trace:
[   47.405978][ T1639]  <TASK>
[   47.408929][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   47.414670][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.419876][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   47.424653][ T1639]  rb_buffer_peek+0x60/0x7a0
[   47.429245][ T1639]  ring_buffer_consume+0x1aa/0x370
[   47.434355][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   47.439886][ T1639]  ? print_trace_line+0x385/0x690
[   47.445060][ T1639]  tracing_read_pipe+0x599/0xab0
[   47.450111][ T1639]  ? s_show+0x320/0x320
[   47.454440][ T1639]  vfs_read+0x28c/0xc20
[   47.458594][ T1639]  ? kernel_read+0x1f0/0x1f0
[   47.463168][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.468275][ T1639]  ? mutex_lock+0x9b/0x1c0
[   47.472763][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   47.479338][ T1639]  ? __fget_files+0x2e1/0x340
[   47.484022][ T1639]  ? __fdget_pos+0x2d2/0x380
[   47.488607][ T1639]  ? ksys_read+0x70/0x260
[   47.493009][ T1639]  ksys_read+0x14a/0x260
[   47.497333][ T1639]  ? vfs_write+0xfd0/0xfd0
[   47.501749][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.506859][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   47.512063][ T1639]  __x64_sys_read+0x7b/0x90
[   47.516550][ T1639]  x64_sys_call+0x96d/0x9a0
[   47.521041][ T1639]  do_syscall_64+0x4c/0xa0
[   47.525438][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.530116][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.534777][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   47.540752][ T1639] RIP: 0033:0x7f99cacb2f99
[   47.545155][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.564832][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.573435][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   47.581486][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   47.589768][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   47.598106][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.606076][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   47.614056][ T1639]  </TASK>
[   47.617157][ T1639] ---[ end trace 2b41b05416fd5f09 ]---
[   47.622901][ T1639] ------------[ cut here ]------------
[   47.628358][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   47.639265][ T1639] Modules linked in:
[   47.643254][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   47.651918][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.662074][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   47.668066][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   47.687764][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   47.693857][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   47.701827][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   47.709970][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   47.718131][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046a
[   47.726216][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   47.735271][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   47.744533][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   47.751230][ T1639] CR2: 00007f99c96c9ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   47.759460][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   47.767957][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   47.776402][ T1639] Call Trace:
[   47.779690][ T1639]  <TASK>
[   47.782630][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   47.788264][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.793374][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   47.798333][ T1639]  rb_advance_reader+0x2b/0x6b0
[   47.803288][ T1639]  ring_buffer_consume+0x1e7/0x370
[   47.808543][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   47.814484][ T1639]  ? print_trace_line+0x385/0x690
[   47.819743][ T1639]  tracing_read_pipe+0x599/0xab0
[   47.824868][ T1639]  ? s_show+0x320/0x320
[   47.829150][ T1639]  vfs_read+0x28c/0xc20
[   47.833566][ T1639]  ? kernel_read+0x1f0/0x1f0
[   47.838424][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.844092][ T1639]  ? mutex_lock+0x9b/0x1c0
[   47.848880][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   47.855927][ T1639]  ? __fget_files+0x2e1/0x340
[   47.861162][ T1639]  ? __fdget_pos+0x2d2/0x380
[   47.865981][ T1639]  ? ksys_read+0x70/0x260
[   47.870446][ T1639]  ksys_read+0x14a/0x260
[   47.875259][ T1639]  ? vfs_write+0xfd0/0xfd0
[   47.880024][ T1639]  ? __kasan_check_write+0x14/0x20
[   47.885334][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   47.890771][ T1639]  __x64_sys_read+0x7b/0x90
[   47.895390][ T1639]  x64_sys_call+0x96d/0x9a0
[   47.900109][ T1639]  do_syscall_64+0x4c/0xa0
[   47.904711][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.909464][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   47.914341][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   47.920368][ T1639] RIP: 0033:0x7f99cacb2f99
[   47.925215][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.946759][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.955606][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   47.963583][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   47.971649][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   47.979657][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.987720][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   47.995779][ T1639]  </TASK>
[   47.998962][ T1639] ---[ end trace 2b41b05416fd5f0a ]---
[   48.092995][ T1639] ------------[ cut here ]------------
[   48.098485][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   48.109016][ T1639] Modules linked in:
[   48.112904][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   48.121676][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.131979][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   48.137797][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   48.157480][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   48.163572][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   48.171708][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   48.179677][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   48.187695][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046e
[   48.195984][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   48.203982][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   48.212935][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.220402][ T1639] CR2: 00007f99c92a7d58 CR3: 000000011c72f000 CR4: 00000000003526b0
[   48.228471][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   48.236442][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   48.244418][ T1639] Call Trace:
[   48.247705][ T1639]  <TASK>
[   48.250731][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   48.256542][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.261787][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   48.266463][ T1639]  rb_buffer_peek+0x60/0x7a0
[   48.271055][ T1639]  ring_buffer_peek+0x184/0x3b0
[   48.276003][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   48.281731][ T1639]  ? preempt_schedule+0xbc/0xd0
[   48.286624][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   48.292357][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   48.298520][ T1639]  __find_next_entry+0x34d/0x6b0
[   48.303786][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   48.309273][ T1639]  ? trace_find_next_entry+0x370/0x370
[   48.315063][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   48.320651][ T1639]  ? print_trace_line+0x385/0x690
[   48.325843][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   48.331392][ T1639]  ? s_show+0x320/0x320
[   48.335648][ T1639]  vfs_read+0x28c/0xc20
[   48.339817][ T1639]  ? kernel_read+0x1f0/0x1f0
[   48.344400][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.349594][ T1639]  ? mutex_lock+0x9b/0x1c0
[   48.354258][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   48.360883][ T1639]  ? __fget_files+0x2e1/0x340
[   48.365575][ T1639]  ? __fdget_pos+0x2d2/0x380
[   48.370164][ T1639]  ? ksys_read+0x70/0x260
[   48.374507][ T1639]  ksys_read+0x14a/0x260
[   48.378868][ T1639]  ? vfs_write+0xfd0/0xfd0
[   48.383380][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.388536][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   48.393793][ T1639]  __x64_sys_read+0x7b/0x90
[   48.398387][ T1639]  x64_sys_call+0x96d/0x9a0
[   48.402887][ T1639]  do_syscall_64+0x4c/0xa0
[   48.407468][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   48.412167][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   48.417015][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   48.422916][ T1639] RIP: 0033:0x7f99cacb2f99
[   48.427329][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.447039][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   48.455707][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   48.463918][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   48.472182][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   48.480265][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.488397][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   48.496560][ T1639]  </TASK>
[   48.499584][ T1639] ---[ end trace 2b41b05416fd5f0b ]---
[   48.511723][ T1639] ------------[ cut here ]------------
[   48.517336][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   48.527586][ T1639] Modules linked in:
[   48.531476][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   48.540260][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.550447][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   48.556276][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   48.576015][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010002
[   48.582076][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   48.590113][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   48.598171][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   48.606131][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046e
[   48.614091][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   48.622344][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   48.631371][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.638158][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   48.646298][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   48.654537][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   48.662751][ T1639] Call Trace:
[   48.666035][ T1639]  <TASK>
[   48.669075][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   48.674721][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.679927][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   48.684883][ T1639]  rb_buffer_peek+0x60/0x7a0
[   48.689676][ T1639]  ring_buffer_consume+0x1aa/0x370
[   48.694791][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   48.700430][ T1639]  ? print_trace_line+0x385/0x690
[   48.705822][ T1639]  tracing_read_pipe+0x599/0xab0
[   48.710782][ T1639]  ? s_show+0x320/0x320
[   48.715418][ T1639]  vfs_read+0x28c/0xc20
[   48.721006][ T1639]  ? kernel_read+0x1f0/0x1f0
[   48.725631][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.731096][ T1639]  ? mutex_lock+0x9b/0x1c0
[   48.735503][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   48.742082][ T1639]  ? __fget_files+0x2e1/0x340
[   48.746748][ T1639]  ? __fdget_pos+0x2d2/0x380
[   48.751323][ T1639]  ? ksys_read+0x70/0x260
[   48.756171][ T1639]  ksys_read+0x14a/0x260
[   48.760604][ T1639]  ? vfs_write+0xfd0/0xfd0
[   48.765025][ T1639]  ? __kasan_check_write+0x14/0x20
[   48.770125][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   48.775348][ T1639]  __x64_sys_read+0x7b/0x90
[   48.779979][ T1639]  x64_sys_call+0x96d/0x9a0
[   48.784496][ T1639]  do_syscall_64+0x4c/0xa0
[   48.788931][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   48.793634][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   48.798313][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   48.804223][ T1639] RIP: 0033:0x7f99cacb2f99
[   48.808788][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.828412][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   48.837001][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   48.844969][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   48.852948][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   48.860926][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.868994][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   48.877243][ T1639]  </TASK>
[   48.880278][ T1639] ---[ end trace 2b41b05416fd5f0c ]---
[   48.885781][ T1639] ------------[ cut here ]------------
[   48.891219][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   48.901461][ T1639] Modules linked in:
[   48.905362][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   48.914213][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.924297][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   48.930217][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   48.949985][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   48.956055][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   48.964023][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   48.972204][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   48.980264][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041046e
[   48.988233][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   48.996215][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   49.005146][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   49.011794][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   49.020017][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   49.028004][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   49.036432][ T1639] Call Trace:
[   49.039739][ T1639]  <TASK>
[   49.042843][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   49.048481][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.053596][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   49.058380][ T1639]  rb_advance_reader+0x2b/0x6b0
[   49.063457][ T1639]  ring_buffer_consume+0x1e7/0x370
[   49.068760][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   49.074309][ T1639]  ? print_trace_line+0x385/0x690
[   49.079414][ T1639]  tracing_read_pipe+0x599/0xab0
[   49.084470][ T1639]  ? s_show+0x320/0x320
[   49.088629][ T1639]  vfs_read+0x28c/0xc20
[   49.092777][ T1639]  ? kernel_read+0x1f0/0x1f0
[   49.097369][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.102560][ T1639]  ? mutex_lock+0x9b/0x1c0
[   49.107048][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   49.113618][ T1639]  ? __fget_files+0x2e1/0x340
[   49.118303][ T1639]  ? __fdget_pos+0x2d2/0x380
[   49.122970][ T1639]  ? ksys_read+0x70/0x260
[   49.127301][ T1639]  ksys_read+0x14a/0x260
[   49.131900][ T1639]  ? vfs_write+0xfd0/0xfd0
[   49.136412][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.141703][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   49.146927][ T1639]  __x64_sys_read+0x7b/0x90
[   49.151430][ T1639]  x64_sys_call+0x96d/0x9a0
[   49.155927][ T1639]  do_syscall_64+0x4c/0xa0
[   49.160345][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.165014][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.169681][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   49.175559][ T1639] RIP: 0033:0x7f99cacb2f99
[   49.180759][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.200622][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.209211][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   49.217433][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   49.225960][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   49.234063][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.242215][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   49.250215][ T1639]  </TASK>
[   49.253249][ T1639] ---[ end trace 2b41b05416fd5f0d ]---
[   49.264487][ T1639] ------------[ cut here ]------------
[   49.269973][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   49.280622][ T1639] Modules linked in:
[   49.284732][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   49.293413][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.303910][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   49.309730][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   49.329838][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010006
[   49.336131][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   49.344367][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   49.352335][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   49.360311][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410472
[   49.368277][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   49.376346][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   49.385886][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   49.392572][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   49.401114][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   49.409106][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   49.417079][ T1639] Call Trace:
[   49.420367][ T1639]  <TASK>
[   49.423482][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   49.429128][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.434245][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   49.438980][ T1639]  rb_buffer_peek+0x60/0x7a0
[   49.443685][ T1639]  ring_buffer_peek+0x184/0x3b0
[   49.448785][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   49.454430][ T1639]  ? preempt_schedule+0xbc/0xd0
[   49.459585][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   49.465280][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   49.471715][ T1639]  __find_next_entry+0x34d/0x6b0
[   49.476793][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   49.482386][ T1639]  ? trace_find_next_entry+0x370/0x370
[   49.487843][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   49.493996][ T1639]  ? print_trace_line+0x385/0x690
[   49.499119][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   49.504130][ T1639]  ? s_show+0x320/0x320
[   49.508358][ T1639]  vfs_read+0x28c/0xc20
[   49.512612][ T1639]  ? kernel_read+0x1f0/0x1f0
[   49.517375][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.522607][ T1639]  ? mutex_lock+0x9b/0x1c0
[   49.527048][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   49.534162][ T1639]  ? __fget_files+0x2e1/0x340
[   49.539389][ T1639]  ? __fdget_pos+0x2d2/0x380
[   49.543985][ T1639]  ? ksys_read+0x70/0x260
[   49.548321][ T1639]  ksys_read+0x14a/0x260
[   49.552656][ T1639]  ? vfs_write+0xfd0/0xfd0
[   49.557277][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.562488][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   49.567601][ T1639]  __x64_sys_read+0x7b/0x90
[   49.572109][ T1639]  x64_sys_call+0x96d/0x9a0
[   49.576622][ T1639]  do_syscall_64+0x4c/0xa0
[   49.581126][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.585823][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.590510][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   49.596402][ T1639] RIP: 0033:0x7f99cacb2f99
[   49.600819][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.621084][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.629675][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   49.637830][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   49.646683][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   49.654660][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.662627][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   49.671288][ T1639]  </TASK>
[   49.674333][ T1639] ---[ end trace 2b41b05416fd5f0e ]---
[   49.682665][ T1639] ------------[ cut here ]------------
[   49.688137][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   49.698563][ T1639] Modules linked in:
[   49.702457][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   49.711122][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.721174][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   49.726998][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   49.747287][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010002
[   49.753548][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   49.761700][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   49.769688][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   49.777802][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410472
[   49.786176][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   49.794249][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   49.803177][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   49.809784][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   49.817765][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   49.825910][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   49.834051][ T1639] Call Trace:
[   49.837345][ T1639]  <TASK>
[   49.840358][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   49.845998][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.851124][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   49.855815][ T1639]  rb_buffer_peek+0x60/0x7a0
[   49.860510][ T1639]  ring_buffer_consume+0x1aa/0x370
[   49.865633][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   49.871177][ T1639]  ? print_trace_line+0x385/0x690
[   49.876209][ T1639]  tracing_read_pipe+0x599/0xab0
[   49.881147][ T1639]  ? s_show+0x320/0x320
[   49.885307][ T1639]  vfs_read+0x28c/0xc20
[   49.889484][ T1639]  ? kernel_read+0x1f0/0x1f0
[   49.894085][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.899202][ T1639]  ? mutex_lock+0x9b/0x1c0
[   49.903615][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   49.910217][ T1639]  ? __fget_files+0x2e1/0x340
[   49.914993][ T1639]  ? __fdget_pos+0x2d2/0x380
[   49.919789][ T1639]  ? ksys_read+0x70/0x260
[   49.924230][ T1639]  ksys_read+0x14a/0x260
[   49.928932][ T1639]  ? vfs_write+0xfd0/0xfd0
[   49.933357][ T1639]  ? __kasan_check_write+0x14/0x20
[   49.938488][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   49.943794][ T1639]  __x64_sys_read+0x7b/0x90
[   49.948291][ T1639]  x64_sys_call+0x96d/0x9a0
[   49.952785][ T1639]  do_syscall_64+0x4c/0xa0
[   49.957189][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.962045][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   49.966738][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   49.972625][ T1639] RIP: 0033:0x7f99cacb2f99
[   49.977054][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.996861][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.005470][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   50.013712][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   50.022412][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   50.030596][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.038746][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   50.046718][ T1639]  </TASK>
[   50.049966][ T1639] ---[ end trace 2b41b05416fd5f0f ]---
[   50.055478][ T1639] ------------[ cut here ]------------
[   50.060941][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   50.071279][ T1639] Modules linked in:
[   50.075177][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   50.083873][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.093922][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   50.099750][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   50.119522][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   50.125702][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   50.133936][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   50.141895][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   50.149949][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410472
[   50.158096][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   50.166058][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   50.175091][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.181919][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   50.189918][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.198242][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.206290][ T1639] Call Trace:
[   50.209559][ T1639]  <TASK>
[   50.212594][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   50.218456][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.223659][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   50.228470][ T1639]  rb_advance_reader+0x2b/0x6b0
[   50.233429][ T1639]  ring_buffer_consume+0x1e7/0x370
[   50.238641][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   50.244199][ T1639]  ? print_trace_line+0x385/0x690
[   50.249570][ T1639]  tracing_read_pipe+0x599/0xab0
[   50.254713][ T1639]  ? s_show+0x320/0x320
[   50.258959][ T1639]  vfs_read+0x28c/0xc20
[   50.263882][ T1639]  ? kernel_read+0x1f0/0x1f0
[   50.268578][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.273866][ T1639]  ? mutex_lock+0x9b/0x1c0
[   50.278286][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   50.284867][ T1639]  ? __fget_files+0x2e1/0x340
[   50.289537][ T1639]  ? __fdget_pos+0x2d2/0x380
[   50.294135][ T1639]  ? ksys_read+0x70/0x260
[   50.298467][ T1639]  ksys_read+0x14a/0x260
[   50.302741][ T1639]  ? vfs_write+0xfd0/0xfd0
[   50.307165][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.312289][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   50.317527][ T1639]  __x64_sys_read+0x7b/0x90
[   50.322155][ T1639]  x64_sys_call+0x96d/0x9a0
[   50.326655][ T1639]  do_syscall_64+0x4c/0xa0
[   50.331100][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   50.335859][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   50.340530][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   50.346421][ T1639] RIP: 0033:0x7f99cacb2f99
[   50.350912][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.370749][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.379162][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   50.387125][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   50.395092][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   50.403138][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.411316][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   50.419298][ T1639]  </TASK>
[   50.422325][ T1639] ---[ end trace 2b41b05416fd5f10 ]---
[   50.432350][ T1639] ------------[ cut here ]------------
[   50.437821][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   50.448238][ T1639] Modules linked in:
[   50.452122][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   50.460783][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.470853][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   50.476669][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   50.496361][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   50.502430][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   50.510407][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   50.518544][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   50.526534][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410476
[   50.534593][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   50.542688][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   50.551628][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.558298][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   50.566733][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.574697][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.583228][ T1639] Call Trace:
[   50.586509][ T1639]  <TASK>
[   50.589539][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   50.595281][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.600472][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   50.605138][ T1639]  rb_buffer_peek+0x60/0x7a0
[   50.609723][ T1639]  ring_buffer_peek+0x184/0x3b0
[   50.614919][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   50.620473][ T1639]  ? preempt_schedule+0xbc/0xd0
[   50.625393][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   50.631010][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   50.637154][ T1639]  __find_next_entry+0x34d/0x6b0
[   50.642171][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   50.647562][ T1639]  ? trace_find_next_entry+0x370/0x370
[   50.653033][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   50.658873][ T1639]  ? print_trace_line+0x385/0x690
[   50.664093][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   50.669158][ T1639]  ? s_show+0x320/0x320
[   50.673315][ T1639]  vfs_read+0x28c/0xc20
[   50.677464][ T1639]  ? kernel_read+0x1f0/0x1f0
[   50.682050][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.687166][ T1639]  ? mutex_lock+0x9b/0x1c0
[   50.691658][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   50.698609][ T1639]  ? __fget_files+0x2e1/0x340
[   50.703301][ T1639]  ? __fdget_pos+0x2d2/0x380
[   50.707914][ T1639]  ? ksys_read+0x70/0x260
[   50.712247][ T1639]  ksys_read+0x14a/0x260
[   50.716481][ T1639]  ? vfs_write+0xfd0/0xfd0
[   50.720882][ T1639]  ? __kasan_check_write+0x14/0x20
[   50.726106][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   50.731236][ T1639]  __x64_sys_read+0x7b/0x90
[   50.735742][ T1639]  x64_sys_call+0x96d/0x9a0
[   50.740237][ T1639]  do_syscall_64+0x4c/0xa0
[   50.744644][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   50.749310][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   50.754159][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   50.760221][ T1639] RIP: 0033:0x7f99cacb2f99
[   50.764744][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.784879][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.793401][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   50.801445][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   50.809464][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   50.817482][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.825543][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   50.833540][ T1639]  </TASK>
[   50.836718][ T1639] ---[ end trace 2b41b05416fd5f11 ]---
[   50.844371][ T1639] ------------[ cut here ]------------
[   50.850177][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   50.860455][ T1639] Modules linked in:
[   50.864364][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   50.873060][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.883314][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   50.889138][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   50.908745][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010002
[   50.914818][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   50.922810][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   50.930787][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   50.938757][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410476
[   50.946982][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   50.954956][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   50.964080][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.970744][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   50.978740][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.987095][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.995277][ T1639] Call Trace:
[   50.998554][ T1639]  <TASK>
[   51.001494][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   51.007131][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.012233][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   51.016911][ T1639]  rb_buffer_peek+0x60/0x7a0
[   51.022120][ T1639]  ring_buffer_consume+0x1aa/0x370
[   51.027308][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   51.032840][ T1639]  ? print_trace_line+0x385/0x690
[   51.037849][ T1639]  tracing_read_pipe+0x599/0xab0
[   51.042783][ T1639]  ? s_show+0x320/0x320
[   51.046922][ T1639]  vfs_read+0x28c/0xc20
[   51.051150][ T1639]  ? kernel_read+0x1f0/0x1f0
[   51.055722][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.060831][ T1639]  ? mutex_lock+0x9b/0x1c0
[   51.065251][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   51.071843][ T1639]  ? __fget_files+0x2e1/0x340
[   51.076729][ T1639]  ? __fdget_pos+0x2d2/0x380
[   51.081321][ T1639]  ? ksys_read+0x70/0x260
[   51.085641][ T1639]  ksys_read+0x14a/0x260
[   51.089876][ T1639]  ? vfs_write+0xfd0/0xfd0
[   51.094282][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.099394][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   51.104495][ T1639]  __x64_sys_read+0x7b/0x90
[   51.108998][ T1639]  x64_sys_call+0x96d/0x9a0
[   51.113487][ T1639]  do_syscall_64+0x4c/0xa0
[   51.117914][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.122616][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.127298][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.133189][ T1639] RIP: 0033:0x7f99cacb2f99
[   51.137765][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.157387][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   51.166187][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   51.174150][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   51.182108][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   51.190152][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.198214][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   51.206195][ T1639]  </TASK>
[   51.209212][ T1639] ---[ end trace 2b41b05416fd5f12 ]---
[   51.214781][ T1639] ------------[ cut here ]------------
[   51.220528][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   51.230780][ T1639] Modules linked in:
[   51.235006][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   51.243776][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.253913][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   51.260082][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   51.280125][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   51.286282][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   51.294347][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   51.302679][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   51.310660][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410476
[   51.318643][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   51.326631][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   51.335563][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   51.342358][ T1639] CR2: 00007f99c8e83ff8 CR3: 000000011c72f000 CR4: 00000000003526b0
[   51.350339][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   51.358320][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   51.366283][ T1639] Call Trace:
[   51.369588][ T1639]  <TASK>
[   51.372757][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   51.378413][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.383622][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   51.388577][ T1639]  rb_advance_reader+0x2b/0x6b0
[   51.393461][ T1639]  ring_buffer_consume+0x1e7/0x370
[   51.398576][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   51.404122][ T1639]  ? print_trace_line+0x385/0x690
[   51.409159][ T1639]  tracing_read_pipe+0x599/0xab0
[   51.414119][ T1639]  ? s_show+0x320/0x320
[   51.418261][ T1639]  vfs_read+0x28c/0xc20
[   51.422441][ T1639]  ? kernel_read+0x1f0/0x1f0
[   51.427022][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.432133][ T1639]  ? mutex_lock+0x9b/0x1c0
[   51.436547][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   51.443233][ T1639]  ? __fget_files+0x2e1/0x340
[   51.447907][ T1639]  ? __fdget_pos+0x2d2/0x380
[   51.452484][ T1639]  ? ksys_read+0x70/0x260
[   51.456985][ T1639]  ksys_read+0x14a/0x260
[   51.461223][ T1639]  ? vfs_write+0xfd0/0xfd0
[   51.465672][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.470828][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   51.475942][ T1639]  __x64_sys_read+0x7b/0x90
[   51.480467][ T1639]  x64_sys_call+0x96d/0x9a0
[   51.485002][ T1639]  do_syscall_64+0x4c/0xa0
[   51.489497][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.494283][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.499077][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.504956][ T1639] RIP: 0033:0x7f99cacb2f99
[   51.509364][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.529440][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   51.537878][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   51.546104][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   51.554303][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   51.562657][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.570693][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   51.578698][ T1639]  </TASK>
[   51.581716][ T1639] ---[ end trace 2b41b05416fd5f13 ]---
[   51.605259][ T1639] ------------[ cut here ]------------
[   51.610753][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   51.621101][ T1639] Modules linked in:
[   51.625262][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   51.633954][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.644215][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   51.650032][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   51.670083][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010012
[   51.676178][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   51.684148][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   51.692121][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   51.700262][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047a
[   51.708228][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   51.716661][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   51.725882][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   51.732577][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   51.741039][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   51.749066][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   51.757059][ T1639] Call Trace:
[   51.760510][ T1639]  <TASK>
[   51.764102][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   51.769839][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.775054][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   51.779720][ T1639]  rb_buffer_peek+0x60/0x7a0
[   51.784399][ T1639]  ring_buffer_peek+0x184/0x3b0
[   51.789629][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   51.795349][ T1639]  ? preempt_schedule+0xbc/0xd0
[   51.800214][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   51.805979][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   51.812267][ T1639]  __find_next_entry+0x34d/0x6b0
[   51.817430][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   51.822924][ T1639]  ? trace_find_next_entry+0x370/0x370
[   51.828499][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   51.834053][ T1639]  ? print_trace_line+0x385/0x690
[   51.839248][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   51.844195][ T1639]  ? s_show+0x320/0x320
[   51.848341][ T1639]  vfs_read+0x28c/0xc20
[   51.852498][ T1639]  ? kernel_read+0x1f0/0x1f0
[   51.857168][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.862375][ T1639]  ? mutex_lock+0x9b/0x1c0
[   51.866870][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   51.873474][ T1639]  ? __fget_files+0x2e1/0x340
[   51.878164][ T1639]  ? __fdget_pos+0x2d2/0x380
[   51.882896][ T1639]  ? ksys_read+0x70/0x260
[   51.887237][ T1639]  ksys_read+0x14a/0x260
[   51.891501][ T1639]  ? vfs_write+0xfd0/0xfd0
[   51.896134][ T1639]  ? __kasan_check_write+0x14/0x20
[   51.901256][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   51.906540][ T1639]  __x64_sys_read+0x7b/0x90
[   51.911072][ T1639]  x64_sys_call+0x96d/0x9a0
[   51.915583][ T1639]  do_syscall_64+0x4c/0xa0
[   51.920003][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.924881][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   51.929793][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.935786][ T1639] RIP: 0033:0x7f99cacb2f99
[   51.940384][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.960015][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   51.968437][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   51.977021][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   51.984986][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   51.992953][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.000938][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   52.009013][ T1639]  </TASK>
[   52.012043][ T1639] ---[ end trace 2b41b05416fd5f14 ]---
[   52.021473][ T1639] ------------[ cut here ]------------
[   52.026935][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   52.037256][ T1639] Modules linked in:
[   52.041248][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   52.049924][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.060151][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   52.065987][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   52.085672][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010006
[   52.091729][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   52.099690][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   52.107669][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   52.115686][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047a
[   52.123654][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   52.131708][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   52.140734][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.147311][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   52.155282][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.163276][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.171251][ T1639] Call Trace:
[   52.174520][ T1639]  <TASK>
[   52.177444][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   52.183132][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.188265][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   52.192952][ T1639]  rb_buffer_peek+0x60/0x7a0
[   52.197634][ T1639]  ring_buffer_consume+0x1aa/0x370
[   52.202887][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   52.208526][ T1639]  ? print_trace_line+0x385/0x690
[   52.213638][ T1639]  tracing_read_pipe+0x599/0xab0
[   52.218593][ T1639]  ? s_show+0x320/0x320
[   52.222966][ T1639]  vfs_read+0x28c/0xc20
[   52.227225][ T1639]  ? kernel_read+0x1f0/0x1f0
[   52.231828][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.236931][ T1639]  ? mutex_lock+0x9b/0x1c0
[   52.241430][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   52.248021][ T1639]  ? __fget_files+0x2e1/0x340
[   52.252683][ T1639]  ? __fdget_pos+0x2d2/0x380
[   52.257350][ T1639]  ? ksys_read+0x70/0x260
[   52.261841][ T1639]  ksys_read+0x14a/0x260
[   52.266080][ T1639]  ? vfs_write+0xfd0/0xfd0
[   52.270915][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.276011][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   52.281350][ T1639]  __x64_sys_read+0x7b/0x90
[   52.285867][ T1639]  x64_sys_call+0x96d/0x9a0
[   52.290373][ T1639]  do_syscall_64+0x4c/0xa0
[   52.294969][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   52.299637][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   52.304300][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.310185][ T1639] RIP: 0033:0x7f99cacb2f99
[   52.314616][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.334310][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.342808][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   52.350874][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   52.358932][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   52.367390][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.375543][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   52.383797][ T1639]  </TASK>
[   52.386816][ T1639] ---[ end trace 2b41b05416fd5f15 ]---
[   52.392295][ T1639] ------------[ cut here ]------------
[   52.397736][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   52.408229][ T1639] Modules linked in:
[   52.412211][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   52.420883][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.430932][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   52.436910][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   52.456594][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010006
[   52.462748][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   52.470734][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   52.478719][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   52.486877][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047a
[   52.495010][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   52.502969][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   52.512065][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.519181][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   52.527426][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.535385][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.543340][ T1639] Call Trace:
[   52.546611][ T1639]  <TASK>
[   52.549533][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   52.555242][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.560350][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   52.565214][ T1639]  rb_advance_reader+0x2b/0x6b0
[   52.570096][ T1639]  ring_buffer_consume+0x1e7/0x370
[   52.575312][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   52.580867][ T1639]  ? print_trace_line+0x385/0x690
[   52.585966][ T1639]  tracing_read_pipe+0x599/0xab0
[   52.590991][ T1639]  ? s_show+0x320/0x320
[   52.595152][ T1639]  vfs_read+0x28c/0xc20
[   52.599305][ T1639]  ? kernel_read+0x1f0/0x1f0
[   52.603908][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.609004][ T1639]  ? mutex_lock+0x9b/0x1c0
[   52.613410][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   52.619984][ T1639]  ? __fget_files+0x2e1/0x340
[   52.624675][ T1639]  ? __fdget_pos+0x2d2/0x380
[   52.629366][ T1639]  ? ksys_read+0x70/0x260
[   52.633698][ T1639]  ksys_read+0x14a/0x260
[   52.637928][ T1639]  ? vfs_write+0xfd0/0xfd0
[   52.642324][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.647514][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   52.652933][ T1639]  __x64_sys_read+0x7b/0x90
[   52.657730][ T1639]  x64_sys_call+0x96d/0x9a0
[   52.662587][ T1639]  do_syscall_64+0x4c/0xa0
[   52.667000][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   52.671672][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   52.676351][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.682253][ T1639] RIP: 0033:0x7f99cacb2f99
[   52.686671][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.706536][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.714952][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   52.723116][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   52.731097][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   52.739057][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.747013][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   52.755010][ T1639]  </TASK>
[   52.758031][ T1639] ---[ end trace 2b41b05416fd5f16 ]---
[   52.768095][ T1639] ------------[ cut here ]------------
[   52.773567][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   52.783941][ T1639] Modules linked in:
[   52.787922][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   52.796601][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.806648][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   52.812536][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   52.832309][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   52.838380][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   52.846937][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   52.854922][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   52.863183][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047e
[   52.871620][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   52.880470][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   52.889756][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.896354][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   52.904476][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.912450][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.920498][ T1639] Call Trace:
[   52.923903][ T1639]  <TASK>
[   52.926836][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   52.932548][ T1639]  ? __kasan_check_write+0x14/0x20
[   52.937660][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   52.942358][ T1639]  rb_buffer_peek+0x60/0x7a0
[   52.946948][ T1639]  ring_buffer_peek+0x184/0x3b0
[   52.951940][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   52.957498][ T1639]  ? preempt_schedule+0xbc/0xd0
[   52.962357][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   52.968128][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   52.974543][ T1639]  __find_next_entry+0x34d/0x6b0
[   52.979795][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   52.985310][ T1639]  ? trace_find_next_entry+0x370/0x370
[   52.990991][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   52.996787][ T1639]  ? print_trace_line+0x385/0x690
[   53.001929][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   53.006880][ T1639]  ? s_show+0x320/0x320
[   53.011173][ T1639]  vfs_read+0x28c/0xc20
[   53.015356][ T1639]  ? kernel_read+0x1f0/0x1f0
[   53.019970][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.025081][ T1639]  ? mutex_lock+0x9b/0x1c0
[   53.029653][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   53.036242][ T1639]  ? __fget_files+0x2e1/0x340
[   53.040935][ T1639]  ? __fdget_pos+0x2d2/0x380
[   53.045689][ T1639]  ? ksys_read+0x70/0x260
[   53.050106][ T1639]  ksys_read+0x14a/0x260
[   53.054650][ T1639]  ? vfs_write+0xfd0/0xfd0
[   53.059536][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.064693][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   53.070222][ T1639]  __x64_sys_read+0x7b/0x90
[   53.074741][ T1639]  x64_sys_call+0x96d/0x9a0
[   53.079252][ T1639]  do_syscall_64+0x4c/0xa0
[   53.083762][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.088534][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.093228][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.099325][ T1639] RIP: 0033:0x7f99cacb2f99
[   53.103766][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.123829][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.132478][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   53.140635][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   53.148608][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   53.156655][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.164902][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   53.172870][ T1639]  </TASK>
[   53.175899][ T1639] ---[ end trace 2b41b05416fd5f17 ]---
[   53.183651][ T1639] ------------[ cut here ]------------
[   53.189235][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   53.199920][ T1639] Modules linked in:
[   53.203806][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   53.212478][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.222623][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   53.228418][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   53.248187][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010006
[   53.254265][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   53.262534][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   53.270943][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   53.279030][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047e
[   53.287015][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   53.295001][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   53.304031][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.310615][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   53.318983][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.326978][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.334956][ T1639] Call Trace:
[   53.338229][ T1639]  <TASK>
[   53.341183][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   53.346808][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.351920][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   53.356675][ T1639]  rb_buffer_peek+0x60/0x7a0
[   53.361362][ T1639]  ring_buffer_consume+0x1aa/0x370
[   53.366494][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   53.372054][ T1639]  ? print_trace_line+0x385/0x690
[   53.377270][ T1639]  tracing_read_pipe+0x599/0xab0
[   53.382219][ T1639]  ? s_show+0x320/0x320
[   53.386366][ T1639]  vfs_read+0x28c/0xc20
[   53.390516][ T1639]  ? kernel_read+0x1f0/0x1f0
[   53.395097][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.400227][ T1639]  ? mutex_lock+0x9b/0x1c0
[   53.404752][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   53.411439][ T1639]  ? __fget_files+0x2e1/0x340
[   53.416311][ T1639]  ? __fdget_pos+0x2d2/0x380
[   53.421270][ T1639]  ? ksys_read+0x70/0x260
[   53.425786][ T1639]  ksys_read+0x14a/0x260
[   53.430112][ T1639]  ? vfs_write+0xfd0/0xfd0
[   53.434607][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.439735][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   53.444871][ T1639]  __x64_sys_read+0x7b/0x90
[   53.449375][ T1639]  x64_sys_call+0x96d/0x9a0
[   53.453973][ T1639]  do_syscall_64+0x4c/0xa0
[   53.458519][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.463258][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.468463][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.474436][ T1639] RIP: 0033:0x7f99cacb2f99
[   53.478866][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.498562][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.507257][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   53.515310][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   53.523746][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   53.531985][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.540037][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   53.548028][ T1639]  </TASK>
[   53.551042][ T1639] ---[ end trace 2b41b05416fd5f18 ]---
[   53.556697][ T1639] ------------[ cut here ]------------
[   53.562132][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   53.572457][ T1639] Modules linked in:
[   53.576334][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   53.585091][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.595229][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   53.601032][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   53.620816][ T1639] RSP: 0018:ffffc90000aa7940 EFLAGS: 00010002
[   53.626875][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   53.634937][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   53.642983][ T1639] RBP: ffffc90000aa7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   53.650949][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000000041047e
[   53.658920][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   53.666964][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   53.675973][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.682735][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   53.691048][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.699137][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.707122][ T1639] Call Trace:
[   53.710416][ T1639]  <TASK>
[   53.713358][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   53.719025][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.724342][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   53.729039][ T1639]  rb_advance_reader+0x2b/0x6b0
[   53.733919][ T1639]  ring_buffer_consume+0x1e7/0x370
[   53.739327][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   53.744983][ T1639]  ? print_trace_line+0x385/0x690
[   53.750186][ T1639]  tracing_read_pipe+0x599/0xab0
[   53.755376][ T1639]  ? s_show+0x320/0x320
[   53.759627][ T1639]  vfs_read+0x28c/0xc20
[   53.763800][ T1639]  ? kernel_read+0x1f0/0x1f0
[   53.768658][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.773769][ T1639]  ? mutex_lock+0x9b/0x1c0
[   53.778188][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   53.784775][ T1639]  ? __fget_files+0x2e1/0x340
[   53.789665][ T1639]  ? __fdget_pos+0x2d2/0x380
[   53.794350][ T1639]  ? ksys_read+0x70/0x260
[   53.798769][ T1639]  ksys_read+0x14a/0x260
[   53.803035][ T1639]  ? vfs_write+0xfd0/0xfd0
[   53.807458][ T1639]  ? __kasan_check_write+0x14/0x20
[   53.812574][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   53.817701][ T1639]  __x64_sys_read+0x7b/0x90
[   53.822205][ T1639]  x64_sys_call+0x96d/0x9a0
[   53.826837][ T1639]  do_syscall_64+0x4c/0xa0
[   53.831262][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.835935][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   53.840609][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.846508][ T1639] RIP: 0033:0x7f99cacb2f99
[   53.850915][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.870513][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.878938][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   53.886906][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   53.894875][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   53.902860][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.910840][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   53.919276][ T1639]  </TASK>
[   53.922304][ T1639] ---[ end trace 2b41b05416fd5f19 ]---
[   53.932288][ T1639] ------------[ cut here ]------------
[   53.937822][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   53.948084][ T1639] Modules linked in:
[   53.951973][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   53.960729][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.971057][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   53.977223][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   53.996847][ T1639] RSP: 0018:ffffc90000aa77e0 EFLAGS: 00010002
[   54.002929][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   54.011162][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   54.019156][ T1639] RBP: ffffc90000aa7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   54.027218][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410482
[   54.035272][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   54.043240][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   54.052166][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.058742][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   54.066731][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.075049][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   54.083067][ T1639] Call Trace:
[   54.086342][ T1639]  <TASK>
[   54.089270][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   54.094919][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.100116][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   54.104790][ T1639]  rb_buffer_peek+0x60/0x7a0
[   54.109367][ T1639]  ring_buffer_peek+0x184/0x3b0
[   54.114219][ T1639]  ? ring_buffer_iter_empty+0x370/0x370
[   54.119778][ T1639]  ? preempt_schedule+0xbc/0xd0
[   54.124633][ T1639]  ? schedule_preempt_disabled+0x20/0x20
[   54.130259][ T1639]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   54.136405][ T1639]  __find_next_entry+0x34d/0x6b0
[   54.141373][ T1639]  ? preempt_schedule_thunk+0x16/0x18
[   54.146820][ T1639]  ? trace_find_next_entry+0x370/0x370
[   54.152267][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   54.157794][ T1639]  ? print_trace_line+0x385/0x690
[   54.162803][ T1639]  tracing_read_pipe+0x3b8/0xab0
[   54.168169][ T1639]  ? s_show+0x320/0x320
[   54.172432][ T1639]  vfs_read+0x28c/0xc20
[   54.176660][ T1639]  ? kernel_read+0x1f0/0x1f0
[   54.181880][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.186985][ T1639]  ? mutex_lock+0x9b/0x1c0
[   54.191404][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   54.198092][ T1639]  ? __fget_files+0x2e1/0x340
[   54.202863][ T1639]  ? __fdget_pos+0x2d2/0x380
[   54.207453][ T1639]  ? ksys_read+0x70/0x260
[   54.211786][ T1639]  ksys_read+0x14a/0x260
[   54.216125][ T1639]  ? vfs_write+0xfd0/0xfd0
[   54.220667][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.225982][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   54.231302][ T1639]  __x64_sys_read+0x7b/0x90
[   54.236077][ T1639]  x64_sys_call+0x96d/0x9a0
[   54.240604][ T1639]  do_syscall_64+0x4c/0xa0
[   54.245018][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   54.249706][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   54.254485][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   54.260478][ T1639] RIP: 0033:0x7f99cacb2f99
[   54.264908][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.284784][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   54.293207][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99
[   54.301290][ T1639] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000009
[   54.309441][ T1639] RBP: 00007f99cad49ec4 R08: 0000000000000000 R09: 0000000000000000
[   54.317412][ T1639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.325392][ T1639] R13: 00007f99caf3b038 R14: 00007f99caf3afa0 R15: 00007ffd852427f8
[   54.333385][ T1639]  </TASK>
[   54.336413][ T1639] ---[ end trace 2b41b05416fd5f1a ]---
[   54.343642][ T1639] ------------[ cut here ]------------
[   54.349109][ T1639] WARNING: CPU: 0 PID: 1639 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   54.359347][ T1639] Modules linked in:
[   54.363313][ T1639] CPU: 0 PID: 1639 Comm: syz.7.547 Tainted: G    B   W         syzkaller #0
[   54.371989][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.382039][ T1639] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   54.387960][ T1639] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   54.407797][ T1639] RSP: 0018:ffffc90000aa7920 EFLAGS: 00010006
[   54.413950][ T1639] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[   54.422549][ T1639] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   54.430944][ T1639] RBP: ffffc90000aa7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   54.438906][ T1639] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000410482
[   54.446953][ T1639] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   54.454912][ T1639] FS:  00007f99c970c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   54.463954][ T1639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.470915][ T1639] CR2: 00005577ba8d9e80 CR3: 000000011c72f000 CR4: 00000000003526b0
[   54.478902][ T1639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.486964][ T1639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   54.494952][ T1639] Call Trace:
[   54.498231][ T1639]  <TASK>
[   54.501176][ T1639]  ? ring_buffer_read_page+0x1210/0x1210
[   54.506823][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.512042][ T1639]  ? _raw_spin_lock+0x94/0xf0
[   54.516734][ T1639]  rb_buffer_peek+0x60/0x7a0
[   54.521332][ T1639]  ring_buffer_consume+0x1aa/0x370
[   54.526450][ T1639]  ? ring_buffer_iter_dropped+0x60/0x60
[   54.531999][ T1639]  ? print_trace_line+0x385/0x690
[   54.537036][ T1639]  tracing_read_pipe+0x599/0xab0
[   54.542107][ T1639]  ? s_show+0x320/0x320
[   54.546259][ T1639]  vfs_read+0x28c/0xc20
[   54.550476][ T1639]  ? kernel_read+0x1f0/0x1f0
[   54.555195][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.560312][ T1639]  ? mutex_lock+0x9b/0x1c0
[   54.564823][ T1639]  ? wait_for_completion_killable_timeout+0x10/0x10
[   54.571407][ T1639]  ? __fget_files+0x2e1/0x340
[   54.576073][ T1639]  ? __fdget_pos+0x2d2/0x380
[   54.580677][ T1639]  ? ksys_read+0x70/0x260
[   54.584992][ T1639]  ksys_read+0x14a/0x260
[   54.589234][ T1639]  ? vfs_write+0xfd0/0xfd0
[   54.593643][ T1639]  ? __kasan_check_write+0x14/0x20
[   54.598737][ T1639]  ? switch_fpu_return+0x15d/0x2c0
[   54.603833][ T1639]  __x64_sys_read+0x7b/0x90
[   54.608317][ T1639]  x64_sys_call+0x96d/0x9a0
[   54.612805][ T1639]  do_syscall_64+0x4c/0xa0
[   54.617203][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   54.621864][ T1639]  ? clear_bhb_loop+0x50/0xa0
[   54.626525][ T1639]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   54.632404][ T1639] RIP: 0033:0x7f99cacb2f99
[   54.636825][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.656516][ T1639] RSP: 002b:00007f99c970c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   54.665371][ T1639] RAX: ffffffffffffffda RBX: 00007f99caf3afa0 RCX: 00007f99cacb2f99