last executing test programs:

2m4.747767571s ago: executing program 32 (id=259):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0)
getdents(r1, 0x0, 0x0)

1m44.566807369s ago: executing program 1 (id=594):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setpgid(0x0, r1)

1m43.515701448s ago: executing program 1 (id=598):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0xf4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m43.46750298s ago: executing program 1 (id=603):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f0000001bc0)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)

1m43.176308044s ago: executing program 0 (id=611):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858", @ANYBLOB="13381f1a42a7d4b39f5fbeb72d8e2fcc845965ecf02f1aebc7b164ba1f2bcedc5e1d48c53c3dff65a89b1d5b891f654b24b4e69a7f31cca9e32e3c9b435bea8bd0ff2eddce2ccff8c5f02635d1a4df4a7f233101d247d239229e196e2b4b1c2f2185e4c0336c905fb1e4bde135cac8278f0c836c9068257293552611484d5aecdcd6f744bebf81fbfca81fc9dbf1a8bb5f863d5466ef1d4466e153feb9d722167bc090abb9635b1ef2e34e5cd7dd5d95b07bf24d2ae8f3d0b2576a06e0ffd94ba28af029f8f151fd261269359b0712431724c4b90aa95fa5e10ce69b460f281922f30900750cb41ce1521c4aa3da82368c9504", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16], 0x1, 0x5507, &(0x7f000000cf00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14e142, 0x90)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3)

1m42.068881666s ago: executing program 0 (id=620):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}], 0x1, 0x0)

1m41.971469791s ago: executing program 33 (id=620):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}], 0x1, 0x0)

1m41.953823831s ago: executing program 1 (id=621):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10800, &(0x7f0000000240)={[{@keep_last_dots}, {@sys_tz}, {@keep_last_dots}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@time_offset={'time_offset', 0x3d, 0x1}}]}, 0x1, 0x152a, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

1m41.780776809s ago: executing program 1 (id=627):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000)
write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fd100f000ee1000c", 0x1c)

1m41.620883557s ago: executing program 1 (id=629):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1m41.490098503s ago: executing program 34 (id=629):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1m19.167545582s ago: executing program 6 (id=1235):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x4}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11", 0x5)

1m19.109142765s ago: executing program 6 (id=1239):
r0 = socket(0x10, 0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newqdisc={0x48, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x4}, {0x0, 0x6}, {0xf, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x4, 0x4, 0x8, 0x1, 0x3, 0x7fffffff}}, {0x4}}]}]}, 0x48}}, 0x0)

1m19.029252908s ago: executing program 6 (id=1241):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "000000000710000000030200"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m18.952687472s ago: executing program 6 (id=1244):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbdb, &(0x7f0000002380)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

1m18.644992556s ago: executing program 6 (id=1254):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000580)=[@uexit={0x0, 0x18, 0xffffffffffffffff}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4e6, 0x4, 0x8, 0x4775}}], 0x68})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000220001012dbd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840)

1m17.886896862s ago: executing program 6 (id=1271):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000000)={0x30000008})

1m17.833172484s ago: executing program 35 (id=1271):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000000)={0x30000008})

1m0.106895557s ago: executing program 8 (id=1656):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x407}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m0.03045683s ago: executing program 8 (id=1659):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000180)={0x0, 0xb56, 0x5})
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018)

1m0.016931252s ago: executing program 8 (id=1660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01020100e000f40240ab14d0ad0000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x6000010}, 0x40080c0)

59.985147503s ago: executing program 8 (id=1662):
r0 = syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=macgreek,errors=remount-ro,iocharset=macturkish,keep_last_dots,iocharset=macinuit,fmask=00000000000000000001774,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303430303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c66756e633d504154485f434845434b2c00d68f80963e992f7a790f2a9437a29f8b4d470ae365120a367f816615bab1a73bcb0b34104466f040377b3f4ab5a9da23044717ccad042e8ceab3e5ee0a02b86bf4f8cd552aad29ee2912615d138189a059cae1a9f0c650f76fbda44cada54fb491e9ccd6856997ae44d04073d95a4780d15efe4ceeca4c12c9682120298580b5e8c054c336f3b7d648880a653348c06c67adacbad7c26ba9e6cb5357"], 0x7, 0x1532, &(0x7f0000004d00)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4020, &(0x7f00000001c0)=ANY=[@ANYRES16=r0])

59.905307856s ago: executing program 8 (id=1665):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa210102, @broadcast}, {0x11, 0xff, 0x0, @multicast1}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

59.777021092s ago: executing program 8 (id=1666):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = eventfd(0x0)
fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0)

59.62442679s ago: executing program 36 (id=1666):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = eventfd(0x0)
fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0)

46.304883445s ago: executing program 5 (id=2024):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = getpid()
sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="ee74f128", 0x4}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30}}], 0x1, 0x20001040)

46.293161276s ago: executing program 5 (id=2027):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)

46.20062034s ago: executing program 5 (id=2030):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r0, 0x0, 0x20, &(0x7f0000000180)="b1f5d915", 0x4)

46.122397254s ago: executing program 5 (id=2033):
syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)

45.960814221s ago: executing program 5 (id=2037):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000001080)={'wg1\x00'})

45.922922463s ago: executing program 5 (id=2039):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x101410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES8, @ANYBLOB], 0x0, 0x238, &(0x7f00000003c0)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b393b", 0xfe8e}], 0x1)

45.761084661s ago: executing program 37 (id=2039):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x101410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES8, @ANYBLOB], 0x0, 0x238, &(0x7f00000003c0)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b393b", 0xfe8e}], 0x1)

4.824403064s ago: executing program 2 (id=3037):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0}}, 0x10)

4.743007427s ago: executing program 2 (id=3041):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)

3.895601557s ago: executing program 2 (id=3059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1,0x7f0000800000,0x7f0000a00000,0,-1', 0x24)

3.84865983s ago: executing program 2 (id=3061):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)

3.62898223s ago: executing program 2 (id=3065):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
io_uring_setup(0x7e1e, &(0x7f0000000000)={0x0, 0xb79e, 0x20, 0x0, 0x36a, 0x0, r0})

3.512978415s ago: executing program 2 (id=3066):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdr={{0x18, 0x29, 0x39, {0x33, 0x0, 0x2, 0x7}}}], 0x30}, 0xc4)

3.392006121s ago: executing program 38 (id=3066):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdr={{0x18, 0x29, 0x39, {0x33, 0x0, 0x2, 0x7}}}], 0x30}, 0xc4)

2.434416156s ago: executing program 4 (id=3091):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24041091}, 0x800)

2.316211421s ago: executing program 4 (id=3102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6}, @IFLA_BRPORT_GUARD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

2.223242076s ago: executing program 4 (id=3095):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a)

2.169662148s ago: executing program 4 (id=3098):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0xc, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)

2.083341642s ago: executing program 4 (id=3101):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x10082, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6"], 0x1, 0x1059a, &(0x7f0000020c40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
pread64(r0, &(0x7f0000002180)=""/9, 0xfdc5, 0x4ac)

1.981387087s ago: executing program 9 (id=3104):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
close(r0)

1.958533728s ago: executing program 3 (id=3105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.880831082s ago: executing program 9 (id=3107):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
timer_create(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
readahead(r0, 0xfffffffffffffff8, 0x3)

1.783341507s ago: executing program 3 (id=3110):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x0)

1.617908894s ago: executing program 3 (id=3112):
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "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"})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000580)=r1}, 0x20)

1.541583628s ago: executing program 3 (id=3113):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x500, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)

1.446968192s ago: executing program 0 (id=3067):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x12, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]})

1.352237837s ago: executing program 0 (id=3116):
r0 = io_uring_setup(0x40005ba5, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4})
exit(0x1ff)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002480)=[{0x0, 0x0, 0x0}], 0x1)

1.045332121s ago: executing program 9 (id=3117):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x9add, 0x0, 0x0, 0x48000000, 0xffff0001, 0x3, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0)

919.864177ms ago: executing program 7 (id=3120):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0xffffffff}}, 0x10)
bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

883.875669ms ago: executing program 7 (id=3121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x10, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='hist:keys=common_timestamp:vals=', 0x20)

837.664561ms ago: executing program 9 (id=3122):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x13, r0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mprotect(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x0)

837.328221ms ago: executing program 7 (id=3123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

776.526604ms ago: executing program 9 (id=3124):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x593, &(0x7f0000000b40)="$eJzs3c1rFOcfAPDvbF58/f2MINL2UAIearFuTNIXCwXtsbRSob3bJVmDZONKdiMmFdRDhdJLkUIpFUr/gN57lN56af8KoRWkSGgPvaTMZkY32Ww20dWs7ucDo88zz2SfeeaZ59nv7OwyAfSt0fSfQsTLEfF1EnGgqWwwssLR1e2WH1ydSpckVlY++SuJJFuXb59k/+/LMi9FxC9fRBwrtNZbW1yaLVUq5fksP1afuzRWW1w6fmGuNFOeKV+cmJw8+dbkxLvvvL3ltgx0KH/97D/ffXzng5NfHVn+9qd7B28lcTr2Z2XN7XgC15szozGaHZOhOL1uw/EuVNZLku1tPvy09oPtGcjG+VCkc8CBGMhGPfDiuxYRK0CfSox/6FN5HJBf23fpOvi5cf/91Qug1vYPrn42Ersb10Z7l5M1V0bp9e5IF+pP6/j5z9u30iU6fA5xrQv1AeSu34iIE4ODrfNfks1/j+9E48Pjza2vo9/ef2An3Unjnzc2in8KD+Of2CD+2bfB2H0cncd/4V4Xqmkrjf/e2zD+fTh1jQxkuf81Yr6h5PyFSvlERPw/Io7G0K40v9n9nJPLd1falTXHf+mS1p/Hgtl+3BvctfZvpkv10pO0udn9GxGvPIp/k2iZ/3c3Yt31/Z8ej7Np4rcvO9ZxuHz71XZlndvfrPsR8MqPEa9t2P+P7mglm9+fHGucD2P5WdHq75uHf29X//ba331p/+/dvP0jSfP92tr26/hh97/ldmWPe/4PJ5820vmNxCulen1+PGI4+ah1/cSjv83z+fZp+48e2Xz+2+j83xMRn22x/TcP3Wy7aS/0//S2+n/7ibsffv59u/q31v9vNlJHszVbmf+2uoNPcuwAAAAAAACg1xQiYn8kheLDdKFQLK5+v+NQ7C1UqrX6sfPVhYvT0fit7EgMFfI73Qeavg8xnn0fNs9PrMtPRsTBiPhmYE8jX5yqVqZ3uvEAAAAAAAAAAAAAAAAAAADQI/a1+f1/6o9OD9QGnn+dH/ntoeDwouo4urvxpCegJ3l3h/5l/EP/Mv6hfxn/0L+Mf+hfxj/0L+Mf+pfxDwAAAAAAAAAAAAAAAAAAAAAAAAAAAF119syZdFlZfnB1Ks1PX15cmK1ePj5drs0W5xamilPV+UvFmWp1plIuTlXnOr1epVq9ND4RC1fG6uVafay2uHRurrpwsX7uwlxppnyuPPRMWgUAAAAAAAAAAAAAAAAAAADPl9ri0mypUinP70Ti10LEztW+5cSp6PYr50f/2bQi6dTLp7LdWVs03LJmTSLf+cGntfNJRPTGCdCXiZ2bkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgvf8CAAD//6lCLKM=")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "b6f8c75c6c817118591f0f902295d2ad"})

748.724595ms ago: executing program 7 (id=3125):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x40000007, 0x12)

707.130397ms ago: executing program 7 (id=3127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80180002"], 0x44}}, 0x2000800)

628.314491ms ago: executing program 3 (id=3128):
mount$fuse(0x0, 0x0, 0x0, 0x413, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048091)
write$selinux_load(r0, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000)

627.837901ms ago: executing program 7 (id=3129):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
read(r0, &(0x7f0000004000), 0x2000)

572.175904ms ago: executing program 9 (id=3130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './sys/bus/i2c/devices/i2c-0/new_device'}, 0x2a)

464.381778ms ago: executing program 0 (id=3131):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x14d)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)

381.285632ms ago: executing program 3 (id=3132):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_tables_matches\x00')
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009})
epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)

269.759558ms ago: executing program 0 (id=3133):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x9)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

0s ago: executing program 4 (id=3134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x88, 0x1, 0x7c5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

kernel console output (not intermixed with test programs):

): veth1_to_batadv: link becomes ready
[  103.200434][ T4163] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  103.233126][ T4170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4170 comm=syz.9.1667
[  103.274088][ T4163] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  103.283388][ T4163] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  103.356535][ T4179] netlink: 'syz.3.1690': attribute type 3 has an invalid length.
[  103.386819][  T290] syz-executor: attempt to access beyond end of device
[  103.386819][  T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.413858][ T4181] EXT4-fs: Ignoring removed orlov option
[  103.428094][ T4181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  103.452738][ T4181] EXT4-fs (loop7): Test dummy encryption mode enabled
[  103.503234][ T4181] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  103.514653][   T28] audit: type=1400 audit(1790216529.753:798): avc:  denied  { append } for  pid=4180 comm="syz.7.1691" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  103.515108][ T4181] fs-verity: sha256 using implementation "sha256-avx2"
[  103.548595][ T4181] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1691: bg 0: block 98: padding at end of block bitmap is not set
[  103.563670][ T4181] EXT4-fs (loop7): Remounting filesystem read-only
[  103.570326][ T4181] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  103.579596][ T4181] EXT4-fs (loop7): Remounting filesystem read-only
[  103.586570][ T4181] fs-verity (loop7, inode 15): ext4_end_enable_verity() failed with err -28
[  103.611429][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  103.611470][ T1048] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  103.713016][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1702'.
[  103.810010][ T1048] usb 10-1: Using ep0 maxpacket: 16
[  103.816931][ T1048] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.833348][ T4213] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  103.855021][ T1048] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.876207][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  103.882305][ T1048] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.896690][ T1048] usb 10-1: config 0 interface 0 has no altsetting 0
[  103.921896][ T1048] usb 10-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00
[  103.931211][ T1048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.946069][ T1048] usb 10-1: config 0 descriptor??
[  104.237205][   T28] audit: type=1326 audit(1790216530.468:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.281083][   T28] audit: type=1326 audit(1790216530.468:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.306238][   T28] audit: type=1326 audit(1790216530.468:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.331209][   T28] audit: type=1326 audit(1790216530.468:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.358697][   T28] audit: type=1326 audit(1790216530.468:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.388029][ T1048] input: HID 046e:5577 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:046E:5577.0015/input/input19
[  104.403095][   T28] audit: type=1326 audit(1790216530.468:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.429881][   T28] audit: type=1326 audit(1790216530.468:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.455848][ T1048] topseed 0003:046E:5577.0015: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.9-1/input0
[  104.483913][   T28] audit: type=1326 audit(1790216530.468:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.524157][   T28] audit: type=1326 audit(1790216530.468:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.3.1694" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7fc00000
[  104.551857][  T706] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  104.600978][  T297] usb 10-1: USB disconnect, device number 2
[  104.759712][ T4237] set_capacity_and_notify: 6 callbacks suppressed
[  104.759732][ T4237] loop3: detected capacity change from 0 to 40427
[  104.779878][  T706] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.814443][  T706] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.825068][ T4237] F2FS-fs (loop3): invalid crc value
[  104.830940][  T706] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  104.840414][  T706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.850727][ T4237] F2FS-fs (loop3): Found nat_bits in checkpoint
[  104.876956][  T706] hub 8-1:4.0: USB hub found
[  104.934398][ T4237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  105.076458][  T706] hub 8-1:4.0: 2 ports detected
[  105.081449][  T706] usb 8-1: selecting invalid altsetting 1
[  105.091485][  T706] hub 8-1:4.0: Using single TT (err -22)
[  105.270578][  T444] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  105.275077][  T297] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  105.286378][  T706] hub 8-1:4.0: hub_hub_status failed (err = -71)
[  105.303101][  T706] hub 8-1:4.0: config failed, can't get hub status (err -71)
[  105.353444][  T706] usb 8-1: USB disconnect, device number 7
[  105.391742][ T4237] F2FS-fs (loop3): LFS is not compatible with IPU
[  105.415934][ T4285] loop9: detected capacity change from 0 to 512
[  105.423683][ T4285] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  105.447110][ T4285] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[  105.456092][ T4285] EXT4-fs (loop9): orphan cleanup on readonly fs
[  105.459753][  T444] usb 5-1: Using ep0 maxpacket: 16
[  105.468711][ T4285] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3861: comm syz.9.1738: Allocating blocks 41-42 which overlap fs metadata
[  105.483667][ T4285] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.1738: Failed to acquire dquot type 0
[  105.495252][ T4285] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  105.509750][ T4285] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.1738: corrupted inode contents
[  105.519243][  T297] usb 6-1: Using ep0 maxpacket: 16
[  105.526785][ T4285] EXT4-fs error (device loop9): ext4_dirty_inode:6158: inode #12: comm syz.9.1738: mark_inode_dirty error
[  105.527734][  T444] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  105.550776][ T4285] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.1738: corrupted inode contents
[  105.562743][  T444] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.562779][  T444] usb 5-1: config 0 interface 0 has no altsetting 0
[  105.562808][  T444] usb 5-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.00
[  105.562835][  T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.573161][  T444] usb 5-1: config 0 descriptor??
[  105.604846][  T297] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  105.613670][ T4285] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.1738: mark_inode_dirty error
[  105.625130][  T297] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.635434][ T4285] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.1738: corrupted inode contents
[  105.648653][ T4285] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  105.657443][ T4285] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.1738: corrupted inode contents
[  105.669452][  T297] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.678397][ T4285] EXT4-fs error (device loop9): ext4_truncate:4327: inode #12: comm syz.9.1738: mark_inode_dirty error
[  105.689749][ T4285] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  105.711250][ T4285] EXT4-fs (loop9): 1 truncate cleaned up
[  105.717159][ T4285] EXT4-fs (loop9): pa ffff88811758e930: logic 1, phys. 41, len 23
[  105.725077][ T4285] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23
[  105.735329][ T4285] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  105.751601][  T297] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.761255][  T297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.769414][  T297] usb 6-1: Product: syz
[  105.773683][  T297] usb 6-1: Manufacturer: syz
[  105.778516][  T297] usb 6-1: SerialNumber: syz
[  105.794502][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  105.857690][ T4292] netlink: 'syz.7.1741': attribute type 3 has an invalid length.
[  105.872036][ T4292] netlink: 'syz.7.1741': attribute type 1 has an invalid length.
[  105.994998][  T297] usb 6-1: 0:2 : does not exist
[  106.020468][  T444] input: HID 046d:c29a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C29A.0016/input/input20
[  106.027001][  T297] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  106.043285][ T4310] xt_hashlimit: size too large, truncated to 1048576
[  106.069831][  T297] usb 6-1: USB disconnect, device number 5
[  106.117534][  T444] logitech 0003:046D:C29A.0016: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 046d:c29a] on usb-dummy_hcd.4-1/input0
[  106.140531][  T444] logitech 0003:046D:C29A.0016: missing HID_OUTPUT_REPORT 0
[  106.167383][  T444] logitech: probe of 0003:046D:C29A.0016 failed with error -1
[  106.244020][  T444] usb 5-1: USB disconnect, device number 9
[  106.304839][  T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  106.329147][ T4318] loop3: detected capacity change from 0 to 512
[  106.364778][ T4318] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.387321][ T4318] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  106.425079][ T4318] EXT4-fs (loop3): 1 truncate cleaned up
[  106.443517][ T4318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  106.499747][ T4318] overlayfs: upper fs needs to support d_type.
[  106.562393][  T291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  106.615976][  T291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  106.654577][  T291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  106.691068][  T291] EXT4-fs (loop3): unmounting filesystem.
[  106.828094][ T4329] loop5: detected capacity change from 0 to 2048
[  106.912201][ T4329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  106.960795][ T4329] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.118428][  T310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 345: padding at end of block bitmap is not set
[  107.144986][  T310] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  107.172715][  T310] EXT4-fs (loop5): This should not happen!! Data will be lost
[  107.172715][  T310] 
[  107.190242][  T902] EXT4-fs (loop5): unmounting filesystem.
[  107.257252][ T4299] loop9: detected capacity change from 0 to 131072
[  107.297437][ T4299] F2FS-fs (loop9): invalid crc value
[  107.329814][ T4299] F2FS-fs (loop9): Found nat_bits in checkpoint
[  107.343666][ T4364] loop3: detected capacity change from 0 to 512
[  107.400068][ T4364] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.460329][ T4299] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  107.490139][ T4299] F2FS-fs (loop9): Corrupted max_depth of 3: 16842753
[  107.508372][ T4364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  107.540249][ T4364] ext4 filesystem being mounted at /331/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.617834][  T291] EXT4-fs (loop3): unmounting filesystem.
[  107.906895][ T4410] loop7: detected capacity change from 0 to 128
[  107.992471][ T4416] loop3: detected capacity change from 0 to 128
[  108.037883][ T4416] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  108.059867][ T4416] FAT-fs (loop3): Filesystem has been set read-only
[  108.079295][ T4416] syz.3.1795: attempt to access beyond end of device
[  108.079295][ T4416] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  108.122918][ T4416] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  108.140998][ T4416] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  108.161128][ T4416] syz.3.1795: attempt to access beyond end of device
[  108.161128][ T4416] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  108.213587][ T4416] syz.3.1795: attempt to access beyond end of device
[  108.213587][ T4416] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  108.249275][ T4441] netlink: 'syz.9.1807': attribute type 10 has an invalid length.
[  108.257194][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1807'.
[  108.454632][ T4451] loop9: detected capacity change from 0 to 8192
[  108.464070][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'.
[  108.772177][ T4496] loop3: detected capacity change from 0 to 512
[  108.802597][ T4500] bridge: RTM_NEWNEIGH with invalid state 0x0
[  108.831161][   T28] kauditd_printk_skb: 46 callbacks suppressed
[  108.831175][   T28] audit: type=1400 audit(1790216535.104:852): avc:  denied  { unlink } for  pid=4501 comm="syz.4.1835" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  108.900339][ T4496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  108.909496][ T4496] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  108.971632][  T291] EXT4-fs (loop3): unmounting filesystem.
[  109.088735][   T28] audit: type=1400 audit(1790216535.356:853): avc:  denied  { bind } for  pid=4521 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.328485][  T706] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  109.480690][   T28] audit: type=1400 audit(1790216535.758:854): avc:  denied  { cmd } for  pid=4551 comm="syz.5.1858" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  109.547666][  T706] usb 10-1: Using ep0 maxpacket: 16
[  109.554082][  T706] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.585121][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1865'.
[  109.594219][  T706] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  109.618547][  T706] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  109.637450][ T4569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1866'.
[  109.647016][  T706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.671038][  T706] usb 10-1: Product: syz
[  109.677915][  T706] usb 10-1: Manufacturer: syz
[  109.682651][  T706] usb 10-1: SerialNumber: syz
[  109.716259][  T706] r8152-cfgselector 10-1: config 0 descriptor??
[  109.820506][ T4592] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1877'.
[  109.865935][ T4596] loop4: detected capacity change from 0 to 256
[  109.887315][ T4596] exfat: Deprecated parameter 'utf8'
[  109.899291][ T4596] exfat: Deprecated parameter 'namecase'
[  109.910616][ T4596] exfat: Deprecated parameter 'namecase'
[  109.922961][ T4596] exfat: Deprecated parameter 'utf8'
[  109.950008][ T4596] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  110.039072][ T4607] netlink: 'syz.3.1884': attribute type 3 has an invalid length.
[  110.110307][ T4611] loop4: detected capacity change from 0 to 16
[  110.134916][ T4611] erofs: (device loop4): mounted with root inode @ nid 36.
[  110.157927][ T4611] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=86
[  110.479819][ T4623] loop4: detected capacity change from 0 to 40427
[  110.495359][ T4623] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  110.547829][ T4623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  110.558117][ T4623] F2FS-fs (loop4): invalid crc value
[  110.592949][ T4623] F2FS-fs (loop4): Found nat_bits in checkpoint
[  110.600691][   T28] audit: type=1400 audit(1790216536.873:855): avc:  denied  { create } for  pid=4641 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1
[  110.655751][ T4644] loop3: detected capacity change from 0 to 256
[  110.708175][ T4623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  110.719457][ T4623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  110.740618][ T4644] FAT-fs (loop3): Directory bread(block 64) failed
[  110.765191][ T4644] FAT-fs (loop3): Directory bread(block 65) failed
[  110.781516][ T4644] FAT-fs (loop3): Directory bread(block 66) failed
[  110.805328][ T4644] FAT-fs (loop3): Directory bread(block 67) failed
[  110.816580][ T4644] FAT-fs (loop3): Directory bread(block 68) failed
[  110.831962][ T4644] FAT-fs (loop3): Directory bread(block 69) failed
[  110.848353][ T4644] FAT-fs (loop3): Directory bread(block 70) failed
[  110.856021][ T4644] FAT-fs (loop3): Directory bread(block 71) failed
[  110.865332][ T4644] FAT-fs (loop3): Directory bread(block 72) failed
[  110.881511][ T4644] FAT-fs (loop3): Directory bread(block 73) failed
[  111.229592][ T4600] loop5: detected capacity change from 0 to 131072
[  111.256627][ T4600] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945)
[  111.293666][ T4600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  111.307953][ T4600] F2FS-fs (loop5): invalid crc value
[  111.344392][ T4600] F2FS-fs (loop5): Found nat_bits in checkpoint
[  111.450052][ T4689] loop7: detected capacity change from 0 to 512
[  111.456947][ T4693] loop4: detected capacity change from 0 to 512
[  111.468064][ T4689] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.477823][ T4600] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  111.485656][ T4693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  111.494095][ T4600] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  111.496245][ T4693] System zones: 1-12
[  111.506427][ T4693] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1923: missing EA_INODE flag
[  111.518457][ T4689] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[  111.527077][ T4689] EXT4-fs (loop7): orphan cleanup on readonly fs
[  111.534277][ T4689] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3861: comm syz.7.1922: Allocating blocks 41-42 which overlap fs metadata
[  111.560544][ T4689] Quota error (device loop7): write_blk: dquota write failed
[  111.568064][ T4689] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  111.568099][ T4693] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1923: error while reading EA inode 12 err=-117
[  111.578068][ T4689] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.1922: Failed to acquire dquot type 0
[  111.602309][ T4689] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  111.616827][ T4689] EXT4-fs error (device loop7): ext4_do_update_inode:5281: inode #12: comm syz.7.1922: corrupted inode contents
[  111.629408][ T4689] EXT4-fs error (device loop7): ext4_dirty_inode:6158: inode #12: comm syz.7.1922: mark_inode_dirty error
[  111.641040][ T4689] EXT4-fs error (device loop7): ext4_do_update_inode:5281: inode #12: comm syz.7.1922: corrupted inode contents
[  111.656812][ T4689] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.1922: mark_inode_dirty error
[  111.657672][ T4693] EXT4-fs (loop4): 1 orphan inode deleted
[  111.674054][ T4689] EXT4-fs error (device loop7): ext4_do_update_inode:5281: inode #12: comm syz.7.1922: corrupted inode contents
[  111.699040][ T4689] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  111.708062][ T4689] EXT4-fs error (device loop7): ext4_do_update_inode:5281: inode #12: comm syz.7.1922: corrupted inode contents
[  111.720260][ T4689] EXT4-fs error (device loop7): ext4_truncate:4327: inode #12: comm syz.7.1922: mark_inode_dirty error
[  111.721409][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  111.740307][ T4689] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  111.751772][ T4689] EXT4-fs (loop7): 1 truncate cleaned up
[  111.757522][ T4689] EXT4-fs (loop7): pa ffff888117501888: logic 1, phys. 41, len 23
[  111.765433][ T4689] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23
[  111.775693][ T4689] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  111.818895][ T4700] loop3: detected capacity change from 0 to 256
[  111.825561][ T4700] exfat: Deprecated parameter 'namecase'
[  111.845737][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  111.846505][ T4700] exfat: Deprecated parameter 'namecase'
[  111.888309][  T290] EXT4-fs (loop4): unmounting filesystem.
[  111.894722][ T4700] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  112.040439][  T297] usb 10-1: USB disconnect, device number 3
[  112.233212][ T4738] loop7: detected capacity change from 0 to 512
[  112.250422][ T4738] EXT4-fs: Ignoring removed orlov option
[  112.302699][ T4738] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  112.319614][ T4738] ext4 filesystem being mounted at /290/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.366108][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  112.457591][ T4747] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  112.474933][  T297] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  112.586984][ T4763] ip_tables: iptables: counters copy to user failed while replacing table
[  112.675021][  T297] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  112.703847][  T297] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.718710][  T297] usb 10-1: config 0 interface 0 has no altsetting 0
[  112.725576][ T4771] loop7: detected capacity change from 0 to 1024
[  112.755092][ T4771] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  112.757525][  T297] usb 10-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  112.780565][ T4771] EXT4-fs (loop7): Online resizing not supported with bigalloc
[  112.785883][  T297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.814871][  T297] usb 10-1: config 0 descriptor??
[  112.833505][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  113.214201][ T4807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.236255][ T4807] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.248276][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.270928][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.317077][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.338417][  T291] EXT4-fs (loop3): unmounting filesystem.
[  113.360897][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.375708][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.405066][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.413407][ T4815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  113.430820][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.431414][ T4815] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.456963][  T297] magicmouse 0003:05AC:0265.0017: unknown main item tag 0x0
[  113.486652][  T297] magicmouse 0003:05AC:0265.0017: unbalanced collection at end of report description
[  113.517899][  T297] magicmouse 0003:05AC:0265.0017: magicmouse hid parse failed
[  113.539241][  T297] magicmouse: probe of 0003:05AC:0265.0017 failed with error -22
[  113.556087][  T297] usb 10-1: USB disconnect, device number 4
[  113.582820][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  113.611112][ T4821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1981'.
[  113.646666][ T4825] ip_tables: iptables: counters copy to user failed while replacing table
[  113.787829][ T4845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1990'.
[  114.050280][ T4839] F2FS-fs (loop7): invalid crc value
[  114.091670][ T4839] F2FS-fs (loop7): Found nat_bits in checkpoint
[  114.102411][ T4874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  114.124557][ T4874] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.171330][  T902] EXT4-fs (loop5): unmounting filesystem.
[  114.177277][ T4839] F2FS-fs (loop7): Start checkpoint disabled!
[  114.205594][ T4839] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  114.227754][ T4839] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  114.347168][   T10] kworker/u4:1: attempt to access beyond end of device
[  114.347168][   T10] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  114.381004][   T10] kworker/u4:1: attempt to access beyond end of device
[  114.381004][   T10] loop7: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  114.608475][  T706] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  114.608484][ T4912] exfat: Deprecated parameter 'utf8'
[  114.666815][ T4912] exfat: Deprecated parameter 'namecase'
[  114.672603][ T4912] exfat: Deprecated parameter 'namecase'
[  114.686611][ T4912] exfat: Deprecated parameter 'utf8'
[  114.710901][ T4912] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  114.792495][ T4902] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  114.802490][ T4902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  114.808912][  T706] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.823648][ T4918] overlayfs: './file0' not a directory
[  114.826882][ T4902] F2FS-fs (loop4): invalid crc value
[  114.847343][  T706] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.857481][ T4902] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  114.894397][  T706] usb 10-1: config 0 interface 0 has no altsetting 0
[  114.907008][   T28] audit: type=1400 audit(1790216541.199:856): avc:  denied  { read } for  pid=4922 comm="syz.7.2025" path="socket:[32880]" dev="sockfs" ino=32880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  114.950191][  T706] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  114.973492][  T706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.997272][ T4902] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  115.006613][  T706] usb 10-1: config 0 descriptor??
[  115.012421][ T4931] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2028'.
[  115.031857][ T4902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  115.097505][ T4937] set_capacity_and_notify: 9 callbacks suppressed
[  115.097525][ T4937] loop5: detected capacity change from 0 to 256
[  115.142342][ T4937] exfat: Deprecated parameter 'utf8'
[  115.157963][ T4937] exfat: Deprecated parameter 'utf8'
[  115.176033][ T4937] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  115.318113][  T310] tipc: Left network mode
[  115.374470][ T1737] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  115.413615][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.431871][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.454790][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.479363][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.497514][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.514123][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.542088][  T706] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0
[  115.564976][ T1737] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.565614][  T706] hid-multitouch 0003:0EEF:72C4.0018: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.9-1/input0
[  115.583955][ T1737] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.621000][ T1737] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.646359][ T4947] loop7: detected capacity change from 0 to 40427
[  115.652959][ T1737] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  115.665037][  T706] usb 10-1: USB disconnect, device number 5
[  115.672847][ T1737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.686530][ T4947] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  115.714101][ T1737] usb 4-1: config 0 descriptor??
[  115.722748][ T4947] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  115.726729][ T4949] fido_id[4949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  115.762234][ T4947] F2FS-fs (loop7): invalid crc value
[  115.783405][ T4902] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  115.825224][ T4947] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  115.874089][  T310] device bridge_slave_1 left promiscuous mode
[  115.880354][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.905785][ T4947] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  115.913221][ T4947] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  115.918834][  T310] device bridge_slave_0 left promiscuous mode
[  115.942708][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.956052][ T4947] fscrypt (loop7, inode 3): Error -61 getting encryption context
[  115.972769][  T310] device bridge0 left promiscuous mode
[  115.978348][  T310] device veth1_macvtap left promiscuous mode
[  115.994525][  T310] device veth0_vlan left promiscuous mode
[  116.151283][ T1737] hid (null): usage index exceeded
[  116.170073][ T1737] hid-multitouch 0003:0EEF:72C4.0019: ignoring exceeding usage max
[  116.197581][ T1737] hid-multitouch 0003:0EEF:72C4.0019: ignoring exceeding usage max
[  116.205852][ T1737] hid-multitouch 0003:0EEF:72C4.0019: usage index exceeded
[  116.213864][ T1737] hid-multitouch 0003:0EEF:72C4.0019: item 0 0 2 2 parsing failed
[  116.231944][ T1737] hid-multitouch: probe of 0003:0EEF:72C4.0019 failed with error -22
[  116.303533][ T4974] tipc: Started in network mode
[  116.308654][ T4974] tipc: Node identity ac1414aa, cluster identity 4711
[  116.329081][ T4974] tipc: Enabled bearer <udp:syz2>, priority 4
[  116.340371][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.347599][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.391837][ T4953] device bridge_slave_0 entered promiscuous mode
[  116.404189][  T444] usb 4-1: USB disconnect, device number 13
[  116.427351][ T4981] loop7: detected capacity change from 0 to 8192
[  116.432823][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.478635][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.509784][ T4953] device bridge_slave_1 entered promiscuous mode
[  116.769814][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.776938][ T4953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.784311][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.791387][ T4953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.882359][  T402] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.910358][  T402] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.939979][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.962039][ T5009] loop3: detected capacity change from 0 to 256
[  116.977450][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.020769][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.048585][  T402] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.055723][  T402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.082697][ T5013] loop7: detected capacity change from 0 to 1024
[  117.096552][ T5013] EXT4-fs: Ignoring removed orlov option
[  117.103189][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.114194][  T402] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.121468][  T402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.130899][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.148587][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.169363][ T5013] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  117.169747][ T5015] loop3: detected capacity change from 0 to 512
[  117.223668][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.235193][ T5013] EXT4-fs error (device loop7): __ext4_new_inode:1291: comm syz.7.2068: failed to insert inode 12: doubly allocated?
[  117.248608][ T5013] incfs: Can't find or create .incomplete dir in ./file0
[  117.256124][ T5013] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem
[  117.272192][ T4953] device veth0_vlan entered promiscuous mode
[  117.279327][ T5013] incfs: mount failed -5
[  117.284277][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.308884][ T5013] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  117.310515][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.327292][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.348683][   T28] audit: type=1400 audit(1790216543.657:857): avc:  denied  { relabelto } for  pid=5012 comm="syz.7.2068" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  117.369537][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.375499][ T5015] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.419223][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  117.440622][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.461755][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.504703][ T1048] tipc: Node number set to 2886997162
[  117.513226][ T4953] device veth1_macvtap entered promiscuous mode
[  117.538762][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.546510][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.555457][  T291] EXT4-fs (loop3): unmounting filesystem.
[  117.563508][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.605356][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.653487][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.798393][ T5048] loop9: detected capacity change from 0 to 256
[  117.856425][ T5048] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  117.928830][   T28] audit: type=1400 audit(1790216544.228:858): avc:  denied  { ioctl } for  pid=5057 comm="syz.3.2085" path="/410/tracing/events/kvm/kvm_hv_stimer_cleanup/trigger" dev="tracefs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  118.084475][   T28] audit: type=1400 audit(1790216544.339:859): avc:  denied  { setcheckreqprot } for  pid=5063 comm="syz.7.2088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  118.610970][ T5106] loop7: detected capacity change from 0 to 16
[  118.633118][ T5106] erofs: (device loop7): mounted with root inode @ nid 36.
[  118.705675][ T5070] loop2: detected capacity change from 0 to 40427
[  118.747342][ T5070] F2FS-fs (loop2): invalid crc value
[  118.778173][ T5070] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  118.849598][ T5114] loop7: detected capacity change from 0 to 512
[  118.865101][ T5117] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  118.880702][ T5114] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  118.951429][ T5070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  118.956132][ T5114] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  119.044352][ T5114] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.073203][ T5128] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.124120][ T5128] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.174119][  T402] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.189501][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  119.213815][ T5098] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  119.248749][ T5098] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  119.285008][ T5098] F2FS-fs (loop9): invalid crc value
[  119.344173][ T5098] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  119.372450][ T5144] netem: change failed
[  119.404476][ T5146] EXT4-fs: Ignoring removed orlov option
[  119.441379][ T5098] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  119.450644][ T5098] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  119.502055][ T5146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.510956][ T5098] SELinux:  Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped).
[  119.532047][   T28] audit: type=1400 audit(1790216545.832:860): avc:  denied  { relabelto } for  pid=5097 comm="syz.9.2105" name="file0" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0"
[  119.562591][  T444] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  119.571369][ T5146] EXT4-fs error (device loop4): __ext4_new_inode:1291: comm syz.4.2125: failed to insert inode 12: doubly allocated?
[  119.612912][ T4132] syz-executor: attempt to access beyond end of device
[  119.612912][ T4132] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.644163][ T5146] incfs: Can't find or create .incomplete dir in ./file0
[  119.681853][ T5146] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  119.692576][ T5146] incfs: mount failed -5
[  119.711035][ T5152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.719322][ T5152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.738870][  T290] EXT4-fs (loop4): unmounting filesystem.
[  119.774247][  T444] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  119.788677][  T444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  119.806117][ T5152] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.817188][  T444] usb 8-1: Product: syz
[  119.821445][  T444] usb 8-1: Manufacturer: syz
[  119.886716][ T5161] EXT4-fs: Ignoring removed oldalloc option
[  119.917691][ T5070] F2FS-fs (loop2): switch atgc option is not allowed
[  119.934616][ T5161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  119.952149][ T5152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  119.963293][ T5152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  119.975031][ T5161] EXT4-fs (loop4): 1 truncate cleaned up
[  119.980746][ T5161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  120.091100][ T5161] EXT4-fs (loop4): Online resizing not supported with sparse_super2
[  120.153101][   T28] audit: type=1400 audit(1790216546.464:861): avc:  denied  { read } for  pid=5151 comm="syz.3.2127" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  120.182187][  T290] EXT4-fs (loop4): unmounting filesystem.
[  120.396726][  T444] scsi host1: uas
[  120.403050][    C1] usb 8-1: stat urb: status -75
[  120.502080][ T5193] netlink: 'syz.4.2142': attribute type 1 has an invalid length.
[  120.561708][ T5193] netlink: 'syz.4.2142': attribute type 2 has an invalid length.
[  120.608259][    C1] usb 8-1: cmd cmplt err -71
[  120.615587][  T297] usb 8-1: USB disconnect, device number 8
[  120.643219][  T297] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  120.651040][  T297] scsi 1:0:0:0: tag#8 CDB: opcode=0x12 12 00 00 00 24 00
[  120.684555][ T5202] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2145'.
[  120.734523][ T5202] device gretap0 entered promiscuous mode
[  120.762312][ T5202] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2145'.
[  120.797866][ T5202] 0ªî{X¹¦: renamed from gretap0
[  120.806278][ T5202] device 
30ªî{X¹¦ left promiscuous mode
[  120.820467][ T5202] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  120.957472][ T5220] device vlan3 entered promiscuous mode
[  120.972978][ T5222] set_capacity_and_notify: 5 callbacks suppressed
[  120.972998][ T5222] loop4: detected capacity change from 0 to 512
[  120.989296][ T5220] device bridge0 entered promiscuous mode
[  120.996385][ T5222] EXT4-fs: Ignoring removed nobh option
[  121.018623][ T5220] bridge0: port 3(vlan3) entered blocking state
[  121.039369][ T5222] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2155: invalid indirect mapped block 256 (level 2)
[  121.045966][ T5220] bridge0: port 3(vlan3) entered disabled state
[  121.067167][ T5222] EXT4-fs (loop4): 2 truncates cleaned up
[  121.079163][ T5222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  121.188618][ T5228] device macsec1 entered promiscuous mode
[  121.205631][  T290] EXT4-fs (loop4): unmounting filesystem.
[  121.321008][ T5244] loop2: detected capacity change from 0 to 1024
[  121.374699][ T5244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  121.435502][ T5258] loop7: detected capacity change from 0 to 512
[  121.442198][ T5240] loop3: detected capacity change from 0 to 8192
[  121.520544][ T4953] EXT4-fs (loop2): unmounting filesystem.
[  121.579805][ T5258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  121.623820][ T5258] ext4 filesystem being mounted at /338/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.914867][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  122.005113][ T5299] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  122.086850][ T5041] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  122.115833][ T5310] loop9: detected capacity change from 0 to 1024
[  122.128485][   T28] audit: type=1400 audit(1790216548.438:862): avc:  denied  { unmount } for  pid=1697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  122.164604][ T5318] loop4: detected capacity change from 0 to 256
[  122.204265][ T5310] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.228472][ T5310] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 3: comm syz.9.2194: lblock 3 mapped to illegal pblock 3 (length 1)
[  122.287496][ T5041] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  122.298653][ T5041] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.299592][ T5310] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  122.311847][ T5041] usb 3-1: config 0 interface 0 has no altsetting 0
[  122.330801][ T5041] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  122.339967][ T5041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.348952][ T5041] usb 3-1: config 0 descriptor??
[  122.356443][ T5284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  122.404476][ T5310] EXT4-fs (loop9): This should not happen!! Data will be lost
[  122.404476][ T5310] 
[  122.513305][   T28] audit: type=1400 audit(1790216548.819:863): avc:  denied  { create } for  pid=5334 comm="syz.4.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  122.535377][ T5335] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2206'.
[  122.551501][   T28] audit: type=1400 audit(1790216548.839:864): avc:  denied  { write } for  pid=5334 comm="syz.4.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  122.583052][ T5306] loop3: detected capacity change from 0 to 40427
[  122.622521][   T28] audit: type=1400 audit(1790216548.839:865): avc:  denied  { nlmsg_write } for  pid=5334 comm="syz.4.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  122.628681][ T5306] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  122.674974][ T5306] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  122.691907][ T5306] F2FS-fs (loop3): invalid crc value
[  122.720221][ T5346] loop9: detected capacity change from 0 to 256
[  122.734812][ T5346] exfat: Deprecated parameter 'utf8'
[  122.742166][ T5346] exfat: Deprecated parameter 'utf8'
[  122.751524][ T5346] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  122.764977][ T5306] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  122.776669][ T5041] hid (null): unknown global tag 0xc
[  122.793407][ T5041] kye 0003:0458:501A.001A: unknown main item tag 0x7
[  122.810521][ T5041] kye 0003:0458:501A.001A: unknown global tag 0xc
[  122.819022][ T5041] kye 0003:0458:501A.001A: item 0 2 1 12 parsing failed
[  122.835489][ T5041] kye 0003:0458:501A.001A: parse failed
[  122.852259][ T5041] kye: probe of 0003:0458:501A.001A failed with error -22
[  122.862076][ T5351] loop9: detected capacity change from 0 to 256
[  122.901609][ T5306] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  122.915355][ T5306] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.956319][ T5358] random: crng reseeded on system resumption
[  122.996494][  T297] usb 3-1: USB disconnect, device number 2
[  123.005262][   T28] audit: type=1400 audit(1790216549.310:866): avc:  denied  { mounton } for  pid=5357 comm="syz.4.2215" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  123.062983][  T291] syz-executor: attempt to access beyond end of device
[  123.062983][  T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.079214][ T5362] loop7: detected capacity change from 0 to 512
[  123.373277][   T28] audit: type=1400 audit(1790216549.681:867): avc:  denied  { execute } for  pid=5379 comm="syz.3.2225" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  123.394523][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  123.583850][   T24] usb 5-1: Using ep0 maxpacket: 8
[  123.583867][  T297] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  123.590822][   T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  123.607728][   T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.634007][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  123.640765][   T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  123.650168][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.670969][   T24] usb 5-1: config 0 descriptor??
[  123.773533][   T19] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  123.784184][   T28] audit: type=1400 audit(1790216550.102:868): avc:  denied  { remount } for  pid=5394 comm="syz.2.2233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  123.813407][  T297] usb 8-1: Using ep0 maxpacket: 16
[  123.819816][  T297] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8
[  123.829640][   T28] audit: type=1400 audit(1790216550.142:869): avc:  denied  { unmount } for  pid=4953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  123.851477][  T297] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  123.866121][  T297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.879690][  T297] usb 8-1: Product: syz
[  123.887334][  T297] usb 8-1: Manufacturer: syz
[  123.895257][  T297] usb 8-1: SerialNumber: syz
[  123.909234][  T297] usb 8-1: config 0 descriptor??
[  123.927712][  T297] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  123.942322][  T297] usb 8-1: Detected FT232R
[  123.984300][   T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.999775][   T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.016288][   T19] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.038262][   T19] usb 4-1: config 0 interface 0 has no altsetting 0
[  124.057416][   T19] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  124.074227][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.088305][   T24] wacom 0003:056A:00C5.001B: hidraw0: USB HID v0.01 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0
[  124.099841][   T19] usb 4-1: config 0 descriptor??
[  124.130019][  T297] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  124.139675][  T297] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  124.162973][  T297] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  124.181327][  T297] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  124.219180][  T297] usb 8-1: USB disconnect, device number 9
[  124.236099][  T297] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  124.250546][  T297] ftdi_sio 8-1:0.0: device disconnected
[  124.312585][  T444] usb 5-1: USB disconnect, device number 10
[  124.520042][   T19] samsung 0003:0419:0600.001C: nested delimiters
[  124.528213][   T19] samsung 0003:0419:0600.001C: item 0 4 2 10 parsing failed
[  124.543444][   T19] samsung 0003:0419:0600.001C: parse failed
[  124.555991][   T19] samsung: probe of 0003:0419:0600.001C failed with error -22
[  124.661043][   T28] audit: type=1326 audit(1790216550.973:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.9.2241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  124.716686][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.740420][   T19] usb 4-1: USB disconnect, device number 14
[  124.928126][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2254'.
[  124.961419][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2254'.
[  128.319445][ T5497] netem: change failed
[  128.500045][ T5510] loop4: detected capacity change from 0 to 4096
[  128.508636][   T19] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  128.564048][ T5510] EXT4-fs mount: 2 callbacks suppressed
[  128.564071][ T5510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  128.633333][  T290] EXT4-fs (loop4): unmounting filesystem.
[  128.655697][ T1048] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  128.708682][   T19] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.745530][   T19] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.790734][   T19] usb 8-1: config 0 interface 0 has no altsetting 0
[  128.800831][   T19] usb 8-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[  128.814165][ T5521] syz.4.2289[5521] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.814270][ T5521] syz.4.2289[5521] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.824436][   T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.862892][   T19] usb 8-1: config 0 descriptor??
[  128.876081][ T1048] usb 3-1: not running at top speed; connect to a high speed hub
[  128.905564][ T1048] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.922142][ T1048] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  128.947783][ T1048] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  128.979130][ T1048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.001453][ T1048] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  129.048807][ T5534] loop3: detected capacity change from 0 to 256
[  129.166769][ T5547] loop3: detected capacity change from 0 to 128
[  129.176998][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  129.177014][   T28] audit: type=1400 audit(1790216555.500:883): avc:  denied  { setopt } for  pid=5546 comm="syz.4.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  129.204494][ T1048] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -32 (exp. 1).
[  129.253785][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2304'.
[  129.271960][   T19] thrustmaster 0003:044F:B65A.001D: No inputs registered, leaving
[  129.291147][   T19] thrustmaster 0003:044F:B65A.001D: hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.7-1/input0
[  129.304886][   T19] thrustmaster 0003:044F:B65A.001D: no inputs found
[  129.304891][ T5550] netlink: 'syz.9.2304': attribute type 14 has an invalid length.
[  129.304905][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2304'.
[  129.367703][ T5557] xt_hashlimit: size too large, truncated to 1048576
[  129.436222][ T1048] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  129.455966][ T1048] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  129.477373][ T1048] usb 3-1: No streaming interface found for terminal 2.
[  129.499458][   T19] usb 8-1: USB disconnect, device number 10
[  129.505660][ T5561] xt_hashlimit: size too large, truncated to 1048576
[  129.519010][ T1048] usb 3-1: USB disconnect, device number 3
[  129.970298][ T5573] loop3: detected capacity change from 0 to 256
[  130.015596][ T5573] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  130.163746][ T1048] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  130.202958][   T28] audit: type=1400 audit(1790216556.521:884): avc:  denied  { ioctl } for  pid=5598 comm="syz.3.2326" path="socket:[34409]" dev="sockfs" ino=34409 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  130.318365][ T5608] loop3: detected capacity change from 0 to 1024
[  130.359177][ T5608] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.2329: lblock 2 mapped to illegal pblock 2 (length 1)
[  130.374685][ T5608] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  130.382939][ T5608] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.2329: lblock 0 mapped to illegal pblock 48 (length 1)
[  130.398061][ T5608] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  130.411926][ T1048] usb 5-1: unable to get BOS descriptor or descriptor too short
[  130.420122][ T5608] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.2329: Failed to acquire dquot type 0
[  130.432186][ T5608] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  130.441928][ T1048] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.452329][ T5608] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.2329: mark_inode_dirty error
[  130.464344][ T1048] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  130.473622][ T5608] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  130.484186][ T1048] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  130.499212][ T5608] EXT4-fs (loop3): 1 orphan inode deleted
[  130.505266][ T5608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  130.514123][ T1732] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  130.534950][ T1048] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  130.560961][ T1048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.578277][ T1732] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  130.586929][ T1048] usb 5-1: Product: syz
[  130.599745][ T1048] usb 5-1: Manufacturer: syz
[  130.613371][ T1732] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 0
[  130.614692][ T1048] usb 5-1: SerialNumber: syz
[  130.653595][  T291] EXT4-fs (loop3): unmounting filesystem.
[  130.665176][  T291] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[  130.680496][ T5581] loop7: detected capacity change from 0 to 40427
[  130.688914][  T291] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  130.703264][ T5581] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  130.723028][ T5581] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  130.752832][  T291] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error
[  130.765699][ T5581] F2FS-fs (loop7): invalid crc value
[  130.792674][ T5581] F2FS-fs (loop7): Found nat_bits in checkpoint
[  130.874596][ T1048] usb 5-1: USB disconnect, device number 11
[  130.885817][  T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  130.902780][ T5581] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  130.910268][ T5581] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  130.930125][   T28] audit: type=1400 audit(1790216557.252:885): avc:  denied  { mounton } for  pid=5645 comm="syz.3.2346" path="/462/file0/file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  130.953942][ T5646] 9pnet_fd: p9_fd_create_unix (5646): problem connecting socket: ./file1: -2
[  131.004532][ T5648] netlink: 'syz.3.2347': attribute type 30 has an invalid length.
[  131.439524][ T5669] loop3: detected capacity change from 0 to 512
[  131.477560][ T5669] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.2357: Unrecognised inode hash code 255
[  131.502341][ T5669] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2357: Corrupt directory, running e2fsck is recommended
[  131.532468][ T5669] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  131.540893][ T5669] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.2357: corrupted in-inode xattr
[  131.553394][ T5669] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2357: couldn't read orphan inode 15 (err -117)
[  131.565773][ T5669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.622021][ T5673] syz.9.2358 (5673) used obsolete PPPIOCDETACH ioctl
[  131.643094][  T291] EXT4-fs (loop3): unmounting filesystem.
[  131.713997][   T28] audit: type=1400 audit(1790216558.043:886): avc:  denied  { getopt } for  pid=5678 comm="syz.7.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  131.788862][   T28] audit: type=1326 audit(1790216558.043:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.2362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  131.819616][   T28] audit: type=1326 audit(1790216558.063:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.2362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  131.845694][   T28] audit: type=1326 audit(1790216558.063:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.2362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  131.981292][ T5675] loop4: detected capacity change from 0 to 40427
[  131.996352][ T5675] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  132.017968][ T5675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  132.030610][ T5675] F2FS-fs (loop4): invalid crc value
[  132.052029][ T5675] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.138404][ T5675] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  132.147843][ T5675] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  132.513222][ T5723] loop4: detected capacity change from 0 to 4096
[  132.538996][ T5723] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.569860][ T5723] EXT4-fs (loop4): Test dummy encryption mode enabled
[  132.612172][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  132.664405][  T290] EXT4-fs (loop4): unmounting filesystem.
[  132.777529][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'.
[  132.789304][ T5748] syz.7.2391 (5748): /proc/5747/oom_adj is deprecated, please use /proc/5747/oom_score_adj instead.
[  132.895555][ T5738] loop3: detected capacity change from 0 to 40427
[  132.908121][ T5738] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  132.916498][ T5738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  132.932240][ T5754] xt_hashlimit: size too large, truncated to 1048576
[  132.951362][ T5738] F2FS-fs (loop3): Found nat_bits in checkpoint
[  133.005854][ T5738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  133.014148][ T5738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  133.543662][ T5791] loop4: detected capacity change from 0 to 256
[  133.726936][ T5802] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2413'.
[  133.839862][ T5811] can0: slcan on ptm0.
[  133.900658][ T5810] can0 (unregistered): slcan off ptm0.
[  133.930047][ T5824] binder: 5823:5824 ioctl c0306201 200000001a80 returned -14
[  134.499019][ T1048] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  134.678837][  T706] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  134.688822][ T1048] usb 4-1: Using ep0 maxpacket: 16
[  134.695109][ T1048] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.715794][ T1048] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.741414][ T1048] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.768845][ T1048] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.782455][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'.
[  134.798697][ T1048] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  134.818420][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'.
[  134.827565][ T1048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.839007][ T1048] usb 4-1: config 0 descriptor??
[  134.848949][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'.
[  134.868050][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'.
[  134.878587][  T706] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.898498][  T706] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  134.910095][  T706] usb 10-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  134.935921][  T706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.954414][  T706] usb 10-1: Product: syz
[  134.958901][  T706] usb 10-1: Manufacturer: syz
[  134.963640][  T706] usb 10-1: SerialNumber: syz
[  134.979075][ T5889] ip_tables: iptables: counters copy to user failed while replacing table
[  134.999713][  T706] ums-sddr09 10-1:1.0: USB Mass Storage device detected
[  135.025678][  T706] ums-sddr09 10-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  135.025678][  T706]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  135.263018][ T1048] wacom 0003:056A:032C.001E: hidraw0: USB HID v0.00 Joystick [HID 056a:032c] on usb-dummy_hcd.3-1/input0
[  135.301116][ T5867] loop2: detected capacity change from 0 to 131072
[  135.313481][ T5867] F2FS-fs (loop2): invalid crc value
[  135.359127][ T5867] F2FS-fs (loop2): Found nat_bits in checkpoint
[  135.437734][ T5867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  135.447065][  T706] ums-sddr09: probe of 10-1:1.0 failed with error -32
[  135.454992][  T706] usb 10-1: USB disconnect, device number 6
[  135.475198][  T444] usb 4-1: USB disconnect, device number 15
[  135.683537][ T5905] binder: 5904:5905 ioctl c0306201 2000000006c0 returned -14
[  136.059946][ T5933] loop3: detected capacity change from 0 to 1024
[  136.140158][ T5933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  136.194173][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  136.194191][   T28] audit: type=1400 audit(1790216562.528:907): avc:  denied  { map } for  pid=5950 comm="syz.2.2468" path="/dev/usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  136.242330][  T291] EXT4-fs (loop3): unmounting filesystem.
[  136.285192][ T5954] ip_tables: iptables: counters copy to user failed while replacing table
[  136.616239][ T5965] loop3: detected capacity change from 0 to 40427
[  136.633236][ T5965] F2FS-fs (loop3): invalid crc value
[  136.647788][ T5965] F2FS-fs (loop3): Found nat_bits in checkpoint
[  136.689454][ T5965] F2FS-fs (loop3): Start checkpoint disabled!
[  136.701370][ T5965] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  136.717101][ T5965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  137.012126][   T28] audit: type=1400 audit(1790216563.338:908): avc:  denied  { ioctl } for  pid=6006 comm="syz.3.2491" path="socket:[36080]" dev="sockfs" ino=36080 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.069747][ T5986] loop2: detected capacity change from 0 to 40427
[  137.104409][ T5986] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(4096)
[  137.133268][ T5986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.152103][ T5986] F2FS-fs (loop2): invalid crc value
[  137.177511][ T5986] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.276286][ T5986] F2FS-fs (loop2): Start checkpoint disabled!
[  137.285460][ T5986] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  137.333675][ T5986] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.356556][ T5986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  137.413942][ T6002] loop4: detected capacity change from 0 to 40427
[  137.426571][   T28] audit: type=1400 audit(1790216563.749:909): avc:  denied  { create } for  pid=6018 comm="syz.9.2496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1
[  137.461309][ T5986] F2FS-fs (loop2): switch discard_unit option is not allowed
[  137.477011][ T6002] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  137.493611][ T6002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  137.507246][ T6002] F2FS-fs (loop4): invalid crc value
[  137.557327][ T6002] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  137.607403][ T6002] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  137.634832][ T6002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.666434][ T6034] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2502'.
[  137.760035][   T28] audit: type=1326 audit(1790216564.089:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  137.854373][   T28] audit: type=1326 audit(1790216564.119:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  137.967428][   T28] audit: type=1326 audit(1790216564.119:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd28855e98e code=0x7ffc0000
[  138.076510][   T28] audit: type=1326 audit(1790216564.119:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  138.165306][   T28] audit: type=1326 audit(1790216564.119:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  138.249123][   T28] audit: type=1326 audit(1790216564.119:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  138.335479][   T28] audit: type=1326 audit(1790216564.119:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.2499" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28859e159 code=0x7ffc0000
[  138.583945][ T6126] bridge_slave_0: default FDB implementation only supports local addresses
[  138.656028][ T5991] loop7: detected capacity change from 0 to 131072
[  138.672105][ T5991] F2FS-fs (loop7): invalid crc value
[  138.724958][ T5991] F2FS-fs (loop7): Found nat_bits in checkpoint
[  138.786528][ T5991] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  138.815722][ T5991] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  139.026333][  T706] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  139.224268][ T6163] loop9: detected capacity change from 0 to 4096
[  139.242410][  T706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.284587][ T6163] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  139.306475][  T706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.339181][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  139.358538][  T706] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  139.386340][  T706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.424066][  T706] usb 5-1: config 0 descriptor??
[  139.649511][  T706] usbhid 5-1:0.0: can't add hid device: -71
[  139.655576][  T706] usbhid: probe of 5-1:0.0 failed with error -71
[  139.691068][  T706] usb 5-1: USB disconnect, device number 12
[  139.978336][ T6198] loop7: detected capacity change from 0 to 256
[  140.024366][ T6198] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  140.088482][ T6200] netlink: 8952 bytes leftover after parsing attributes in process `syz.9.2576'.
[  140.501081][ T6157] loop3: detected capacity change from 0 to 131072
[  140.525689][ T6157] F2FS-fs (loop3): invalid crc value
[  140.577288][ T6157] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.680893][ T6157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.736874][ T6116] loop2: detected capacity change from 0 to 131072
[  140.779769][ T6157] fscrypt (loop3, inode 3): Mutually exclusive encryption flags (0x0c)
[  140.798682][ T6116] F2FS-fs (loop2): invalid crc value
[  140.869555][ T6116] F2FS-fs (loop2): Found nat_bits in checkpoint
[  140.940946][ T6256] loop9: detected capacity change from 0 to 512
[  141.013105][ T6256] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.2600: missing EA_INODE flag
[  141.066477][ T6256] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2600: error while reading EA inode 2 err=-117
[  141.090916][ T6116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.152760][ T6256] EXT4-fs (loop9): 1 orphan inode deleted
[  141.188577][ T6256] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  141.291683][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  141.649002][ T6285] pimreg: tun_chr_ioctl cmd 2147767506
[  141.667646][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  141.667663][   T28] audit: type=1400 audit(1790216567.998:925): avc:  denied  { append } for  pid=6287 comm="syz.7.2612" name="inject" dev="tracefs" ino=7791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  141.870571][   T28] audit: type=1400 audit(1790216568.198:926): avc:  denied  { connect } for  pid=6308 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  141.948481][   T28] audit: type=1400 audit(1790216568.278:927): avc:  denied  { append } for  pid=6311 comm="syz.7.2624" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  142.251898][   T28] audit: type=1326 audit(1790216568.578:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.3.2633" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x0
[  142.594428][ T6348] netlink: 'syz.7.2638': attribute type 1 has an invalid length.
[  142.626012][ T6348] netlink: 8960 bytes leftover after parsing attributes in process `syz.7.2638'.
[  143.269480][ T6371] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  143.292674][ T6323] loop2: detected capacity change from 0 to 131072
[  143.308960][ T6329] loop4: detected capacity change from 0 to 131072
[  143.330476][ T6323] F2FS-fs (loop2): Test dummy encryption mode enabled
[  143.353851][ T6329] F2FS-fs (loop4): Test dummy encryption mode enabled
[  143.374436][ T6323] F2FS-fs (loop2): invalid crc value
[  143.406868][ T6329] F2FS-fs (loop4): invalid crc value
[  143.419293][   T28] audit: type=1326 audit(1790216569.748:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.2652" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  143.446452][ T6323] F2FS-fs (loop2): Found nat_bits in checkpoint
[  143.487198][ T6329] F2FS-fs (loop4): Found nat_bits in checkpoint
[  143.492192][   T28] audit: type=1326 audit(1790216569.748:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.2652" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  143.573396][   T28] audit: type=1326 audit(1790216569.768:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.2652" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  143.626051][ T6323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.660163][ T6402] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  143.678798][   T28] audit: type=1326 audit(1790216569.768:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.2652" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  143.718335][ T6329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  143.796392][   T28] audit: type=1326 audit(1790216569.768:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.2652" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebf19e159 code=0x7ffc0000
[  143.841295][ T6329] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  143.893762][   T28] audit: type=1400 audit(1790216569.808:934): avc:  denied  { mount } for  pid=6388 comm="syz.3.2654" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  144.203761][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.210890][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.455853][ T6446] tap0: tun_chr_ioctl cmd 1079531642
[  144.724356][ T6469] loop3: detected capacity change from 0 to 512
[  144.782082][ T6469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  144.791217][ T6469] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.830166][ T6460] loop4: detected capacity change from 0 to 40427
[  144.844309][  T291] EXT4-fs (loop3): unmounting filesystem.
[  144.850417][ T6460] F2FS-fs (loop4): invalid crc value
[  144.870603][ T6460] F2FS-fs (loop4): Found nat_bits in checkpoint
[  144.910853][ T6477] device syz_tun entered promiscuous mode
[  144.929715][ T6474] device syz_tun left promiscuous mode
[  144.982765][ T6460] F2FS-fs (loop4): Start checkpoint disabled!
[  144.996724][ T6460] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  145.036953][ T6460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  145.286589][ T6509] loop9: detected capacity change from 0 to 8192
[  145.313773][ T6509] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.560825][ T6544] loop2: detected capacity change from 0 to 512
[  145.608326][ T6544] EXT4-fs (loop2): Test dummy encryption mode enabled
[  145.615164][ T6544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  145.658823][ T6544] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2720: bad orphan inode 131083
[  145.694179][ T6544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  145.706903][ T6544] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  145.745784][ T4953] EXT4-fs (loop2): unmounting filesystem.
[  145.756974][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'.
[  145.784655][ T6567] loop7: detected capacity change from 0 to 1024
[  145.800983][ T6564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2727'.
[  145.884221][ T6567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  145.900843][ T6567] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.918834][ T6585] loop2: detected capacity change from 0 to 128
[  145.977224][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.000919][ T6585] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.052256][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  146.137693][ T4953] EXT4-fs (loop2): unmounting filesystem.
[  146.201723][ T6608] loop2: detected capacity change from 0 to 1024
[  146.259494][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  146.269850][  T297] wacom 0003:056A:003F.001F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  146.284256][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2750'.
[  146.286661][ T6608] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  146.316460][ T6608] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28
[  146.353975][ T6608] EXT4-fs (loop2): This should not happen!! Data will be lost
[  146.353975][ T6608] 
[  146.373612][ T6622] loop4: detected capacity change from 0 to 512
[  146.397908][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  146.411560][ T6608] EXT4-fs (loop2): Total free blocks count 0
[  146.447964][ T6608] EXT4-fs (loop2): Free/Dirty block details
[  146.457839][ T6622] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 3: comm syz.4.2751: lblock 0 mapped to illegal pblock 3 (length 1)
[  146.496192][ T6608] EXT4-fs (loop2): free_blocks=20480
[  146.508646][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2754'.
[  146.531097][ T6622] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2751: error -117 reading directory block
[  146.544885][ T6608] EXT4-fs (loop2): dirty_blocks=32
[  146.552901][ T6608] EXT4-fs (loop2): Block reservation details
[  146.559523][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2754'.
[  146.569887][ T6608] EXT4-fs (loop2): i_reserved_data_blocks=2
[  146.575901][ T6622] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  146.584892][ T6620] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28
[  146.604843][ T6622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  146.696463][  T290] EXT4-fs (loop4): unmounting filesystem.
[  146.744542][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  146.744559][   T28] audit: type=1400 audit(1790216573.068:954): avc:  denied  { ioctl } for  pid=6641 comm="syz.7.2760" path="socket:[38693]" dev="sockfs" ino=38693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  146.886111][ T6656] loop9: detected capacity change from 0 to 512
[  146.907044][ T6656] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  146.930727][ T6664] tmpfs: Cannot retroactively limit size
[  146.941711][ T6656] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2767: invalid indirect mapped block 9 (level 0)
[  146.971212][ T6656] EXT4-fs (loop9): 1 truncate cleaned up
[  146.977227][ T6656] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  147.023647][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  147.088267][ T6680] ACPI: EC: Assuming SCI_EVT clearing on event reads
[  147.117397][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.165033][ T6687] loop9: detected capacity change from 0 to 256
[  147.217165][   T28] audit: type=1400 audit(1790216573.548:955): avc:  denied  { mount } for  pid=6686 comm="syz.9.2780" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  147.261005][   T28] audit: type=1400 audit(1790216573.578:956): avc:  denied  { unmount } for  pid=4132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  147.471955][   T28] audit: type=1326 audit(1790216573.798:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.535651][   T28] audit: type=1326 audit(1790216573.798:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.589205][   T28] audit: type=1326 audit(1790216573.838:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.614512][   T28] audit: type=1326 audit(1790216573.838:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.655976][   T10] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[  147.690084][   T28] audit: type=1326 audit(1790216573.838:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.772268][   T28] audit: type=1326 audit(1790216573.838:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.826559][ T6719] EXT4-fs: Ignoring removed nobh option
[  147.842988][ T6719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.866326][   T28] audit: type=1326 audit(1790216573.838:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.9.2788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc8b9e159 code=0x7ffc0000
[  147.897406][ T6719] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2794: invalid indirect mapped block 32768 (level 2)
[  147.939947][ T6719] EXT4-fs (loop4): 1 orphan inode deleted
[  147.950884][ T6719] EXT4-fs (loop4): 1 truncate cleaned up
[  147.963749][ T6719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  148.005795][ T6719] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.2794: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  148.035364][  T290] EXT4-fs (loop4): unmounting filesystem.
[  149.010250][ T6768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  149.035915][ T6768] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.093149][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.130369][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.147131][  T291] EXT4-fs (loop3): unmounting filesystem.
[  149.153448][ T6764] device bridge_slave_0 entered promiscuous mode
[  149.179117][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.193194][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.219694][ T6783] syz.3.2821: attempt to access beyond end of device
[  149.219694][ T6783] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  149.237400][ T6764] device bridge_slave_1 entered promiscuous mode
[  149.347322][ T1732] device bridge_slave_1 left promiscuous mode
[  149.363696][ T1732] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.388736][ T6763] F2FS-fs (loop7): fault_injection options not supported
[  149.399075][ T1732] device bridge_slave_0 left promiscuous mode
[  149.406382][ T6763] F2FS-fs (loop7): fault_type options not supported
[  149.414098][ T6763] F2FS-fs (loop7): invalid crc value
[  149.433861][ T1732] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.442428][ T6763] F2FS-fs (loop7): Found nat_bits in checkpoint
[  149.465839][ T1732] device veth1_macvtap left promiscuous mode
[  149.492226][ T1732] device veth0_vlan left promiscuous mode
[  149.542779][ T6763] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  149.573458][ T6763] syz.7.2814: attempt to access beyond end of device
[  149.573458][ T6763] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  149.632502][ T1697] syz-executor: attempt to access beyond end of device
[  149.632502][ T1697] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  149.686338][ T6712] Bluetooth: hci0: command 0x1003 tx timeout
[  149.692433][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  149.752840][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.764859][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.826684][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.853023][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.863958][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.871067][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.879052][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.887692][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.896036][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.903120][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.937910][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.953412][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.966175][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.993870][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.002945][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.012025][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.021121][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.029640][ T6764] device veth0_vlan entered promiscuous mode
[  150.058293][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.068157][ T6764] device veth1_macvtap entered promiscuous mode
[  150.090944][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.109412][ T1732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.184378][ T6825] syzkaller1: tun_chr_ioctl cmd 1074025675
[  150.190595][ T6825] syzkaller1: persist disabled
[  150.331886][ T6838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2844'.
[  150.438804][ T6843] set_capacity_and_notify: 5 callbacks suppressed
[  150.438828][ T6843] loop2: detected capacity change from 0 to 256
[  150.456329][  T297] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  150.486406][ T1048] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  150.501616][ T6845] loop2: detected capacity change from 0 to 1024
[  150.510107][ T6845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.538314][ T6845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  150.558644][ T6845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  150.575282][ T6845] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  150.588998][ T6845] EXT4-fs (loop2): This should not happen!! Data will be lost
[  150.588998][ T6845] 
[  150.599173][ T6845] EXT4-fs (loop2): Total free blocks count 0
[  150.605253][ T6845] EXT4-fs (loop2): Free/Dirty block details
[  150.611817][ T6845] EXT4-fs (loop2): free_blocks=20480
[  150.617422][ T6845] EXT4-fs (loop2): dirty_blocks=80
[  150.622795][ T6845] EXT4-fs (loop2): Block reservation details
[  150.629147][ T6845] EXT4-fs (loop2): i_reserved_data_blocks=5
[  150.635465][ T6848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  150.657831][  T297] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.681394][  T297] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  150.696505][ T1048] usb 4-1: Using ep0 maxpacket: 8
[  150.703150][ T1048] usb 4-1: unable to get BOS descriptor or descriptor too short
[  150.730117][  T297] usb 10-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00
[  150.739768][  T297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.749105][ T1048] usb 4-1: config 248 has an invalid interface number: 107 but max is 0
[  150.758125][ T1048] usb 4-1: config 248 has no interface number 0
[  150.767289][ T1048] usb 4-1: config 248 interface 107 has no altsetting 0
[  150.792423][ T1048] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=30.d7
[  150.806757][ T1048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.818826][ T1048] usb 4-1: Product: syz
[  150.823101][ T1048] usb 4-1: Manufacturer: syz
[  150.828066][ T1048] usb 4-1: SerialNumber: syz
[  150.856075][ T6859] sock: sock_timestamping_bind_phc: sock not bind to device
[  150.977587][  T297] usb 10-1: cannot find UAC_HEADER
[  150.993788][  T297] snd-usb-audio: probe of 10-1:1.0 failed with error -22
[  151.022641][  T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  151.052017][ T1048] rtl8150 4-1:248.107: couldn't find required endpoints
[  151.069281][ T1048] rtl8150: probe of 4-1:248.107 failed with error -5
[  151.091678][ T1048] usb 4-1: USB disconnect, device number 16
[  151.179261][   T19] usb 10-1: USB disconnect, device number 7
[  151.292701][ T6868] loop2: detected capacity change from 0 to 40427
[  151.314959][ T6868] F2FS-fs (loop2): fault_injection options not supported
[  151.337183][ T6868] F2FS-fs (loop2): Image doesn't support compression
[  151.351502][ T6868] F2FS-fs (loop2): Image doesn't support compression
[  151.358330][ T6868] F2FS-fs (loop2): fault_type options not supported
[  151.374510][ T6868] F2FS-fs (loop2): invalid crc value
[  151.391671][ T6868] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.432818][ T6868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.021551][ T6937] netlink: 'syz.2.2887': attribute type 32 has an invalid length.
[  152.033929][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  152.033947][   T28] audit: type=1400 audit(1790216578.368:979): avc:  denied  { read write } for  pid=6940 comm="syz.3.2888" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  152.118431][   T28] audit: type=1400 audit(1790216578.398:980): avc:  denied  { open } for  pid=6940 comm="syz.3.2888" path="/589/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  152.149783][   T28] audit: type=1400 audit(1790216578.398:981): avc:  denied  { ioctl } for  pid=6940 comm="syz.3.2888" path="/589/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  152.658477][ T6957] loop9: detected capacity change from 0 to 40427
[  152.690739][ T6957] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  152.700786][ T6978] loop2: detected capacity change from 0 to 1024
[  152.716381][ T6957] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  152.746425][ T6978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  152.755352][ T6957] F2FS-fs (loop9): invalid crc value
[  152.787209][ T6978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  152.836108][ T6957] F2FS-fs (loop9): Found nat_bits in checkpoint
[  152.838266][ T6764] EXT4-fs (loop2): unmounting filesystem.
[  152.889956][   T28] audit: type=1326 audit(1790216579.218:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.2.2907" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac0d9e159 code=0x0
[  152.915165][ T6970] loop4: detected capacity change from 0 to 40427
[  152.948339][ T6970] F2FS-fs (loop4): Invalid log blocks per segment (1)
[  152.955179][ T6970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  152.973792][ T6970] F2FS-fs (loop4): fault_type options not supported
[  152.979748][ T6972] loop3: detected capacity change from 0 to 40427
[  152.988368][ T6970] F2FS-fs (loop4): fault_injection options not supported
[  152.997035][ T6970] F2FS-fs (loop4): Image doesn't support compression
[  153.004180][ T6957] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  153.018435][ T6972] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  153.026159][ T6957] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  153.034101][ T6970] F2FS-fs (loop4): invalid crc value
[  153.040008][ T6972] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  153.062006][ T6970] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.081263][ T6972] F2FS-fs (loop3): Image doesn't support compression
[  153.106360][ T6972] F2FS-fs (loop3): Image doesn't support compression
[  153.113620][ T6972] F2FS-fs (loop3): invalid crc value
[  153.141879][ T6972] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  153.166642][ T6970] F2FS-fs (loop4): Start checkpoint disabled!
[  153.186587][ T6970] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  153.214412][ T6970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  153.231989][ T6970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  153.262460][ T6972] F2FS-fs (loop3): Start checkpoint disabled!
[  153.276832][ T6972] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  153.286924][ T6972] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  153.294003][ T6972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  153.387977][  T310] kworker/u4:3: attempt to access beyond end of device
[  153.387977][  T310] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  153.403948][ T6972] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  153.405939][   T28] audit: type=1400 audit(1790216579.728:983): avc:  denied  { create } for  pid=6971 comm="syz.3.2903" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  153.610895][   T28] audit: type=1400 audit(1790216579.848:984): avc:  denied  { append } for  pid=7015 comm="syz.3.2918" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  153.940005][ T7058] loop7: detected capacity change from 0 to 256
[  153.964212][ T7063] loop4: detected capacity change from 0 to 512
[  153.973300][ T7058] FAT-fs (loop7): "posix" option is obsolete, not supported now
[  154.083784][ T7074] loop4: detected capacity change from 0 to 256
[  154.098355][ T7074] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.156547][   T28] audit: type=1400 audit(1790216579.848:985): avc:  denied  { open } for  pid=7015 comm="syz.3.2918" path="/595/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  154.198436][ T7074] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  154.238921][ T7074] FAT-fs (loop4): Filesystem has been set read-only
[  154.267972][   T28] audit: type=1326 audit(1790216580.558:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.7.2952" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790f9e159 code=0x7ffc0000
[  154.323760][   T28] audit: type=1326 audit(1790216580.558:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.7.2952" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790f9e159 code=0x7ffc0000
[  154.349053][   T28] audit: type=1326 audit(1790216580.558:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.7.2952" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb790f9e159 code=0x7ffc0000
[  154.440825][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.447968][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.496324][  T444] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  154.685092][ T7129] exfat: Deprecated parameter 'utf8'
[  154.698516][  T444] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.711579][ T7129] exfat: Deprecated parameter 'namecase'
[  154.725106][  T444] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.735180][ T7129] exfat: Deprecated parameter 'utf8'
[  154.748073][  T444] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  154.757515][  T444] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.767118][  T444] usb 10-1: config 0 descriptor??
[  154.777231][ T7129] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  155.121405][ T7162] EXT4-fs (loop7): orphan cleanup on readonly fs
[  155.134405][ T7162] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.2987: missing EA_INODE flag
[  155.160095][ T7162] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2987: error while reading EA inode 2 err=-117
[  155.176585][ T7162] EXT4-fs (loop7): 1 orphan inode deleted
[  155.182485][ T7162] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  155.196061][  T444] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  155.203613][  T444] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  155.211144][  T444] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  155.218669][  T444] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  155.226848][  T444] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0
[  155.235080][  T444] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  155.267397][ T1697] EXT4-fs (loop7): unmounting filesystem.
[  155.395068][  T444] playstation 0003:054C:0DF2.0020: Invalid byte count transferred, expected 20 got 0
[  155.405561][  T444] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22
[  155.415116][  T444] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense
[  155.423932][  T444] playstation 0003:054C:0DF2.0020: Failed to create dualsense.
[  155.432438][  T444] playstation: probe of 0003:054C:0DF2.0020 failed with error -22
[  155.496376][ T1048] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  155.612151][  T444] usb 10-1: USB disconnect, device number 8
[  155.657573][ T7195] set_capacity_and_notify: 2 callbacks suppressed
[  155.657595][ T7195] loop4: detected capacity change from 0 to 2048
[  155.706921][ T7195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  155.717036][ T1048] usb 4-1: not running at top speed; connect to a high speed hub
[  155.739542][ T1048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.756364][ T1048] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  155.765751][ T1048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.778958][ T1048] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  155.802808][ T7195] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  155.818857][ T7208] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 848 with error 28
[  155.839416][ T7208] EXT4-fs (loop4): This should not happen!! Data will be lost
[  155.839416][ T7208] 
[  155.849276][ T7208] EXT4-fs (loop4): Total free blocks count 0
[  155.855330][ T7208] EXT4-fs (loop4): Free/Dirty block details
[  155.861913][ T7208] EXT4-fs (loop4): free_blocks=4096
[  155.867193][ T7208] EXT4-fs (loop4): dirty_blocks=864
[  155.872473][ T7208] EXT4-fs (loop4): Block reservation details
[  155.878558][ T7208] EXT4-fs (loop4): i_reserved_data_blocks=54
[  155.925117][  T290] EXT4-fs (loop4): unmounting filesystem.
[  156.023957][ T7221] mmap: syz.7.3011 (7221): VmData 45785088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  156.176902][ T1048] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  156.200661][ T7241] loop2: detected capacity change from 0 to 128
[  156.529098][ T7277] loop9: detected capacity change from 0 to 4096
[  156.571958][ T7277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  156.583735][  T444] usb 4-1: USB disconnect, device number 17
[  156.590586][ T7277] EXT4-fs (loop9): Test dummy encryption mode enabled
[  156.598211][ T7277] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=200ec128, mo2=0003]
[  156.607744][ T7277] System zones: 0-5
[  156.612787][ T7277] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  156.633282][ T7277] fs-verity: sha512 using implementation "sha512-avx2"
[  156.659642][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  156.710767][ T7298] netlink: 'syz.9.3046': attribute type 12 has an invalid length.
[  156.728924][ T7298] netlink: 'syz.9.3046': attribute type 29 has an invalid length.
[  156.749109][ T7298] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3046'.
[  156.833818][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.840964][ T7302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.365689][ T7326] netlink: 'syz.9.3060': attribute type 12 has an invalid length.
[  157.407946][ T7328] loop2: detected capacity change from 0 to 256
[  157.414721][ T7326] netlink: 'syz.9.3060': attribute type 29 has an invalid length.
[  157.446399][ T7326] netlink: 'syz.9.3060': attribute type 7 has an invalid length.
[  157.463936][ T7326] netlink: 'syz.9.3060': attribute type 37 has an invalid length.
[  157.464026][ T7328] exfat: Deprecated parameter 'namecase'
[  157.486425][ T7328] exfat: Deprecated parameter 'utf8'
[  157.522747][ T7326] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3060'.
[  157.533985][ T7328] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  157.634912][ T7296] loop4: detected capacity change from 0 to 131072
[  157.662880][ T7296] F2FS-fs (loop4): invalid crc value
[  157.737250][ T7296] F2FS-fs (loop4): Found nat_bits in checkpoint
[  157.848059][ T7296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  157.896911][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  157.896927][   T28] audit: type=1400 audit(1790216584.228:996): avc:  denied  { mounton } for  pid=7347 comm="syz.9.3068" path=2F70726F632F3539362F6E65742F6E657466696C746572202864656C6574656429 dev="proc" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  157.983457][ T7296] fscrypt (loop4, inode 3): Mutually exclusive encryption flags (0x0c)
[  158.104273][ T7364] loop7: detected capacity change from 0 to 256
[  158.135051][ T7364] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  158.328985][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.335892][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3083'.
[  158.353044][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.370783][ T7366] device bridge_slave_0 entered promiscuous mode
[  158.446724][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.479834][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.500080][ T7366] device bridge_slave_1 entered promiscuous mode
[  158.549671][  T310] device bridge_slave_1 left promiscuous mode
[  158.576397][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.596526][  T310] device bridge_slave_0 left promiscuous mode
[  158.602728][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.646503][  T310] device veth1_macvtap left promiscuous mode
[  158.652624][  T310] device veth0_vlan left promiscuous mode
[  158.712795][  T297] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  158.728487][  T297] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  158.952047][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.133154][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.157869][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.186901][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.214715][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.240690][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.247832][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.298469][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.318259][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.376652][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.386103][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.393205][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.444228][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  159.471304][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.498155][   T28] audit: type=1400 audit(1790216585.828:997): avc:  denied  { write } for  pid=7444 comm="syz.3.3110" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  159.521239][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.548956][ T7366] device veth0_vlan entered promiscuous mode
[  159.555776][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.580932][ T7447] device syz_tun entered promiscuous mode
[  159.595775][   T28] audit: type=1400 audit(1790216585.908:998): avc:  denied  { module_request } for  pid=7366 comm="syz-executor" kmod="netdev-macvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  159.619414][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.627130][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.647853][ T7446] device syz_tun left promiscuous mode
[  159.656731][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.671518][ T7366] device veth1_macvtap entered promiscuous mode
[  159.720695][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.729258][ T7452] ip_tables: iptables: counters copy to user failed while replacing table
[  159.745245][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.914112][ T7460] ªªªªªª: renamed from vlan0
[  159.974344][ T7439] loop9: detected capacity change from 0 to 40427
[  159.993796][ T7439] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  160.016340][ T7439] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  160.041661][ T7439] F2FS-fs (loop9): Found nat_bits in checkpoint
[  160.127134][ T7439] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  160.138787][ T7439] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  160.386123][ T7428] loop4: detected capacity change from 0 to 131072
[  160.402746][ T7428] F2FS-fs (loop4): Test dummy encryption mode enabled
[  160.421144][   T28] audit: type=1400 audit(1790216586.748:999): avc:  denied  { map } for  pid=7478 comm="syz.9.3122" path="socket:[41846]" dev="sockfs" ino=41846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  160.448845][ T7428] F2FS-fs (loop4): invalid crc value
[  160.473822][ T7484] loop9: detected capacity change from 0 to 1024
[  160.501407][ T7428] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.541780][ T7484] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  160.575769][ T7495] SELinux:  policydb table sizes (1869444207,809330020) do not match mine (5,6)
[  160.611746][ T7495] SELinux: failed to load policy
[  160.620204][ T7497] ------------[ cut here ]------------
[  160.625780][ T7497] WARNING: CPU: 1 PID: 7497 at kernel/trace/trace.c:2464 __trace_find_cmdline+0x166/0x1c0
[  160.635880][ T7497] Modules linked in:
[  160.639872][ T7497] CPU: 1 PID: 7497 Comm: syz.7.3129 Not tainted syzkaller #0
[  160.647313][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.657543][ T7497] RIP: 0010:__trace_find_cmdline+0x166/0x1c0
[  160.663586][ T7497] Code: 65 d0 ba 06 00 00 00 4c 89 e7 48 c7 c6 e0 00 ab 85 e8 3e a3 42 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5a 14 fd ff <0f> 0b ba 06 00 00 00 4c 89 e7 48 c7 c6 c0 00 ab 85 eb d4 44 89 f9
[  160.665940][ T7428] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.683272][ T7497] RSP: 0018:ffffc9000109f980 EFLAGS: 00010283
[  160.696892][ T7497] RAX: ffffffff817455c6 RBX: ffff888114488000 RCX: 0000000000080000
[  160.704913][ T7497] RDX: ffffc9000efb1000 RSI: 000000000000150c RDI: 000000000000150d
[  160.712954][ T7497] RBP: ffffc9000109f9b0 R08: 0000000000000003 R09: 0000000000000004
[  160.720997][ T7497] R10: dffffc0000000000 R11: fffff52000213f40 R12: ffffc9000109fac0
[  160.729039][ T7497] R13: dffffc0000000000 R14: 00000000ffffb09e R15: 0000000000000000
[  160.737098][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  160.746068][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.752740][ T7497] CR2: 0000001b2e91fff8 CR3: 000000013c010000 CR4: 00000000003506a0
[  160.760786][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  160.768839][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  160.776888][ T7497] Call Trace:
[  160.780201][ T7497]  <TASK>
[  160.783169][ T7497]  ? trace_find_cmdline+0xde/0x1c0
[  160.788376][ T7497]  trace_find_cmdline+0xf1/0x1c0
[  160.793407][ T7497]  ? __cfi_trace_find_cmdline+0x10/0x10
[  160.799041][ T7497]  ? ring_buffer_peek+0x345/0x3b0
[  160.804106][ T7497]  trace_print_context+0xf9/0x4d0
[  160.809250][ T7497]  ? __cfi_trace_print_context+0x10/0x10
[  160.814924][ T7497]  ? __find_next_entry+0x5af/0x6c0
[  160.820135][ T7497]  print_trace_fmt+0x3c6/0x720
[  160.824932][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  160.830657][ T7497]  print_trace_line+0x393/0x6b0
[  160.835563][ T7497]  tracing_read_pipe+0x517/0xaf0
[  160.840597][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  160.846099][ T7497]  vfs_read+0x286/0x930
[  160.850330][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  160.855046][ T7497]  ? __kasan_check_write+0x14/0x20
[  160.860232][ T7497]  ? mutex_lock+0x93/0x1b0
[  160.864678][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  160.869617][ T7497]  ? __fdget_pos+0x2cd/0x380
[  160.874246][ T7497]  ? ksys_read+0x70/0x260
[  160.878647][ T7497]  ksys_read+0x14a/0x260
[  160.882916][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  160.887878][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  160.893559][ T7497]  __x64_sys_read+0x7b/0x90
[  160.898187][ T7497]  x64_sys_call+0x2f/0x9a0
[  160.902647][ T7497]  do_syscall_64+0x4c/0xa0
[  160.907143][ T7497]  ? clear_bhb_loop+0x30/0x80
[  160.911857][ T7497]  ? clear_bhb_loop+0x30/0x80
[  160.916615][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  160.922538][ T7497] RIP: 0033:0x7fb790f9e159
[  160.927041][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.946711][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  160.955166][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  160.963252][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  160.971283][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  160.979340][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.987406][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  160.995457][ T7497]  </TASK>
[  160.998547][ T7497] ---[ end trace 0000000000000000 ]---
[  161.004993][ T4132] EXT4-fs (loop9): unmounting filesystem.
[  161.034547][ T7497] ------------[ cut here ]------------
[  161.040071][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  161.050356][ T7497] Modules linked in:
[  161.054276][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G        W          syzkaller #0
[  161.063151][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.073230][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  161.079077][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  161.098746][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  161.104849][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  161.112849][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  161.120851][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  161.128849][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  161.136846][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  161.144845][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  161.153898][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.160522][ T7497] CR2: 00007fedb4958060 CR3: 000000013c010000 CR4: 00000000003506b0
[  161.168549][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  161.176553][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  161.184575][ T7497] Call Trace:
[  161.187910][ T7497]  <TASK>
[  161.190888][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  161.196572][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.201734][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  161.206461][ T7497]  rb_buffer_peek+0x5f/0x930
[  161.211097][ T7497]  ring_buffer_peek+0x184/0x3b0
[  161.215989][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  161.221411][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.226578][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  161.231310][ T7497]  ? _find_next_bit+0x8a/0x130
[  161.236119][ T7497]  __find_next_entry+0x33c/0x6c0
[  161.241111][ T7497]  ? trace_find_next_entry+0x380/0x380
[  161.246622][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  161.252294][ T7497]  ? print_trace_line+0x393/0x6b0
[  161.257376][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  161.262361][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  161.267873][ T7497]  vfs_read+0x286/0x930
[  161.272077][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  161.276795][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.281952][ T7497]  ? mutex_lock+0x93/0x1b0
[  161.286408][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  161.291300][ T7497]  ? __fdget_pos+0x2cd/0x380
[  161.295932][ T7497]  ? ksys_read+0x70/0x260
[  161.300299][ T7497]  ksys_read+0x14a/0x260
[  161.304581][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  161.309394][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  161.315080][ T7497]  __x64_sys_read+0x7b/0x90
[  161.319631][ T7497]  x64_sys_call+0x2f/0x9a0
[  161.324097][ T7497]  do_syscall_64+0x4c/0xa0
[  161.328567][ T7497]  ? clear_bhb_loop+0x30/0x80
[  161.333291][ T7497]  ? clear_bhb_loop+0x30/0x80
[  161.338025][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.343966][ T7497] RIP: 0033:0x7fb790f9e159
[  161.348421][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.368069][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  161.376542][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  161.384562][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  161.392596][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  161.400618][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.408633][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  161.416655][ T7497]  </TASK>
[  161.419716][ T7497] ---[ end trace 0000000000000000 ]---
[  161.425218][ T7497] ==================================================================
[  161.433320][ T7497] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930
[  161.440584][ T7497] Read of size 4 at addr ffff8881294f44bf by task syz.7.3129/7497
[  161.448429][ T7497] 
[  161.450785][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G        W          syzkaller #0
[  161.459676][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.469771][ T7497] Call Trace:
[  161.473083][ T7497]  <TASK>
[  161.476041][ T7497]  __dump_stack+0x21/0x24
[  161.480422][ T7497]  dump_stack_lvl+0x110/0x170
[  161.485152][ T7497]  ? __cfi_dump_stack_lvl+0x8/0x8
[  161.490234][ T7497]  ? rb_get_reader_page+0x9f6/0xc60
[  161.495485][ T7497]  ? rb_buffer_peek+0x88d/0x930
[  161.500380][ T7497]  print_address_description+0x71/0x200
[  161.505979][ T7497]  print_report+0x4a/0x60
[  161.510363][ T7497]  kasan_report+0x122/0x150
[  161.514920][ T7497]  ? rb_buffer_peek+0x88d/0x930
[  161.519814][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.524976][ T7497]  __asan_report_load4_noabort+0x14/0x20
[  161.530655][ T7497]  rb_buffer_peek+0x88d/0x930
[  161.535387][ T7497]  ring_buffer_peek+0x184/0x3b0
[  161.540289][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  161.545710][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.550867][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  161.555595][ T7497]  ? _find_next_bit+0x8a/0x130
[  161.560404][ T7497]  __find_next_entry+0x33c/0x6c0
[  161.565394][ T7497]  ? trace_find_next_entry+0x380/0x380
[  161.570906][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  161.576582][ T7497]  ? print_trace_line+0x393/0x6b0
[  161.581656][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  161.586655][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  161.592162][ T7497]  vfs_read+0x286/0x930
[  161.596399][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  161.601116][ T7497]  ? __kasan_check_write+0x14/0x20
[  161.606260][ T7497]  ? mutex_lock+0x93/0x1b0
[  161.610715][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  161.615614][ T7497]  ? __fdget_pos+0x2cd/0x380
[  161.620256][ T7497]  ? ksys_read+0x70/0x260
[  161.624631][ T7497]  ksys_read+0x14a/0x260
[  161.628913][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  161.633723][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  161.639399][ T7497]  __x64_sys_read+0x7b/0x90
[  161.643945][ T7497]  x64_sys_call+0x2f/0x9a0
[  161.648403][ T7497]  do_syscall_64+0x4c/0xa0
[  161.652869][ T7497]  ? clear_bhb_loop+0x30/0x80
[  161.657588][ T7497]  ? clear_bhb_loop+0x30/0x80
[  161.662323][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.668276][ T7497] RIP: 0033:0x7fb790f9e159
[  161.672734][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.692392][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  161.700857][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  161.708957][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  161.716984][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  161.724998][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.733032][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  161.741052][ T7497]  </TASK>
[  161.744105][ T7497] 
[  161.746450][ T7497] Allocated by task 7136:
[  161.750801][ T7497]  kasan_set_track+0x4b/0x70
[  161.755466][ T7497]  kasan_save_alloc_info+0x1f/0x30
[  161.760616][ T7497]  __kasan_kmalloc+0x95/0xb0
[  161.765248][ T7497]  __kmalloc_node_track_caller+0xb1/0x1e0
[  161.771021][ T7497]  __alloc_skb+0x226/0x4a0
[  161.775482][ T7497]  alloc_skb_with_frags+0xa8/0x620
[  161.780634][ T7497]  sock_alloc_send_pskb+0x87f/0x9a0
[  161.785876][ T7497]  __ip_append_data+0x230f/0x3520
[  161.790953][ T7497]  ip_append_data+0x125/0x1a0
[  161.795674][ T7497]  icmp_push_reply+0x8f/0x3e0
[  161.800395][ T7497]  __icmp_send+0xedd/0x1270
[  161.804936][ T7497]  ip_protocol_deliver_rcu+0x6dc/0x780
[  161.810431][ T7497]  ip_local_deliver_finish+0x23e/0x400
[  161.815929][ T7497]  ip_local_deliver+0x1dc/0x350
[  161.820819][ T7497]  ip_rcv+0x167/0x290
[  161.824833][ T7497]  __netif_receive_skb+0xd7/0x2a0
[  161.829901][ T7497]  process_backlog+0x351/0x600
[  161.834706][ T7497]  __napi_poll+0xcd/0x5d0
[  161.839068][ T7497]  net_rx_action+0x4a3/0xa90
[  161.843703][ T7497]  handle_softirqs+0x1d7/0x600
[  161.848501][ T7497]  __do_softirq+0xb/0xd
[  161.852701][ T7497] 
[  161.855047][ T7497] Freed by task 7136:
[  161.859050][ T7497]  kasan_set_track+0x4b/0x70
[  161.863684][ T7497]  kasan_save_free_info+0x2b/0x40
[  161.868746][ T7497]  ____kasan_slab_free+0x132/0x180
[  161.873904][ T7497]  __kasan_slab_free+0x11/0x20
[  161.878708][ T7497]  slab_free_freelist_hook+0xc2/0x190
[  161.884120][ T7497]  __kmem_cache_free+0xb7/0x1b0
[  161.889018][ T7497]  kfree+0x6f/0xf0
[  161.892775][ T7497]  skb_release_data+0x63d/0x8a0
[  161.897667][ T7497]  consume_skb+0xab/0x1f0
[  161.902060][ T7497]  icmp_rcv+0x117e/0x17d0
[  161.906429][ T7497]  ip_protocol_deliver_rcu+0x371/0x780
[  161.911932][ T7497]  ip_local_deliver_finish+0x23e/0x400
[  161.917437][ T7497]  ip_local_deliver+0x1dc/0x350
[  161.922354][ T7497]  ip_rcv+0x167/0x290
[  161.926369][ T7497]  __netif_receive_skb+0xd7/0x2a0
[  161.931431][ T7497]  process_backlog+0x351/0x600
[  161.936238][ T7497]  __napi_poll+0xcd/0x5d0
[  161.940622][ T7497]  net_rx_action+0x4a3/0xa90
[  161.945246][ T7497]  handle_softirqs+0x1d7/0x600
[  161.950050][ T7497]  __do_softirq+0xb/0xd
[  161.954249][ T7497] 
[  161.956603][ T7497] The buggy address belongs to the object at ffff8881294f4400
[  161.956603][ T7497]  which belongs to the cache kmalloc-512 of size 512
[  161.970696][ T7497] The buggy address is located 191 bytes inside of
[  161.970696][ T7497]  512-byte region [ffff8881294f4400, ffff8881294f4600)
[  161.984035][ T7497] 
[  161.986386][ T7497] The buggy address belongs to the physical page:
[  161.992824][ T7497] page:ffffea0004a53d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1294f4
[  162.003095][ T7497] head:ffffea0004a53d00 order:2 compound_mapcount:0 compound_pincount:0
[  162.011452][ T7497] flags: 0x4000000000010200(slab|head|zone=1)
[  162.017584][ T7497] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[  162.026203][ T7497] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  162.034809][ T7497] page dumped because: kasan: bad access detected
[  162.041249][ T7497] page_owner tracks the page as allocated
[  162.047440][ T7497] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7136, tgid 7135 (syz.7.2975), ts 154841834053, free_ts 148761442041
[  162.070846][ T7497]  post_alloc_hook+0x1f5/0x210
[  162.075664][ T7497]  prep_new_page+0x1c/0x110
[  162.080203][ T7497]  get_page_from_freelist+0x2ca9/0x2d20
[  162.085821][ T7497]  __alloc_pages+0x1fa/0x610
[  162.090540][ T7497]  alloc_slab_page+0x6e/0xf0
[  162.095154][ T7497]  new_slab+0x98/0x3e0
[  162.099271][ T7497]  ___slab_alloc+0x70f/0xb70
[  162.103916][ T7497]  __slab_alloc+0x5e/0xa0
[  162.108284][ T7497]  __kmem_cache_alloc_node+0x204/0x2d0
[  162.113774][ T7497]  __kmalloc_node_track_caller+0xa1/0x1e0
[  162.119521][ T7497]  __alloc_skb+0x226/0x4a0
[  162.123970][ T7497]  __ip_append_data+0x23e9/0x3520
[  162.129029][ T7497]  ip_append_data+0x125/0x1a0
[  162.133737][ T7497]  raw_sendmsg+0xf12/0x1430
[  162.138263][ T7497]  inet_sendmsg+0xb6/0xd0
[  162.142625][ T7497]  ____sys_sendmsg+0x5fb/0x9c0
[  162.147433][ T7497] page last free stack trace:
[  162.152128][ T7497]  free_unref_page_prepare+0x81b/0x820
[  162.157627][ T7497]  free_unref_page+0x93/0x530
[  162.162339][ T7497]  __free_pages+0x67/0x100
[  162.166794][ T7497]  __vunmap+0xa3c/0xc00
[  162.170981][ T7497]  vfree+0x61/0x90
[  162.174749][ T7497]  kcov_close+0x2b/0x50
[  162.178944][ T7497]  __fput+0x1fd/0x8f0
[  162.182971][ T7497]  ____fput+0x15/0x20
[  162.186989][ T7497]  task_work_run+0x1e1/0x250
[  162.191612][ T7497]  do_exit+0xb0d/0x29f0
[  162.195805][ T7497]  do_group_exit+0x21b/0x2e0
[  162.200434][ T7497]  __x64_sys_exit_group+0x3f/0x40
[  162.205526][ T7497]  x64_sys_call+0x7b4/0x9a0
[  162.210058][ T7497]  do_syscall_64+0x4c/0xa0
[  162.214511][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.220434][ T7497] 
[  162.222771][ T7497] Memory state around the buggy address:
[  162.228420][ T7497]  ffff8881294f4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  162.236509][ T7497]  ffff8881294f4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.244592][ T7497] >ffff8881294f4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.252667][ T7497]                                         ^
[  162.258589][ T7497]  ffff8881294f4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.266677][ T7497]  ffff8881294f4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.274781][ T7497] ==================================================================
[  162.282854][ T7497] Disabling lock debugging due to kernel taint
[  162.296456][ T7497] ------------[ cut here ]------------
[  162.301960][ T7497] WARNING: CPU: 1 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  162.312278][ T7497] Modules linked in:
[  162.316195][ T7497] CPU: 1 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  162.324822][   T28] audit: type=1400 audit(1790216588.628:1000): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  162.325067][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.354898][   T28] audit: type=1400 audit(1790216588.628:1001): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.356923][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  162.356956][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  162.379169][   T28] audit: type=1400 audit(1790216588.628:1002): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.384155][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  162.405428][   T28] audit: type=1400 audit(1790216588.628:1003): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.425032][ T7497] 
[  162.425040][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  162.425059][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  162.425073][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  162.425091][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  162.432306][   T28] audit: type=1400 audit(1790216588.628:1004): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.451716][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  162.451735][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  162.451757][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.454937][   T28] audit: type=1400 audit(1790216588.628:1005): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.462062][ T7497] CR2: 0000200000000080 CR3: 000000013c010000 CR4: 00000000003506a0
[  162.462085][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.462100][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.576914][ T7497] Call Trace:
[  162.580228][ T7497]  <TASK>
[  162.583195][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  162.588872][ T7497]  ? __kasan_check_write+0x14/0x20
[  162.594023][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  162.598750][ T7497]  rb_buffer_peek+0x5f/0x930
[  162.603381][ T7497]  ring_buffer_consume+0x1aa/0x370
[  162.608552][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  162.614247][ T7497]  ? print_trace_line+0x393/0x6b0
[  162.619295][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  162.624254][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  162.629730][ T7497]  vfs_read+0x286/0x930
[  162.633906][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  162.638597][ T7497]  ? __kasan_check_write+0x14/0x20
[  162.643722][ T7497]  ? mutex_lock+0x93/0x1b0
[  162.648156][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  162.653032][ T7497]  ? __fdget_pos+0x2cd/0x380
[  162.657636][ T7497]  ? ksys_read+0x70/0x260
[  162.661982][ T7497]  ksys_read+0x14a/0x260
[  162.666236][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  162.671017][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  162.676667][ T7497]  __x64_sys_read+0x7b/0x90
[  162.681182][ T7497]  x64_sys_call+0x2f/0x9a0
[  162.685616][ T7497]  do_syscall_64+0x4c/0xa0
[  162.690062][ T7497]  ? clear_bhb_loop+0x30/0x80
[  162.694760][ T7497]  ? clear_bhb_loop+0x30/0x80
[  162.699455][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.705360][ T7497] RIP: 0033:0x7fb790f9e159
[  162.709789][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.729415][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  162.737935][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  162.745937][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  162.753925][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  162.761928][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.769916][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  162.777910][ T7497]  </TASK>
[  162.780944][ T7497] ---[ end trace 0000000000000000 ]---
[  162.786457][ T7497] ------------[ cut here ]------------
[  162.791921][ T7497] WARNING: CPU: 1 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  162.802184][ T7497] Modules linked in:
[  162.806097][ T7497] CPU: 1 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  162.814970][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.825137][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  162.830979][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  162.850609][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  162.856693][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  162.864680][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  162.872685][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  162.880676][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  162.888669][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  162.896748][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  162.905694][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.912293][ T7497] CR2: 0000200000000080 CR3: 000000013c010000 CR4: 00000000003506a0
[  162.920291][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.928279][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.936267][ T7497] Call Trace:
[  162.939564][ T7497]  <TASK>
[  162.942527][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  162.948204][ T7497]  rb_advance_reader+0x2b/0x770
[  162.953089][ T7497]  ring_buffer_consume+0x1e7/0x370
[  162.958219][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  162.963869][ T7497]  ? print_trace_line+0x393/0x6b0
[  162.968913][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  162.973902][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  162.979382][ T7497]  vfs_read+0x286/0x930
[  162.983552][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  162.988264][ T7497]  ? __kasan_check_write+0x14/0x20
[  162.993398][ T7497]  ? mutex_lock+0x93/0x1b0
[  162.997841][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  163.002723][ T7497]  ? __fdget_pos+0x2cd/0x380
[  163.007329][ T7497]  ? ksys_read+0x70/0x260
[  163.011693][ T7497]  ksys_read+0x14a/0x260
[  163.015959][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  163.020735][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  163.026404][ T7497]  __x64_sys_read+0x7b/0x90
[  163.030943][ T7497]  x64_sys_call+0x2f/0x9a0
[  163.035386][ T7497]  do_syscall_64+0x4c/0xa0
[  163.039838][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.044532][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.049245][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.055156][ T7497] RIP: 0033:0x7fb790f9e159
[  163.059581][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.079202][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.087638][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  163.095626][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  163.103612][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  163.111625][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.119631][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  163.127643][ T7497]  </TASK>
[  163.130682][ T7497] ---[ end trace 0000000000000000 ]---
[  163.147528][ T7497] ------------[ cut here ]------------
[  163.153040][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.163330][ T7497] Modules linked in:
[  163.167257][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  163.176135][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.186222][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.192072][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  163.211716][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  163.217866][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  163.225880][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.233909][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.241916][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.249919][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  163.257926][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.266896][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.273511][ T7497] CR2: 00007fedb3def2f8 CR3: 000000013c010000 CR4: 00000000003506b0
[  163.281520][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.289526][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.297561][ T7497] Call Trace:
[  163.300877][ T7497]  <TASK>
[  163.303844][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  163.309543][ T7497]  ? __schedule+0xcbb/0x1700
[  163.314220][ T7497]  ? __kasan_check_write+0x14/0x20
[  163.319362][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  163.324082][ T7497]  rb_buffer_peek+0x5f/0x930
[  163.328709][ T7497]  ring_buffer_peek+0x184/0x3b0
[  163.333634][ T7497]  ? __kasan_check_read+0x11/0x20
[  163.338696][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  163.344110][ T7497]  ? _find_next_bit+0x8a/0x130
[  163.348923][ T7497]  __find_next_entry+0x33c/0x6c0
[  163.353911][ T7497]  ? trace_find_next_entry+0x380/0x380
[  163.359423][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.365119][ T7497]  ? print_trace_line+0x393/0x6b0
[  163.370178][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  163.375155][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.380658][ T7497]  vfs_read+0x286/0x930
[  163.384846][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  163.389557][ T7497]  ? __kasan_check_write+0x14/0x20
[  163.394708][ T7497]  ? mutex_lock+0x93/0x1b0
[  163.399162][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  163.404078][ T7497]  ? __fdget_pos+0x2cd/0x380
[  163.408705][ T7497]  ? ksys_read+0x70/0x260
[  163.413088][ T7497]  ksys_read+0x14a/0x260
[  163.417390][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  163.422188][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  163.427858][ T7497]  __x64_sys_read+0x7b/0x90
[  163.432393][ T7497]  x64_sys_call+0x2f/0x9a0
[  163.436844][ T7497]  do_syscall_64+0x4c/0xa0
[  163.441309][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.446023][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.450730][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.456659][ T7497] RIP: 0033:0x7fb790f9e159
[  163.461104][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.480742][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.489193][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  163.497197][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  163.505196][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  163.513195][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.521230][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  163.529267][ T7497]  </TASK>
[  163.532317][ T7497] ---[ end trace 0000000000000000 ]---
[  163.542245][ T7497] ------------[ cut here ]------------
[  163.547745][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.558061][ T7497] Modules linked in:
[  163.561980][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  163.570859][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.580978][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.586830][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  163.606474][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  163.612579][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  163.620591][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.628612][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.636627][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.644631][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  163.652638][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.661601][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.668216][ T7497] CR2: 00007fedb3def2f8 CR3: 000000013c010000 CR4: 00000000003506b0
[  163.676226][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.684230][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.692233][ T7497] Call Trace:
[  163.695537][ T7497]  <TASK>
[  163.698497][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  163.704173][ T7497]  ? __kasan_check_write+0x14/0x20
[  163.709315][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  163.714044][ T7497]  rb_buffer_peek+0x5f/0x930
[  163.718665][ T7497]  ring_buffer_consume+0x1aa/0x370
[  163.723809][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.729472][ T7497]  ? print_trace_line+0x393/0x6b0
[  163.734533][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  163.739515][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.745039][ T7497]  vfs_read+0x286/0x930
[  163.749236][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  163.753949][ T7497]  ? __kasan_check_write+0x14/0x20
[  163.759100][ T7497]  ? mutex_lock+0x93/0x1b0
[  163.763547][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  163.768433][ T7497]  ? __fdget_pos+0x2cd/0x380
[  163.773089][ T7497]  ? ksys_read+0x70/0x260
[  163.777454][ T7497]  ksys_read+0x14a/0x260
[  163.781750][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  163.786551][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  163.792231][ T7497]  __x64_sys_read+0x7b/0x90
[  163.796772][ T7497]  x64_sys_call+0x2f/0x9a0
[  163.801229][ T7497]  do_syscall_64+0x4c/0xa0
[  163.805691][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.810410][ T7497]  ? clear_bhb_loop+0x30/0x80
[  163.815152][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.821080][ T7497] RIP: 0033:0x7fb790f9e159
[  163.825526][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.845163][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.853636][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  163.861653][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  163.869657][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  163.877660][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.885661][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  163.893673][ T7497]  </TASK>
[  163.896765][ T7497] ---[ end trace 0000000000000000 ]---
[  163.902301][ T7497] ------------[ cut here ]------------
[  163.907777][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.918066][ T7497] Modules linked in:
[  163.921994][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  163.930871][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.940957][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.946812][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  163.966460][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  163.972565][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  163.980574][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.988574][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.996586][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  164.004596][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  164.012610][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  164.021585][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.028202][ T7497] CR2: 00007fedb3def2f8 CR3: 000000013c010000 CR4: 00000000003506b0
[  164.036218][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.044219][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  164.052213][ T7497] Call Trace:
[  164.055517][ T7497]  <TASK>
[  164.058481][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  164.064152][ T7497]  rb_advance_reader+0x2b/0x770
[  164.069050][ T7497]  ring_buffer_consume+0x1e7/0x370
[  164.074205][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  164.079876][ T7497]  ? print_trace_line+0x393/0x6b0
[  164.084939][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  164.089921][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  164.095417][ T7497]  vfs_read+0x286/0x930
[  164.099614][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  164.104336][ T7497]  ? __kasan_check_write+0x14/0x20
[  164.109492][ T7497]  ? mutex_lock+0x93/0x1b0
[  164.113942][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  164.118832][ T7497]  ? __fdget_pos+0x2cd/0x380
[  164.123454][ T7497]  ? ksys_read+0x70/0x260
[  164.127838][ T7497]  ksys_read+0x14a/0x260
[  164.132115][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  164.136907][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  164.142577][ T7497]  __x64_sys_read+0x7b/0x90
[  164.147104][ T7497]  x64_sys_call+0x2f/0x9a0
[  164.151553][ T7497]  do_syscall_64+0x4c/0xa0
[  164.156005][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.160713][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.165442][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.171381][ T7497] RIP: 0033:0x7fb790f9e159
[  164.175830][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.195491][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  164.203949][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  164.211949][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  164.219947][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  164.227952][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.235944][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  164.243950][ T7497]  </TASK>
[  164.247017][ T7497] ---[ end trace 0000000000000000 ]---
[  164.289977][ T7497] ------------[ cut here ]------------
[  164.295493][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  164.305784][ T7497] Modules linked in:
[  164.309711][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  164.318612][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.328699][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  164.334553][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  164.354186][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  164.360302][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  164.368306][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  164.376306][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  164.384305][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  164.392302][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  164.400318][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  164.409285][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.415902][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  164.423907][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.431907][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  164.439907][ T7497] Call Trace:
[  164.443209][ T7497]  <TASK>
[  164.446163][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  164.451831][ T7497]  ? __schedule+0xcbb/0x1700
[  164.456463][ T7497]  ? __kasan_check_write+0x14/0x20
[  164.461609][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  164.466321][ T7497]  rb_buffer_peek+0x5f/0x930
[  164.470946][ T7497]  ring_buffer_peek+0x184/0x3b0
[  164.475823][ T7497]  ? __kasan_check_read+0x11/0x20
[  164.480882][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  164.486305][ T7497]  ? _find_next_bit+0x8a/0x130
[  164.491099][ T7497]  __find_next_entry+0x33c/0x6c0
[  164.496083][ T7497]  ? trace_find_next_entry+0x380/0x380
[  164.501583][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  164.507252][ T7497]  ? print_trace_line+0x393/0x6b0
[  164.512305][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  164.517285][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  164.522774][ T7497]  vfs_read+0x286/0x930
[  164.526960][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  164.531716][ T7497]  ? __kasan_check_write+0x14/0x20
[  164.536855][ T7497]  ? mutex_lock+0x93/0x1b0
[  164.541300][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  164.546186][ T7497]  ? __fdget_pos+0x2cd/0x380
[  164.550805][ T7497]  ? ksys_read+0x70/0x260
[  164.555167][ T7497]  ksys_read+0x14a/0x260
[  164.559435][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  164.564232][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  164.569918][ T7497]  __x64_sys_read+0x7b/0x90
[  164.574474][ T7497]  x64_sys_call+0x2f/0x9a0
[  164.578924][ T7497]  do_syscall_64+0x4c/0xa0
[  164.583380][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.588086][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.592801][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.598729][ T7497] RIP: 0033:0x7fb790f9e159
[  164.603172][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.622810][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  164.631293][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  164.639292][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  164.647289][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  164.655292][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.663291][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  164.671302][ T7497]  </TASK>
[  164.674373][ T7497] ---[ end trace 0000000000000000 ]---
[  164.684009][ T7497] ------------[ cut here ]------------
[  164.689507][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  164.699791][ T7497] Modules linked in:
[  164.703732][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  164.712605][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.722686][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  164.728536][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  164.748172][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  164.754275][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  164.762279][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  164.770272][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  164.778261][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  164.786269][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  164.794257][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  164.803200][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.809793][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  164.817779][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.825767][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  164.833754][ T7497] Call Trace:
[  164.837041][ T7497]  <TASK>
[  164.839990][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  164.845646][ T7497]  ? __kasan_check_write+0x14/0x20
[  164.850782][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  164.855480][ T7497]  rb_buffer_peek+0x5f/0x930
[  164.860116][ T7497]  ring_buffer_consume+0x1aa/0x370
[  164.865268][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  164.870934][ T7497]  ? print_trace_line+0x393/0x6b0
[  164.875982][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  164.880971][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  164.886456][ T7497]  vfs_read+0x286/0x930
[  164.890632][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  164.895326][ T7497]  ? __kasan_check_write+0x14/0x20
[  164.900455][ T7497]  ? mutex_lock+0x93/0x1b0
[  164.904883][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  164.909750][ T7497]  ? __fdget_pos+0x2cd/0x380
[  164.914360][ T7497]  ? ksys_read+0x70/0x260
[  164.918712][ T7497]  ksys_read+0x14a/0x260
[  164.922968][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  164.927746][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  164.933395][ T7497]  __x64_sys_read+0x7b/0x90
[  164.937910][ T7497]  x64_sys_call+0x2f/0x9a0
[  164.942346][ T7497]  do_syscall_64+0x4c/0xa0
[  164.946780][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.951475][ T7497]  ? clear_bhb_loop+0x30/0x80
[  164.956172][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.962080][ T7497] RIP: 0033:0x7fb790f9e159
[  164.966508][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.986129][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  164.994560][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  165.002553][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  165.010539][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  165.018531][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.026538][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  165.034552][ T7497]  </TASK>
[  165.037625][ T7497] ---[ end trace 0000000000000000 ]---
[  165.043170][ T7497] ------------[ cut here ]------------
[  165.048630][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.058894][ T7497] Modules linked in:
[  165.062798][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  165.071654][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.081721][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.087550][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  165.107174][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  165.113278][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  165.121270][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.129270][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.137264][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.145253][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  165.153247][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.162198][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.168822][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  165.176819][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.184804][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.192803][ T7497] Call Trace:
[  165.196094][ T7497]  <TASK>
[  165.199046][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  165.204711][ T7497]  rb_advance_reader+0x2b/0x770
[  165.209583][ T7497]  ring_buffer_consume+0x1e7/0x370
[  165.214715][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.220359][ T7497]  ? print_trace_line+0x393/0x6b0
[  165.225396][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  165.230355][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.235836][ T7497]  vfs_read+0x286/0x930
[  165.240014][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  165.244703][ T7497]  ? __kasan_check_write+0x14/0x20
[  165.249839][ T7497]  ? mutex_lock+0x93/0x1b0
[  165.254288][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  165.259173][ T7497]  ? __fdget_pos+0x2cd/0x380
[  165.263783][ T7497]  ? ksys_read+0x70/0x260
[  165.268131][ T7497]  ksys_read+0x14a/0x260
[  165.272395][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  165.277177][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  165.282828][ T7497]  __x64_sys_read+0x7b/0x90
[  165.287345][ T7497]  x64_sys_call+0x2f/0x9a0
[  165.291776][ T7497]  do_syscall_64+0x4c/0xa0
[  165.296210][ T7497]  ? clear_bhb_loop+0x30/0x80
[  165.300899][ T7497]  ? clear_bhb_loop+0x30/0x80
[  165.305591][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.311519][ T7497] RIP: 0033:0x7fb790f9e159
[  165.315953][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.335579][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.344005][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  165.351992][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  165.359976][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  165.367985][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.375973][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  165.383971][ T7497]  </TASK>
[  165.387033][ T7497] ---[ end trace 0000000000000000 ]---
[  165.402517][ T7497] ------------[ cut here ]------------
[  165.408026][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.418331][ T7497] Modules linked in:
[  165.422251][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  165.431120][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.441200][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.447047][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  165.466683][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010006
[  165.472778][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  165.480782][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.488786][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.496789][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.504819][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  165.512817][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.521774][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.528387][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  165.536386][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.544382][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.552399][ T7497] Call Trace:
[  165.555702][ T7497]  <TASK>
[  165.558666][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  165.564366][ T7497]  ? __schedule+0xcbb/0x1700
[  165.568998][ T7497]  ? __kasan_check_write+0x14/0x20
[  165.574138][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  165.578858][ T7497]  rb_buffer_peek+0x5f/0x930
[  165.583477][ T7497]  ring_buffer_peek+0x184/0x3b0
[  165.588352][ T7497]  ? __kasan_check_read+0x11/0x20
[  165.593413][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  165.598817][ T7497]  ? _find_next_bit+0x8a/0x130
[  165.603618][ T7497]  __find_next_entry+0x33c/0x6c0
[  165.608602][ T7497]  ? trace_find_next_entry+0x380/0x380
[  165.614106][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.619772][ T7497]  ? print_trace_line+0x393/0x6b0
[  165.624827][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  165.629803][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.635297][ T7497]  vfs_read+0x286/0x930
[  165.639486][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  165.644191][ T7497]  ? __kasan_check_write+0x14/0x20
[  165.649329][ T7497]  ? mutex_lock+0x93/0x1b0
[  165.653774][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  165.658679][ T7497]  ? __fdget_pos+0x2cd/0x380
[  165.663301][ T7497]  ? ksys_read+0x70/0x260
[  165.667667][ T7497]  ksys_read+0x14a/0x260
[  165.671938][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  165.676737][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  165.682410][ T7497]  __x64_sys_read+0x7b/0x90
[  165.686961][ T7497]  x64_sys_call+0x2f/0x9a0
[  165.691410][ T7497]  do_syscall_64+0x4c/0xa0
[  165.695889][ T7497]  ? clear_bhb_loop+0x30/0x80
[  165.700608][ T7497]  ? clear_bhb_loop+0x30/0x80
[  165.705317][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.711238][ T7497] RIP: 0033:0x7fb790f9e159
[  165.715681][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.735406][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.743858][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  165.751858][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  165.759856][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  165.767861][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.775864][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  165.783876][ T7497]  </TASK>
[  165.786944][ T7497] ---[ end trace 0000000000000000 ]---
[  165.795531][ T7497] ------------[ cut here ]------------
[  165.801027][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.811318][ T7497] Modules linked in:
[  165.815243][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  165.824120][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.834202][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.840047][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  165.859683][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  165.865779][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  165.873855][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.881867][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.889862][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.897854][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  165.905844][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.914791][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.921392][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  165.929408][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.937400][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.945408][ T7497] Call Trace:
[  165.948702][ T7497]  <TASK>
[  165.951662][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  165.957317][ T7497]  ? __kasan_check_write+0x14/0x20
[  165.962467][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  165.967263][ T7497]  rb_buffer_peek+0x5f/0x930
[  165.971874][ T7497]  ring_buffer_consume+0x1aa/0x370
[  165.977009][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.982662][ T7497]  ? print_trace_line+0x393/0x6b0
[  165.987700][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  165.992663][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.998142][ T7497]  vfs_read+0x286/0x930
[  166.002316][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  166.007033][ T7497]  ? __kasan_check_write+0x14/0x20
[  166.012176][ T7497]  ? mutex_lock+0x93/0x1b0
[  166.016643][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  166.021541][ T7497]  ? __fdget_pos+0x2cd/0x380
[  166.026152][ T7497]  ? ksys_read+0x70/0x260
[  166.030494][ T7497]  ksys_read+0x14a/0x260
[  166.034760][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  166.039541][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  166.045222][ T7497]  __x64_sys_read+0x7b/0x90
[  166.049746][ T7497]  x64_sys_call+0x2f/0x9a0
[  166.054185][ T7497]  do_syscall_64+0x4c/0xa0
[  166.058628][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.063322][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.068022][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  166.073942][ T7497] RIP: 0033:0x7fb790f9e159
[  166.078376][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.097999][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.106434][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  166.114421][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  166.122426][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  166.130417][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.138422][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  166.146423][ T7497]  </TASK>
[  166.149469][ T7497] ---[ end trace 0000000000000000 ]---
[  166.155000][ T7497] ------------[ cut here ]------------
[  166.160469][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  166.170744][ T7497] Modules linked in:
[  166.174660][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  166.183520][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.194290][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  166.200140][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  166.219920][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  166.226031][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  166.234027][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  166.242016][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  166.250017][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  166.258011][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  166.265999][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  166.274946][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.281543][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  166.289557][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  166.297547][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  166.305546][ T7497] Call Trace:
[  166.308878][ T7497]  <TASK>
[  166.311833][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  166.317504][ T7497]  rb_advance_reader+0x2b/0x770
[  166.322377][ T7497]  ring_buffer_consume+0x1e7/0x370
[  166.327514][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  166.333164][ T7497]  ? print_trace_line+0x393/0x6b0
[  166.338203][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  166.343163][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  166.348647][ T7497]  vfs_read+0x286/0x930
[  166.352820][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  166.357507][ T7497]  ? __kasan_check_write+0x14/0x20
[  166.362639][ T7497]  ? mutex_lock+0x93/0x1b0
[  166.367074][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  166.371966][ T7497]  ? __fdget_pos+0x2cd/0x380
[  166.376573][ T7497]  ? ksys_read+0x70/0x260
[  166.380914][ T7497]  ksys_read+0x14a/0x260
[  166.385178][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  166.389958][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  166.395632][ T7497]  __x64_sys_read+0x7b/0x90
[  166.400177][ T7497]  x64_sys_call+0x2f/0x9a0
[  166.404618][ T7497]  do_syscall_64+0x4c/0xa0
[  166.409067][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.413780][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.418524][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  166.424443][ T7497] RIP: 0033:0x7fb790f9e159
[  166.428879][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.448506][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.456933][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  166.464921][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  166.472904][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  166.480893][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.488914][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  166.496930][ T7497]  </TASK>
[  166.499961][ T7497] ---[ end trace 0000000000000000 ]---
[  166.512400][ T7497] ------------[ cut here ]------------
[  166.517914][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  166.528206][ T7497] Modules linked in:
[  166.532126][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  166.541005][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.551112][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  166.556963][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  166.576619][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  166.582752][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  166.590760][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  166.598760][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  166.606765][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  166.614776][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  166.622784][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  166.631759][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.638382][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  166.646402][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  166.654407][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  166.662417][ T7497] Call Trace:
[  166.665722][ T7497]  <TASK>
[  166.668687][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  166.674358][ T7497]  ? __schedule+0xcbb/0x1700
[  166.679027][ T7497]  ? __kasan_check_write+0x14/0x20
[  166.684177][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  166.688909][ T7497]  rb_buffer_peek+0x5f/0x930
[  166.693556][ T7497]  ring_buffer_peek+0x184/0x3b0
[  166.698439][ T7497]  ? __kasan_check_read+0x11/0x20
[  166.703500][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  166.708903][ T7497]  ? _find_next_bit+0x8a/0x130
[  166.713706][ T7497]  __find_next_entry+0x33c/0x6c0
[  166.718698][ T7497]  ? trace_find_next_entry+0x380/0x380
[  166.724656][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  166.730325][ T7497]  ? print_trace_line+0x393/0x6b0
[  166.735391][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  166.740374][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  166.745865][ T7497]  vfs_read+0x286/0x930
[  166.750060][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  166.754768][ T7497]  ? __kasan_check_write+0x14/0x20
[  166.759917][ T7497]  ? mutex_lock+0x93/0x1b0
[  166.764365][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  166.769250][ T7497]  ? __fdget_pos+0x2cd/0x380
[  166.773875][ T7497]  ? ksys_read+0x70/0x260
[  166.778237][ T7497]  ksys_read+0x14a/0x260
[  166.782536][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  166.787327][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  166.793006][ T7497]  __x64_sys_read+0x7b/0x90
[  166.797553][ T7497]  x64_sys_call+0x2f/0x9a0
[  166.802004][ T7497]  do_syscall_64+0x4c/0xa0
[  166.806479][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.811226][ T7497]  ? clear_bhb_loop+0x30/0x80
[  166.815935][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  166.821860][ T7497] RIP: 0033:0x7fb790f9e159
[  166.826310][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.845948][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.854400][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  166.862421][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  166.870425][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  166.878422][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.886423][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  166.894432][ T7497]  </TASK>
[  166.897479][ T7497] ---[ end trace 0000000000000000 ]---
[  166.906828][ T7497] ------------[ cut here ]------------
[  166.912332][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  166.922621][ T7497] Modules linked in:
[  166.926546][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  166.935429][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.945510][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  166.951367][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  166.971010][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  166.977122][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  166.985134][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  166.993139][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  167.001147][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  167.009154][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  167.017196][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  167.026213][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.032866][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  167.040882][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.048888][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.056914][ T7497] Call Trace:
[  167.060219][ T7497]  <TASK>
[  167.063184][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  167.068862][ T7497]  ? __kasan_check_write+0x14/0x20
[  167.074011][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  167.078728][ T7497]  rb_buffer_peek+0x5f/0x930
[  167.083352][ T7497]  ring_buffer_consume+0x1aa/0x370
[  167.088537][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  167.094362][ T7497]  ? print_trace_line+0x393/0x6b0
[  167.099427][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  167.104397][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  167.109898][ T7497]  vfs_read+0x286/0x930
[  167.114083][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  167.118778][ T7497]  ? __kasan_check_write+0x14/0x20
[  167.123933][ T7497]  ? mutex_lock+0x93/0x1b0
[  167.128367][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  167.133239][ T7497]  ? __fdget_pos+0x2cd/0x380
[  167.137844][ T7497]  ? ksys_read+0x70/0x260
[  167.142199][ T7497]  ksys_read+0x14a/0x260
[  167.146451][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  167.151236][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  167.156892][ T7497]  __x64_sys_read+0x7b/0x90
[  167.161413][ T7497]  x64_sys_call+0x2f/0x9a0
[  167.165878][ T7497]  do_syscall_64+0x4c/0xa0
[  167.170332][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.175039][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.179748][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.185682][ T7497] RIP: 0033:0x7fb790f9e159
[  167.190120][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.209750][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  167.218187][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  167.226173][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  167.234168][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  167.242161][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.250145][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  167.258144][ T7497]  </TASK>
[  167.261173][ T7497] ---[ end trace 0000000000000000 ]---
[  167.266699][ T7497] ------------[ cut here ]------------
[  167.272160][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  167.282419][ T7497] Modules linked in:
[  167.286349][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  167.295218][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.305298][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  167.311131][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  167.330756][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  167.336883][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  167.344884][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  167.352881][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  167.360914][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  167.368911][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  167.376907][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  167.385855][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.392458][ T7497] CR2: 0000001b2f01eff8 CR3: 000000013c010000 CR4: 00000000003506b0
[  167.400451][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.408438][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.416428][ T7497] Call Trace:
[  167.419724][ T7497]  <TASK>
[  167.422679][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  167.428337][ T7497]  rb_advance_reader+0x2b/0x770
[  167.433209][ T7497]  ring_buffer_consume+0x1e7/0x370
[  167.438349][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  167.444002][ T7497]  ? print_trace_line+0x393/0x6b0
[  167.449046][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  167.454013][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  167.459496][ T7497]  vfs_read+0x286/0x930
[  167.463670][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  167.468359][ T7497]  ? __kasan_check_write+0x14/0x20
[  167.475659][ T7497]  ? mutex_lock+0x93/0x1b0
[  167.480090][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  167.484964][ T7497]  ? __fdget_pos+0x2cd/0x380
[  167.489574][ T7497]  ? ksys_read+0x70/0x260
[  167.493936][ T7497]  ksys_read+0x14a/0x260
[  167.498208][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  167.502999][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  167.508647][ T7497]  __x64_sys_read+0x7b/0x90
[  167.513170][ T7497]  x64_sys_call+0x2f/0x9a0
[  167.517607][ T7497]  do_syscall_64+0x4c/0xa0
[  167.522043][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.526768][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.531467][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.537396][ T7497] RIP: 0033:0x7fb790f9e159
[  167.541830][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.561451][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  167.569875][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  167.577864][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  167.585855][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  167.593846][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.601833][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  167.609850][ T7497]  </TASK>
[  167.612904][ T7497] ---[ end trace 0000000000000000 ]---
[  167.655719][ T7497] ------------[ cut here ]------------
[  167.661228][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  167.671511][ T7497] Modules linked in:
[  167.675431][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  167.684302][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.694375][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  167.700228][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  167.719871][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010012
[  167.725982][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  167.733987][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  167.741982][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  167.749981][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  167.757986][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  167.765988][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  167.774954][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.781565][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  167.789573][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.797601][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.805602][ T7497] Call Trace:
[  167.808903][ T7497]  <TASK>
[  167.811873][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  167.817538][ T7497]  ? __schedule+0xcbb/0x1700
[  167.822194][ T7497]  ? __kasan_check_write+0x14/0x20
[  167.827342][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  167.832066][ T7497]  rb_buffer_peek+0x5f/0x930
[  167.836687][ T7497]  ring_buffer_peek+0x184/0x3b0
[  167.841566][ T7497]  ? __kasan_check_read+0x11/0x20
[  167.846624][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  167.852058][ T7497]  ? _find_next_bit+0x8a/0x130
[  167.856858][ T7497]  __find_next_entry+0x33c/0x6c0
[  167.861845][ T7497]  ? trace_find_next_entry+0x380/0x380
[  167.867348][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  167.873007][ T7497]  ? print_trace_line+0x393/0x6b0
[  167.878061][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  167.883063][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  167.888555][ T7497]  vfs_read+0x286/0x930
[  167.892762][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  167.897471][ T7497]  ? __kasan_check_write+0x14/0x20
[  167.902609][ T7497]  ? mutex_lock+0x93/0x1b0
[  167.907053][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  167.911930][ T7497]  ? __fdget_pos+0x2cd/0x380
[  167.916546][ T7497]  ? ksys_read+0x70/0x260
[  167.920904][ T7497]  ksys_read+0x14a/0x260
[  167.925171][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  167.929965][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  167.935637][ T7497]  __x64_sys_read+0x7b/0x90
[  167.940187][ T7497]  x64_sys_call+0x2f/0x9a0
[  167.944652][ T7497]  do_syscall_64+0x4c/0xa0
[  167.949111][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.953821][ T7497]  ? clear_bhb_loop+0x30/0x80
[  167.958533][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.964458][ T7497] RIP: 0033:0x7fb790f9e159
[  167.968899][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.988540][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  167.997022][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  168.005040][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  168.013048][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  168.021060][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.029094][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  168.037131][ T7497]  </TASK>
[  168.040181][ T7497] ---[ end trace 0000000000000000 ]---
[  168.049863][ T7497] ------------[ cut here ]------------
[  168.055389][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.065676][ T7497] Modules linked in:
[  168.069600][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  168.078484][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.088563][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.094419][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  168.114077][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  168.120196][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  168.128195][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  168.136198][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  168.144202][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  168.152195][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  168.160186][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  168.169138][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.175736][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  168.183729][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  168.191718][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  168.199707][ T7497] Call Trace:
[  168.203000][ T7497]  <TASK>
[  168.205951][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  168.211612][ T7497]  ? __kasan_check_write+0x14/0x20
[  168.216744][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  168.221455][ T7497]  rb_buffer_peek+0x5f/0x930
[  168.226067][ T7497]  ring_buffer_consume+0x1aa/0x370
[  168.231278][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.236954][ T7497]  ? print_trace_line+0x393/0x6b0
[  168.241998][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  168.246961][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.252441][ T7497]  vfs_read+0x286/0x930
[  168.256635][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  168.261333][ T7497]  ? __kasan_check_write+0x14/0x20
[  168.266480][ T7497]  ? mutex_lock+0x93/0x1b0
[  168.270912][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  168.275787][ T7497]  ? __fdget_pos+0x2cd/0x380
[  168.280395][ T7497]  ? ksys_read+0x70/0x260
[  168.284740][ T7497]  ksys_read+0x14a/0x260
[  168.289000][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  168.293785][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  168.299441][ T7497]  __x64_sys_read+0x7b/0x90
[  168.303980][ T7497]  x64_sys_call+0x2f/0x9a0
[  168.308417][ T7497]  do_syscall_64+0x4c/0xa0
[  168.312856][ T7497]  ? clear_bhb_loop+0x30/0x80
[  168.317551][ T7497]  ? clear_bhb_loop+0x30/0x80
[  168.322250][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.328193][ T7497] RIP: 0033:0x7fb790f9e159
[  168.332630][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.352253][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.360696][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  168.368694][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  168.376683][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  168.384693][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.392677][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  168.400674][ T7497]  </TASK>
[  168.403709][ T7497] ---[ end trace 0000000000000000 ]---
[  168.409243][ T7497] ------------[ cut here ]------------
[  168.414708][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.424980][ T7497] Modules linked in:
[  168.428889][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  168.437751][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.447817][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.453642][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  168.473265][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  168.479355][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  168.487357][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  168.495339][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  168.503324][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  168.511318][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  168.519332][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  168.528284][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.534880][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  168.542868][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  168.550850][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  168.558842][ T7497] Call Trace:
[  168.562141][ T7497]  <TASK>
[  168.565107][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  168.570777][ T7497]  rb_advance_reader+0x2b/0x770
[  168.575696][ T7497]  ring_buffer_consume+0x1e7/0x370
[  168.580838][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.586518][ T7497]  ? print_trace_line+0x393/0x6b0
[  168.591574][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  168.596589][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.602102][ T7497]  vfs_read+0x286/0x930
[  168.606292][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  168.610994][ T7497]  ? __kasan_check_write+0x14/0x20
[  168.616134][ T7497]  ? mutex_lock+0x93/0x1b0
[  168.620574][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  168.625448][ T7497]  ? __fdget_pos+0x2cd/0x380
[  168.630073][ T7497]  ? ksys_read+0x70/0x260
[  168.634429][ T7497]  ksys_read+0x14a/0x260
[  168.638690][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  168.643486][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  168.649149][ T7497]  __x64_sys_read+0x7b/0x90
[  168.653677][ T7497]  x64_sys_call+0x2f/0x9a0
[  168.658125][ T7497]  do_syscall_64+0x4c/0xa0
[  168.662574][ T7497]  ? clear_bhb_loop+0x30/0x80
[  168.667272][ T7497]  ? clear_bhb_loop+0x30/0x80
[  168.671975][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.677896][ T7497] RIP: 0033:0x7fb790f9e159
[  168.682329][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.701953][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.710392][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  168.718393][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  168.726388][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  168.734388][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.742375][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  168.750370][ T7497]  </TASK>
[  168.753410][ T7497] ---[ end trace 0000000000000000 ]---
[  168.764851][ T7497] ------------[ cut here ]------------
[  168.770368][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.780669][ T7497] Modules linked in:
[  168.784606][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  168.793491][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.803577][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.809431][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  168.829104][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  168.835215][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  168.843236][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  168.851246][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  168.859260][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  168.867265][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  168.875276][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  168.884245][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.890870][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  168.898894][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  168.906902][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  168.914909][ T7497] Call Trace:
[  168.918217][ T7497]  <TASK>
[  168.921185][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  168.926863][ T7497]  ? __schedule+0xcbb/0x1700
[  168.931503][ T7497]  ? __kasan_check_write+0x14/0x20
[  168.936656][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  168.941424][ T7497]  rb_buffer_peek+0x5f/0x930
[  168.946052][ T7497]  ring_buffer_peek+0x184/0x3b0
[  168.950941][ T7497]  ? __kasan_check_read+0x11/0x20
[  168.956006][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  168.961419][ T7497]  ? _find_next_bit+0x8a/0x130
[  168.966234][ T7497]  __find_next_entry+0x33c/0x6c0
[  168.971221][ T7497]  ? trace_find_next_entry+0x380/0x380
[  168.976730][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.982406][ T7497]  ? print_trace_line+0x393/0x6b0
[  168.987487][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  168.992467][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.997963][ T7497]  vfs_read+0x286/0x930
[  169.002152][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  169.006855][ T7497]  ? __kasan_check_write+0x14/0x20
[  169.011993][ T7497]  ? mutex_lock+0x93/0x1b0
[  169.016433][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  169.021318][ T7497]  ? __fdget_pos+0x2cd/0x380
[  169.025938][ T7497]  ? ksys_read+0x70/0x260
[  169.030297][ T7497]  ksys_read+0x14a/0x260
[  169.034562][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  169.039354][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  169.045019][ T7497]  __x64_sys_read+0x7b/0x90
[  169.049554][ T7497]  x64_sys_call+0x2f/0x9a0
[  169.054023][ T7497]  do_syscall_64+0x4c/0xa0
[  169.058480][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.063187][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.067893][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.073813][ T7497] RIP: 0033:0x7fb790f9e159
[  169.078258][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.097906][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.106369][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  169.114417][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  169.122442][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  169.130454][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.138463][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  169.146480][ T7497]  </TASK>
[  169.149540][ T7497] ---[ end trace 0000000000000000 ]---
[  169.158569][ T7497] ------------[ cut here ]------------
[  169.164070][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  169.174349][ T7497] Modules linked in:
[  169.178268][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  169.187148][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.197315][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  169.203161][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  169.222815][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  169.228923][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  169.236923][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  169.244909][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  169.252900][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  169.260884][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  169.268870][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  169.277811][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.284410][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  169.292399][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.300379][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.308365][ T7497] Call Trace:
[  169.311653][ T7497]  <TASK>
[  169.314601][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  169.320260][ T7497]  ? __kasan_check_write+0x14/0x20
[  169.325386][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  169.330096][ T7497]  rb_buffer_peek+0x5f/0x930
[  169.334702][ T7497]  ring_buffer_consume+0x1aa/0x370
[  169.339830][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  169.345481][ T7497]  ? print_trace_line+0x393/0x6b0
[  169.350517][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  169.355481][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  169.360959][ T7497]  vfs_read+0x286/0x930
[  169.365128][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  169.369823][ T7497]  ? __kasan_check_write+0x14/0x20
[  169.374947][ T7497]  ? mutex_lock+0x93/0x1b0
[  169.379383][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  169.384254][ T7497]  ? __fdget_pos+0x2cd/0x380
[  169.388859][ T7497]  ? ksys_read+0x70/0x260
[  169.393206][ T7497]  ksys_read+0x14a/0x260
[  169.397469][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  169.402249][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  169.407902][ T7497]  __x64_sys_read+0x7b/0x90
[  169.412422][ T7497]  x64_sys_call+0x2f/0x9a0
[  169.416856][ T7497]  do_syscall_64+0x4c/0xa0
[  169.421294][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.425985][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.430703][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.436617][ T7497] RIP: 0033:0x7fb790f9e159
[  169.441052][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.460670][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.469104][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  169.477091][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  169.485077][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  169.493068][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.501051][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  169.509042][ T7497]  </TASK>
[  169.512072][ T7497] ---[ end trace 0000000000000000 ]---
[  169.517594][ T7497] ------------[ cut here ]------------
[  169.523055][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  169.533320][ T7497] Modules linked in:
[  169.537228][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  169.546091][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.556157][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  169.561982][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  169.581603][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  169.587690][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  169.595684][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  169.603693][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  169.611681][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  169.619674][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  169.627658][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  169.636605][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.643231][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  169.651229][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.659222][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.667225][ T7497] Call Trace:
[  169.670522][ T7497]  <TASK>
[  169.673476][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  169.679130][ T7497]  rb_advance_reader+0x2b/0x770
[  169.684003][ T7497]  ring_buffer_consume+0x1e7/0x370
[  169.689132][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  169.694782][ T7497]  ? print_trace_line+0x393/0x6b0
[  169.699823][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  169.704799][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  169.710314][ T7497]  vfs_read+0x286/0x930
[  169.714513][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  169.719220][ T7497]  ? __kasan_check_write+0x14/0x20
[  169.724362][ T7497]  ? mutex_lock+0x93/0x1b0
[  169.728804][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  169.733688][ T7497]  ? __fdget_pos+0x2cd/0x380
[  169.738309][ T7497]  ? ksys_read+0x70/0x260
[  169.742661][ T7497]  ksys_read+0x14a/0x260
[  169.746930][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  169.751721][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  169.757384][ T7497]  __x64_sys_read+0x7b/0x90
[  169.761909][ T7497]  x64_sys_call+0x2f/0x9a0
[  169.766353][ T7497]  do_syscall_64+0x4c/0xa0
[  169.770836][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.775545][ T7497]  ? clear_bhb_loop+0x30/0x80
[  169.780252][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.786173][ T7497] RIP: 0033:0x7fb790f9e159
[  169.790617][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.810274][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.818716][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  169.826714][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  169.834719][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  169.842736][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.850776][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  169.858788][ T7497]  </TASK>
[  169.861831][ T7497] ---[ end trace 0000000000000000 ]---
[  169.874436][ T7497] ------------[ cut here ]------------
[  169.879946][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  169.890246][ T7497] Modules linked in:
[  169.894172][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  169.903057][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.913149][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  169.919014][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  169.938662][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  169.944760][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  169.952786][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  169.960781][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  169.968777][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  169.976777][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  169.984778][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  169.993736][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.000344][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  170.008338][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.016358][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.024358][ T7497] Call Trace:
[  170.027660][ T7497]  <TASK>
[  170.030641][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  170.036300][ T7497]  ? __schedule+0xcbb/0x1700
[  170.040921][ T7497]  ? __kasan_check_write+0x14/0x20
[  170.046052][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  170.050751][ T7497]  rb_buffer_peek+0x5f/0x930
[  170.055356][ T7497]  ring_buffer_peek+0x184/0x3b0
[  170.060221][ T7497]  ? __kasan_check_read+0x11/0x20
[  170.065266][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  170.070651][ T7497]  ? _find_next_bit+0x8a/0x130
[  170.075434][ T7497]  __find_next_entry+0x33c/0x6c0
[  170.080404][ T7497]  ? trace_find_next_entry+0x380/0x380
[  170.085883][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  170.091536][ T7497]  ? print_trace_line+0x393/0x6b0
[  170.096602][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  170.101568][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  170.107046][ T7497]  vfs_read+0x286/0x930
[  170.111222][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  170.115914][ T7497]  ? __kasan_check_write+0x14/0x20
[  170.121046][ T7497]  ? mutex_lock+0x93/0x1b0
[  170.125498][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  170.130370][ T7497]  ? __fdget_pos+0x2cd/0x380
[  170.134979][ T7497]  ? ksys_read+0x70/0x260
[  170.139323][ T7497]  ksys_read+0x14a/0x260
[  170.143580][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  170.148380][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  170.154028][ T7497]  __x64_sys_read+0x7b/0x90
[  170.158560][ T7497]  x64_sys_call+0x2f/0x9a0
[  170.162992][ T7497]  do_syscall_64+0x4c/0xa0
[  170.167433][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.172155][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.176873][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.182800][ T7497] RIP: 0033:0x7fb790f9e159
[  170.187238][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.206868][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.215314][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  170.223304][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  170.231292][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  170.239279][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.247262][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  170.255260][ T7497]  </TASK>
[  170.258296][ T7497] ---[ end trace 0000000000000000 ]---
[  170.267176][ T7497] ------------[ cut here ]------------
[  170.272666][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  170.282944][ T7497] Modules linked in:
[  170.286865][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  170.295741][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.305815][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  170.311656][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  170.331286][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  170.337383][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  170.345384][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  170.353377][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  170.361375][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  170.369374][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  170.377374][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  170.386333][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.392947][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  170.400962][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.408957][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.416952][ T7497] Call Trace:
[  170.420281][ T7497]  <TASK>
[  170.423237][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  170.428940][ T7497]  ? __kasan_check_write+0x14/0x20
[  170.434085][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  170.438796][ T7497]  rb_buffer_peek+0x5f/0x930
[  170.443419][ T7497]  ring_buffer_consume+0x1aa/0x370
[  170.448558][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  170.454238][ T7497]  ? print_trace_line+0x393/0x6b0
[  170.459291][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  170.464264][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  170.469752][ T7497]  vfs_read+0x286/0x930
[  170.473936][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  170.478636][ T7497]  ? __kasan_check_write+0x14/0x20
[  170.483781][ T7497]  ? mutex_lock+0x93/0x1b0
[  170.488226][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  170.493119][ T7497]  ? __fdget_pos+0x2cd/0x380
[  170.497736][ T7497]  ? ksys_read+0x70/0x260
[  170.502090][ T7497]  ksys_read+0x14a/0x260
[  170.506360][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  170.511152][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  170.516818][ T7497]  __x64_sys_read+0x7b/0x90
[  170.521379][ T7497]  x64_sys_call+0x2f/0x9a0
[  170.525832][ T7497]  do_syscall_64+0x4c/0xa0
[  170.530289][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.535001][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.539712][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.545653][ T7497] RIP: 0033:0x7fb790f9e159
[  170.550093][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.569756][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.578207][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  170.586205][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  170.594289][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  170.602285][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.610304][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  170.618334][ T7497]  </TASK>
[  170.621375][ T7497] ---[ end trace 0000000000000000 ]---
[  170.626917][ T7497] ------------[ cut here ]------------
[  170.632384][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  170.642663][ T7497] Modules linked in:
[  170.646582][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  170.655459][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.665532][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  170.671379][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  170.691015][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010006
[  170.697116][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  170.705113][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  170.713114][ T7497] RBP: ffffc9000109fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  170.721113][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  170.729111][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  170.737114][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  170.746070][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.752675][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  170.760676][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.768671][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.776668][ T7497] Call Trace:
[  170.779990][ T7497]  <TASK>
[  170.782955][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  170.788627][ T7497]  rb_advance_reader+0x2b/0x770
[  170.793515][ T7497]  ring_buffer_consume+0x1e7/0x370
[  170.798666][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  170.804326][ T7497]  ? print_trace_line+0x393/0x6b0
[  170.809380][ T7497]  tracing_read_pipe+0x5b3/0xaf0
[  170.814356][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  170.819844][ T7497]  vfs_read+0x286/0x930
[  170.824039][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  170.828745][ T7497]  ? __kasan_check_write+0x14/0x20
[  170.833884][ T7497]  ? mutex_lock+0x93/0x1b0
[  170.838351][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  170.843236][ T7497]  ? __fdget_pos+0x2cd/0x380
[  170.847865][ T7497]  ? ksys_read+0x70/0x260
[  170.852317][ T7497]  ksys_read+0x14a/0x260
[  170.856592][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  170.861387][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  170.867057][ T7497]  __x64_sys_read+0x7b/0x90
[  170.871590][ T7497]  x64_sys_call+0x2f/0x9a0
[  170.876040][ T7497]  do_syscall_64+0x4c/0xa0
[  170.880499][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.885212][ T7497]  ? clear_bhb_loop+0x30/0x80
[  170.889923][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.895870][ T7497] RIP: 0033:0x7fb790f9e159
[  170.900311][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.919946][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.928403][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  170.936437][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  170.944439][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  170.952440][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.960458][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  170.968465][ T7497]  </TASK>
[  170.971512][ T7497] ---[ end trace 0000000000000000 ]---
[  170.982382][ T7497] ------------[ cut here ]------------
[  170.987882][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  170.998167][ T7497] Modules linked in:
[  171.002084][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  171.010958][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.021037][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  171.026882][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  171.046542][ T7497] RSP: 0018:ffffc9000109f820 EFLAGS: 00010002
[  171.052645][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  171.060643][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  171.068641][ T7497] RBP: ffffc9000109f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  171.076730][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  171.084744][ T7497] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000002fc
[  171.092746][ T7497] FS:  00007fb791ec86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  171.101703][ T7497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.108316][ T7497] CR2: 000055c96e972338 CR3: 000000013c010000 CR4: 00000000003506b0
[  171.116310][ T7497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  171.124293][ T7497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  171.132287][ T7497] Call Trace:
[  171.135591][ T7497]  <TASK>
[  171.138556][ T7497]  ? ring_buffer_read_page+0x1260/0x1260
[  171.144226][ T7497]  ? __schedule+0xcbb/0x1700
[  171.148867][ T7497]  ? __kasan_check_write+0x14/0x20
[  171.154000][ T7497]  ? _raw_spin_lock+0x94/0xf0
[  171.158725][ T7497]  rb_buffer_peek+0x5f/0x930
[  171.163363][ T7497]  ring_buffer_peek+0x184/0x3b0
[  171.168258][ T7497]  ? __kasan_check_read+0x11/0x20
[  171.173325][ T7497]  ? __cfi_ring_buffer_peek+0x10/0x10
[  171.178717][ T7497]  ? _find_next_bit+0x8a/0x130
[  171.183503][ T7497]  __find_next_entry+0x33c/0x6c0
[  171.188468][ T7497]  ? trace_find_next_entry+0x380/0x380
[  171.193978][ T7497]  ? __cfi_ring_buffer_consume+0x10/0x10
[  171.199652][ T7497]  ? print_trace_line+0x393/0x6b0
[  171.204703][ T7497]  tracing_read_pipe+0x3d2/0xaf0
[  171.209669][ T7497]  ? __cfi_tracing_read_pipe+0x10/0x10
[  171.215160][ T7497]  vfs_read+0x286/0x930
[  171.219338][ T7497]  ? __cfi_vfs_read+0x10/0x10
[  171.224037][ T7497]  ? __kasan_check_write+0x14/0x20
[  171.229165][ T7497]  ? mutex_lock+0x93/0x1b0
[  171.233604][ T7497]  ? __cfi_mutex_lock+0x10/0x10
[  171.238497][ T7497]  ? __fdget_pos+0x2cd/0x380
[  171.243108][ T7497]  ? ksys_read+0x70/0x260
[  171.247455][ T7497]  ksys_read+0x14a/0x260
[  171.251762][ T7497]  ? __cfi_ksys_read+0x10/0x10
[  171.256555][ T7497]  ? fpregs_restore_userregs+0x128/0x260
[  171.262214][ T7497]  __x64_sys_read+0x7b/0x90
[  171.266731][ T7497]  x64_sys_call+0x2f/0x9a0
[  171.271170][ T7497]  do_syscall_64+0x4c/0xa0
[  171.275608][ T7497]  ? clear_bhb_loop+0x30/0x80
[  171.280300][ T7497]  ? clear_bhb_loop+0x30/0x80
[  171.285001][ T7497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.291496][ T7497] RIP: 0033:0x7fb790f9e159
[  171.295933][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.315561][ T7497] RSP: 002b:00007fb791ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  171.324010][ T7497] RAX: ffffffffffffffda RBX: 00007fb791225fa0 RCX: 00007fb790f9e159
[  171.332145][ T7497] RDX: 0000000000002000 RSI: 0000200000004000 RDI: 0000000000000003
[  171.340151][ T7497] RBP: 00007fb79103506b R08: 0000000000000000 R09: 0000000000000000
[  171.348141][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.356153][ T7497] R13: 00007fb791226038 R14: 00007fb791225fa0 R15: 00007ffe4a9c9258
[  171.364154][ T7497]  </TASK>
[  171.367187][ T7497] ---[ end trace 0000000000000000 ]---
[  171.377374][ T7497] ------------[ cut here ]------------
[  171.382900][ T7497] WARNING: CPU: 0 PID: 7497 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  171.393364][ T7497] Modules linked in:
[  171.397302][ T7497] CPU: 0 PID: 7497 Comm: syz.7.3129 Tainted: G    B   W          syzkaller #0
[  171.406178][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.416256][ T7497] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  171.422220][ T7497] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 7f 2c 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 0a 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 23 a1 fd ff e9 13 fe
[  171.441863][ T7497] RSP: 0018:ffffc9000109f940 EFLAGS: 00010002
[  171.447969][ T7497] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173c8e6
[  171.455969][ T7497] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  171.463973][ T7497] RBP: ffffc9000109fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  171.471974][ T7497] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000