last executing test programs:

34.149857685s ago: executing program 32 (id=113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x15, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc08ddef3f2ddf33c9", 0x0, 0x20db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)

34.113335269s ago: executing program 33 (id=115):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x401, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f00000004c0)="a9", &(0x7f0000000500)=""/31}, 0x20)

31.81396343s ago: executing program 34 (id=164):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x80)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

29.477436934s ago: executing program 3 (id=202):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f00000004c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_gettime(0x6, &(0x7f0000000740))

28.908632271s ago: executing program 3 (id=210):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000005fc0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msync(&(0x7f0000303000/0x4000)=nil, 0x4000, 0x4)

28.610562951s ago: executing program 3 (id=221):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x20000, 0x180)
io_setup(0x3, &(0x7f0000000280)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

28.498389612s ago: executing program 3 (id=224):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="e28d", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d80)="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", 0x2af}], 0x1}}], 0x3, 0x2400c862)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="b0", 0x306}], 0x1)

28.462270986s ago: executing program 3 (id=226):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

28.405344901s ago: executing program 3 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000004800)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000004840)='./trace\x00', &(0x7f0000004880)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000048c0)='./trace/set_event\x00', 0x2, 0x0)
write(r0, &(0x7f0000004900)='!*:', 0x3)

17.690884286s ago: executing program 4 (id=441):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3f, r0, &(0x7f0000000500)={0xa0000000})

17.563437359s ago: executing program 4 (id=444):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

17.45250652s ago: executing program 4 (id=448):
unshare(0x20040400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0)

17.371598288s ago: executing program 4 (id=450):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000018c0)={[{@utf8}, {@errors_continue}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@keep_last_dots}, {@namecase}, {@namecase}, {@keep_last_dots}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000001980)="$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")
mount$fuse(0x0, &(0x7f000000bf00)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000106c0)='./file0\x00', &(0x7f0000010700), 0x1000000, &(0x7f0000010740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})

17.216189443s ago: executing program 4 (id=454):
r0 = syz_open_dev$usbfs(&(0x7f0000019400), 0x204, 0x2)
mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r0, 0xb2755000)
remap_file_pages(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x0, 0x4034, 0x10000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000019640)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000019680)={0x40, 0x6, 0xd}, 0x8, 0x4, 0x107f, 0x0, 0x1, 0x101, 0x0})

17.198549085s ago: executing program 4 (id=456):
unshare(0x64000600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0)
r1 = dup(r0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0xc004ae0a, 0x0)

17.133142782s ago: executing program 35 (id=456):
unshare(0x64000600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0)
r1 = dup(r0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0xc004ae0a, 0x0)

12.646451682s ago: executing program 36 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000004800)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000004840)='./trace\x00', &(0x7f0000004880)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000048c0)='./trace/set_event\x00', 0x2, 0x0)
write(r0, &(0x7f0000004900)='!*:', 0x3)

9.821624055s ago: executing program 5 (id=580):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc)

9.77324265s ago: executing program 5 (id=584):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]})

9.645359893s ago: executing program 5 (id=593):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3017d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sigaltstack(0x0, 0x0)

9.179601109s ago: executing program 5 (id=607):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x401e, &(0x7f0000000100)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000ae80)='./file0\x00', 0x1817c1, 0x0)
writev(r0, &(0x7f0000005840)=[{&(0x7f0000005880)="00ec49ca1de4d50ea5053729f75f506ef07c7f9f9b78cd818cce8888e6b9a325b4d4c6d051aabe9dbe4899a031a887ca6ddbda4a727d4d7da4de523236135a84ab8a185ef83d7085b9b9fd885f3acac6471633e42b3e341e5dc508473cc24d73373be981866684f60d2167416f", 0x6d}, {&(0x7f00000057c0)="160937", 0x3}], 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x143082, 0x80)

8.667898831s ago: executing program 6 (id=617):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000900)='./file1\x00', 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105ea, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000011740)='./file1\x00', 0x80342, 0xcc)
pwrite64(r0, &(0x7f0000011780)='2', 0xfdef, 0xfecc)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000117c0)={0x0, 0xfffe, 0x1})

8.560369231s ago: executing program 5 (id=619):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000140)={[{@dmask={'dmask', 0x3d, 0x2263}}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@keep_last_dots}, {@discard}, {@errors_remount}, {}]}, 0x1, 0x1533, &(0x7f0000000200)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")
r0 = open(&(0x7f0000003080)='.\x00', 0x80000, 0x1a1)
getdents(r0, &(0x7f00000030c0)=""/184, 0xb8)

8.27762771s ago: executing program 5 (id=621):
ptrace(0x10, 0x1)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)

7.808372567s ago: executing program 6 (id=626):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
getrandom(0x0, 0x0, 0x1)

6.536567965s ago: executing program 6 (id=639):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x9}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

6.511550037s ago: executing program 6 (id=633):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x14a0, &(0x7f0000000a00)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x15)

6.340326904s ago: executing program 6 (id=634):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x6)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x116, 0x8}], 0x10}}], 0x1, 0x80)

6.160375922s ago: executing program 6 (id=636):
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000002380)=0xc)
syz_mount_image$exfat(&(0x7f00000023c0), &(0x7f0000002400)='./file1\x00', 0x2000084c, &(0x7f0000002440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='.\x02\x00', 0x800040, 0x0, 0x1, 0x0, 0x0)

6.080084171s ago: executing program 37 (id=636):
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000002380)=0xc)
syz_mount_image$exfat(&(0x7f00000023c0), &(0x7f0000002400)='./file1\x00', 0x2000084c, &(0x7f0000002440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000002540)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='.\x02\x00', 0x800040, 0x0, 0x1, 0x0, 0x0)

4.626010176s ago: executing program 2 (id=663):
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

4.145795254s ago: executing program 2 (id=668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0)

4.004876299s ago: executing program 2 (id=673):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4812, 0x1, 0x83}}], 0x68})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.849506714s ago: executing program 2 (id=676):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x14a0, &(0x7f0000000a00)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x15)

3.749453154s ago: executing program 2 (id=677):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858", @ANYBLOB="13381f1a42a7d4b39f5fbeb72d8e2fcc845965ecf02f1aebc7b164ba1f2bcedc5e1d48c53c3dff65a89b1d5b891f654b24b4e69a7f31cca9e32e3c9b435bea8bd0ff2eddce2ccff8c5f02635d1a4df4a7f233101d247d239229e196e2b4b1c2f2185e4c0336c905fb1e4bde135cac8278f0c836c9068257293552611484d5aecdcd6f744bebf81fbfca81fc9dbf1a8bb5f863d5466ef1d4466e153feb9d722167bc090abb9635b1ef2e34e5cd7dd5d95b07bf24d2ae8f3d0b2576a06e0ffd94ba28af029f8f151fd261269359b0712431724c4b90aa95fa5e10ce69b460f281922f30900750cb41ce1521c4aa3da82368c9504", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16], 0x1, 0x5507, &(0x7f0000000500)="$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")
unshare(0x6020400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005e40)='cpu.stat\x00', 0x275a, 0x0)
fstat(r0, &(0x7f0000005e80))

3.616452327s ago: executing program 2 (id=681):
setuid(0xee00)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3.577774302s ago: executing program 38 (id=681):
setuid(0xee00)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.185049281s ago: executing program 0 (id=696):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000b40)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001080)={0x5, 0x5, 0xfff, 0x8, 0x6, 0x4, 0x1, 0xfffffffffffffff9, 0x835f1})
syz_mount_image$vfat(&(0x7f0000001100), &(0x7f0000001140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000011c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)

2.029930467s ago: executing program 0 (id=699):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f00000005c0)=0x6)
connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10)
shutdown(r0, 0x1)

1.99453063s ago: executing program 9 (id=700):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8)
writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='1', 0x1}], 0x1)

1.948555395s ago: executing program 0 (id=701):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x7, 0xfff, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x67, 0x0, 0x10, 0x0, 0x0, @rand_addr=0x64010106, @rand_addr=0x64010100}}}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x2000c884)

1.918596518s ago: executing program 9 (id=704):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
io_setup(0x2, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0x8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}])

1.905542469s ago: executing program 0 (id=705):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000400)="$eJzs3M2PE+UfAPDvTLfw2x/grogvvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQz7czSlrbslnaL9vNJBp5n5pk+z7czT/vMPJ0NYGRNZf8kEdsj4veImKhnmwtM1f+7fvX8wo2r5xeSqFbf/iuplbt29fxCUbTYb1uemU4j0s+S2Num3pWz507OVypLZ/L87OqpD2ZXzp577sSp+eNLx5dOHzxy5PChuRdfOPh8X+LM2nRtz8fL+3a/8d5Xbx79oin+ljj6ZKrbxier1T5XN1w7GtLJ2BAbwoaUIiI7XOVa/5+IUtw8eBPx+qdDbRwwUNVqtbqt8+YLVeA/LInmvC4Po6L4os+uf4uldRDw8uCGH0N35ZX6BVAW9/V8qW8ZizQvU265vu2nqYh498Lf32RLDOY+BABAkx+y8c+z7cZ/aTzQUO6efG5oMiLujYidEXFfROyKiPsjamUfjIiHNlh/6yTJreOf9HJPga1TNv57KZ/bah7/FaO/mCzluR21+MvJsROVpQP5ezId5a1Zfq5LHT++9tuXnbY1jv+yJau/GAvm7bg8trV5n8X51fk7ibnRlYsRe8baxZ+szQQkEbE7Ivb0WMeJp7/b12nb7ePvog/zTNVvI56qH/8L0RJ/Iek+Pzn7v6gsHZgtzopb/fLrpbc61X9H8fdBdvz/3/b8X4t/Mmmcr13ZeB2X/vi84zVNr+f/luSdWnpLvu6j+dXVM3MRW5Kj9UY3rj94c98iX5TP4p/e377/74yb78TeiMhO4ocj4pGIeDRv+2MR8XhE7O8S/8+vPvF+7/EPVhb/4oaO/1piPKJlTYdE6eRP3zdVOnlL/De6H//DtdR0vmY9n3/raVdvZzMAAAD8+6QRsT2SdGYtnaYzM/Xfy++KSCvLK6vPHFv+8PRi/RmBySinxZ2uiYb7oXP5ZX09fzEi6j8tKLYfyu8bf10ar+VnFpYri8MOHkbcttosRl1j/8/8WRpeu4BN4nktGF36P4wu/R9Gl/4Po6tN/x8fRjuAzZf1/9Y/s/XJkNoCbK6W73/TfjBCXP/D6NL/YXTp/zCSVsbj9g/Jd00Ur9Tj7ndTotrPF4zysMMZbCLSu6IZEgNKDPdzCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF/+CQAA///E5ODv")
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x14a0, &(0x7f0000000a00)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x15)

1.807088659s ago: executing program 9 (id=706):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62000000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0)

1.771703053s ago: executing program 0 (id=707):
syz_mount_image$fuse(0x0, &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002c80), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000003280), 0x0, &(0x7f0000004880)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setuid(0xee01)
syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000006900)={&(0x7f00000069c0)={0x50, 0x0, 0x6, {0x7, 0x28, 0x0, 0x8010, 0x2, 0x0, 0x1, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.619862378s ago: executing program 0 (id=708):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
shutdown(r0, 0x2)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

1.565417433s ago: executing program 39 (id=708):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
shutdown(r0, 0x2)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

1.563066693s ago: executing program 9 (id=710):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x16f0d8, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x1c8, 0x159, 0x1, 0x0, 0x84000, 0x0, 0x0, @by_dev={r1}, [@striped={0x0, 0x2058, 0x0, 0x0, 'striped\x00', {0x0, 0x20, '64', [{0x20, {@ram_num={'1:', 0x1}, 0x20, '1024'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '8191'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}}]}}]})

1.502756959s ago: executing program 9 (id=711):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000b40)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001080)={0x5, 0x5, 0xfff, 0x8, 0x6, 0x4, 0x1, 0xfffffffffffffff9, 0x835f1})
syz_mount_image$vfat(&(0x7f0000001100), &(0x7f0000001140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000011c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)

1.344928935s ago: executing program 9 (id=712):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})

1.127539547s ago: executing program 7 (id=715):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000980)={0x0, 0xfffffff5, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a2", 0xfffffdef}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000540)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

539.381106ms ago: executing program 8 (id=723):
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)

507.275029ms ago: executing program 8 (id=726):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000014})

475.913382ms ago: executing program 8 (id=728):
r0 = syz_io_uring_setup(0xd02, &(0x7f0000000080)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021)
io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x3f)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000280)=[0x9ba2, 0x4e1], 0x2)

357.811414ms ago: executing program 8 (id=730):
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x30000014})
write(r1, &(0x7f0000000480), 0x11000)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

280.579542ms ago: executing program 7 (id=731):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(r0)
close(0x4)

262.143834ms ago: executing program 1 (id=732):
gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0)

253.992485ms ago: executing program 7 (id=733):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b40)={'macsec0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004b80)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)

221.145498ms ago: executing program 8 (id=734):
capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x200000, 0x200000, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x101042, 0x5)
ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000280)=0xfffff34d)

200.11674ms ago: executing program 8 (id=735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000180), 0x12)
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f0100000000000000000004241305052401020804241300"], 0x0)

169.353343ms ago: executing program 7 (id=736):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[], 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1000000000000058, 0x0, [{0x40000099, 0x0, 0x3}]})

115.910569ms ago: executing program 1 (id=737):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x350, 0x10000)
ptrace$pokeuser(0x6, r0, 0x388, 0x5)

93.911561ms ago: executing program 1 (id=738):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x33, &(0x7f0000000040)={0x7, 0x0, 0x123})
rt_sigprocmask(0x2, &(0x7f0000000d40)={[0x4]}, &(0x7f0000000d80), 0x8)

77.868252ms ago: executing program 1 (id=739):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0xb, 0x6, "b000b4", 0x0, 0xff, 0x1, @empty, @empty}}}}}, 0x0)

64.220004ms ago: executing program 1 (id=740):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180))
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

44.934306ms ago: executing program 1 (id=741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/30, 0x1e}], 0x3e8, 0x6bbf, 0x7c)

547.57µs ago: executing program 7 (id=751):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180))
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

0s ago: executing program 7 (id=752):
prlimit64(0x0, 0xc, &(0x7f0000005480)={0xa, 0x7}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f0000005c80)=""/16384, 0x4000)

kernel console output (not intermixed with test programs):

 veth0_macvtap: link becomes ready
[   25.887846][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.895328][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.902983][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.910472][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.924523][  T287] device veth1_macvtap entered promiscuous mode
[   25.945881][  T286] device veth1_macvtap entered promiscuous mode
[   25.957929][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.966361][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.974786][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.982426][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.990076][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.997976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.006375][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.014800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.022695][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.031602][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.040071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.050573][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   26.058800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.066712][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   26.075025][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.085507][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.094025][  T289] device veth0_vlan entered promiscuous mode
[   26.110755][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.119070][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.127622][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.135836][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.144646][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.153135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.174072][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.186723][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.195855][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.216702][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.226000][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.234155][  T286] request_module fs-gadgetfs succeeded, but still no fs?
[   26.244228][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.255237][  T289] device veth1_macvtap entered promiscuous mode
[   26.264784][  T288] device veth0_vlan entered promiscuous mode
[   26.273080][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.281857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.290518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.298544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.307264][  T290] device veth0_vlan entered promiscuous mode
[   26.325972][  T309] loop1: detected capacity change from 0 to 512
[   26.333020][  T309] =======================================================
[   26.333020][  T309] WARNING: The mand mount option has been deprecated and
[   26.333020][  T309]          and is ignored by this kernel. Remove the mand
[   26.333020][  T309]          option from the mount to silence this warning.
[   26.333020][  T309] =======================================================
[   26.371255][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.379597][  T309] EXT4-fs: Ignoring removed oldalloc option
[   26.382570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.394199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.398126][  T309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.405151][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.422922][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.432838][  T288] device veth1_macvtap entered promiscuous mode
[   26.454088][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.468380][  T309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   26.483338][  T290] device veth1_macvtap entered promiscuous mode
[   26.489899][  T309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   26.510560][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.522778][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.530772][  T309] EXT4-fs (loop1): 1 orphan inode deleted
[   26.536648][  T309] EXT4-fs (loop1): 1 truncate cleaned up
[   26.544060][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.546965][  T309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   26.555354][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.572326][  T321] device ip6gretap0 entered promiscuous mode
[   26.584644][  T309] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.2: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[   26.603742][  T309] EXT4-fs (loop1): Remounting filesystem read-only
[   26.612501][  T309] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.2: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[   26.633763][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.646881][  T309] EXT4-fs (loop1): Remounting filesystem read-only
[   26.654229][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.666330][  T328] syz.2.9[328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   26.666408][  T328] syz.2.9[328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   26.682628][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.702729][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.705017][  T287] EXT4-fs (loop1): unmounting filesystem.
[   26.780695][  T343] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.788963][  T340] loop1: detected capacity change from 0 to 256
[   26.822340][  T340] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   26.902854][  T354] MTRR 1 not used
[   26.927142][  T357] loop2: detected capacity change from 0 to 512
[   26.989471][  T357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   27.007146][  T357] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.025965][  T373] netlink: 'syz.4.26': attribute type 3 has an invalid length.
[   27.043329][  T370] loop1: detected capacity change from 0 to 4096
[   27.070717][  T370] EXT4-fs: Ignoring removed orlov option
[   27.076501][  T370] EXT4-fs: Ignoring removed orlov option
[   27.110262][  T380] netlink: 104 bytes leftover after parsing attributes in process `syz.0.29'.
[   27.149268][  T370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   27.195647][  T287] EXT4-fs (loop1): unmounting filesystem.
[   27.274478][  T388] MTRR 1 not used
[   27.586877][   T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   27.605611][  T405] loop1: detected capacity change from 0 to 40427
[   27.631273][  T405] F2FS-fs (loop1): fault_injection options not supported
[   27.646306][  T405] F2FS-fs (loop1): fault_type options not supported
[   27.657532][  T405] F2FS-fs (loop1): invalid crc value
[   27.672247][  T405] F2FS-fs (loop1): Found nat_bits in checkpoint
[   27.746984][  T405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   27.777924][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.800249][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.836118][   T19] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[   27.850078][   T28] kauditd_printk_skb: 68 callbacks suppressed
[   27.850092][   T28] audit: type=1400 audit(1794327106.924:142): avc:  denied  { create } for  pid=404 comm="syz.1.41" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   27.865294][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.894391][   T19] usb 5-1: config 0 descriptor??
[   27.910923][   T28] audit: type=1400 audit(1794327106.954:143): avc:  denied  { write } for  pid=404 comm="syz.1.41" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   27.933537][  T287] syz-executor: attempt to access beyond end of device
[   27.933537][  T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   27.963451][   T28] audit: type=1400 audit(1794327106.984:144): avc:  denied  { name_bind } for  pid=424 comm="syz.3.47" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   28.026851][   T28] audit: type=1400 audit(1794327106.984:145): avc:  denied  { node_bind } for  pid=424 comm="syz.3.47" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   28.060757][   T43] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   28.077175][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[   28.090995][   T43] EXT4-fs (loop2): This should not happen!! Data will be lost
[   28.090995][   T43] 
[   28.100724][   T43] EXT4-fs (loop2): Total free blocks count 0
[   28.109184][   T43] EXT4-fs (loop2): Free/Dirty block details
[   28.116757][   T43] EXT4-fs (loop2): free_blocks=65280
[   28.122248][   T43] EXT4-fs (loop2): dirty_blocks=18144
[   28.127751][   T43] EXT4-fs (loop2): Block reservation details
[   28.133759][   T43] EXT4-fs (loop2): i_reserved_data_blocks=18144
[   28.172133][  T440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'.
[   28.184401][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28
[   28.198213][  T440] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.216758][  T440] device bridge_slave_1 left promiscuous mode
[   28.233168][  T440] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.298993][   T28] audit: type=1400 audit(1794327107.374:146): avc:  denied  { read write } for  pid=449 comm="syz.1.59" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   28.317459][  T395] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET)
[   28.326303][  T450] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   28.355235][   T19] logitech 0003:046D:CA03.0001: unknown main item tag 0x2
[   28.369989][   T19] logitech 0003:046D:CA03.0001: report_id 3184257015 is invalid
[   28.386184][   T28] audit: type=1400 audit(1794327107.374:147): avc:  denied  { open } for  pid=449 comm="syz.1.59" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   28.410896][   T19] logitech 0003:046D:CA03.0001: item 0 4 1 8 parsing failed
[   28.425176][   T19] logitech 0003:046D:CA03.0001: parse failed
[   28.431586][   T19] logitech: probe of 0003:046D:CA03.0001 failed with error -22
[   28.439396][   T28] audit: type=1400 audit(1794327107.404:148): avc:  denied  { create } for  pid=394 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   28.465672][   T28] audit: type=1400 audit(1794327107.464:149): avc:  denied  { unlink } for  pid=455 comm="syz.1.61" name="#1" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   28.504499][   T28] audit: type=1400 audit(1794327107.544:150): avc:  denied  { mount } for  pid=458 comm="syz.1.63" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   28.526943][   T28] audit: type=1400 audit(1794327107.574:151): avc:  denied  { search } for  pid=458 comm="syz.1.63" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   28.582580][  T314] usb 5-1: USB disconnect, device number 2
[   28.721367][  T484] loop3: detected capacity change from 0 to 16
[   28.747114][  T484] erofs: (device loop3): mounted with root inode @ nid 36.
[   28.937261][  T502] loop3: detected capacity change from 0 to 256
[   29.165259][  T512] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure
[   29.495603][  T544] loop0: detected capacity change from 0 to 512
[   29.524256][  T544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   29.544666][  T544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   29.554307][  T544] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   29.581735][  T288] EXT4-fs (loop0): unmounting filesystem.
[   29.713046][  T566] loop2: detected capacity change from 0 to 128
[   29.727648][  T568] loop0: detected capacity change from 0 to 256
[   29.749528][  T568] exfat: Deprecated parameter 'utf8'
[   29.767548][  T568] exfat: Deprecated parameter 'namecase'
[   29.775955][  T289] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000)
[   29.787649][  T568] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   29.794310][  T289] FAT-fs (loop2): Filesystem has been set read-only
[   29.822234][  T289] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   29.831810][  T289] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   30.130491][  T574] mmap: syz.1.112 (574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   30.161299][  T587] erofs: (device loop4): mounted with root inode @ nid 36.
[   30.250385][  T598] syz.1.125 (598) used greatest stack depth: 22176 bytes left
[   30.293341][  T589] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.312641][   T43] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[   30.326623][  T589] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.334642][  T589] device bridge_slave_0 entered promiscuous mode
[   30.345103][  T589] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.352320][  T589] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.359990][  T589] device bridge_slave_1 entered promiscuous mode
[   30.448740][  T591] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.470575][  T591] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.485894][  T591] device bridge_slave_0 entered promiscuous mode
[   30.501287][    T8] device bridge_slave_1 left promiscuous mode
[   30.507920][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.531112][  T605] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[   30.539562][  T605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   30.540188][    T8] device bridge_slave_0 left promiscuous mode
[   30.554119][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.559875][  T605] F2FS-fs (loop4): invalid crc value
[   30.568531][  T605] F2FS-fs (loop4): Found nat_bits in checkpoint
[   30.597091][    T8] device veth1_macvtap left promiscuous mode
[   30.603172][    T8] device veth0_vlan left promiscuous mode
[   30.627097][  T605] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   30.634462][  T605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   30.634806][  T624] exfat: Deprecated parameter 'namecase'
[   30.650096][  T624] exfat: Deprecated parameter 'namecase'
[   30.658681][  T624] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   30.678915][  T624] exFAT-fs (loop1): invalid start cluster (4278190088)
[   30.731882][  T605] syz.4.128: attempt to access beyond end of device
[   30.731882][  T605] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   30.756910][  T290] syz-executor: attempt to access beyond end of device
[   30.756910][  T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   30.811636][  T591] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.819223][  T591] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.827531][  T591] device bridge_slave_1 entered promiscuous mode
[   30.871841][  T632] erofs: (device loop4): mounted with root inode @ nid 36.
[   30.881774][  T632] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   30.972933][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.980688][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.997893][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.006241][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.014568][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.021626][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.029210][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.037767][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.045998][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.053099][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.060772][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   31.073616][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   31.081757][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.096201][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   31.104398][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.127655][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.136380][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.147617][  T589] device veth0_vlan entered promiscuous mode
[   31.157885][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.165921][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.179441][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.187120][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.194592][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   31.202370][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.210878][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.219468][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.227918][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.234997][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.242670][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   31.264580][  T589] device veth1_macvtap entered promiscuous mode
[   31.271849][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.281623][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.291607][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.298692][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.306370][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.347604][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.356096][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.366083][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.374961][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.383818][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.392241][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.400986][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.422383][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.430576][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.438788][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.447628][  T591] device veth0_vlan entered promiscuous mode
[   31.472158][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.484557][  T591] device veth1_macvtap entered promiscuous mode
[   31.501769][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.511170][  T646] process 'syz.5.140' launched '/dev/fd/3' with NULL argv: empty string added
[   31.520541][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.531155][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.547273][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.615877][  T660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'.
[   31.788652][  T684] set_capacity_and_notify: 4 callbacks suppressed
[   31.788670][  T684] loop1: detected capacity change from 0 to 256
[   31.814813][  T684] exfat: Deprecated parameter 'utf8'
[   31.829653][  T684] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   31.874587][    T8] device bridge_slave_0 left promiscuous mode
[   31.884523][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.918000][    T8] device veth1_macvtap left promiscuous mode
[   31.924081][    T8] device veth0_vlan left promiscuous mode
[   31.976594][  T673] loop4: detected capacity change from 0 to 40427
[   32.015741][  T673] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   32.036855][  T673] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   32.057072][  T673] F2FS-fs (loop4): invalid crc value
[   32.088483][  T673] F2FS-fs (loop4): Found nat_bits in checkpoint
[   32.157040][  T673] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   32.164134][  T673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   32.327917][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   32.359108][  T699] loop5: detected capacity change from 0 to 40427
[   32.375393][  T699] F2FS-fs (loop5): invalid crc value
[   32.396308][  T699] F2FS-fs (loop5): Found nat_bits in checkpoint
[   32.405345][  T706] Zero length message leads to an empty skb
[   32.416170][  T710] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   32.494664][  T699] F2FS-fs (loop5): Start checkpoint disabled!
[   32.505162][  T699] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   32.532183][  T699] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   32.663570][   T43] kworker/u4:2: attempt to access beyond end of device
[   32.663570][   T43] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   32.705240][  T718] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.717031][  T718] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.734724][  T718] device bridge_slave_0 entered promiscuous mode
[   32.745268][  T718] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.776916][  T718] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.784530][  T718] device bridge_slave_1 entered promiscuous mode
[   32.930853][  T718] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.938082][  T718] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.945393][  T718] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.952491][  T718] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.016893][   T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   33.034046][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.051066][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.065066][   T28] kauditd_printk_skb: 82 callbacks suppressed
[   33.065080][   T28] audit: type=1400 audit(1794327112.144:234): avc:  denied  { read append } for  pid=739 comm="syz.3.180" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.094432][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.116068][    T8] device bridge_slave_1 left promiscuous mode
[   33.122502][   T28] audit: type=1400 audit(1794327112.164:235): avc:  denied  { open } for  pid=739 comm="syz.3.180" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.132725][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.180925][   T28] audit: type=1400 audit(1794327112.184:236): avc:  denied  { ioctl } for  pid=739 comm="syz.3.180" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.184435][    T8] device bridge_slave_0 left promiscuous mode
[   33.217878][   T19] usb 5-1: config 0 has no interfaces?
[   33.224900][   T19] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   33.234051][   T28] audit: type=1400 audit(1794327112.244:237): avc:  denied  { bind } for  pid=741 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.245441][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.284813][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.292200][   T19] usb 5-1: Product: syz
[   33.306594][   T19] usb 5-1: Manufacturer: syz
[   33.311792][   T19] usb 5-1: SerialNumber: syz
[   33.329247][    T8] device veth1_macvtap left promiscuous mode
[   33.335314][    T8] device veth0_vlan left promiscuous mode
[   33.343299][   T19] usb 5-1: config 0 descriptor??
[   33.385876][  T715] loop6: detected capacity change from 0 to 131072
[   33.410004][  T715] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[   33.424359][  T715] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   33.448149][  T715] F2FS-fs (loop6): invalid crc value
[   33.475074][  T715] F2FS-fs (loop6): Found nat_bits in checkpoint
[   33.555565][  T291] usb 5-1: USB disconnect, device number 3
[   33.562241][  T715] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   33.575680][  T715] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   33.644620][   T28] audit: type=1400 audit(1794327112.714:238): avc:  denied  { remove_name } for  pid=714 comm="syz.6.171" name="file1" dev="loop6" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.679924][  T715] F2FS-fs (loop6): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[   33.697443][   T28] audit: type=1400 audit(1794327112.744:239): avc:  denied  { unlink } for  pid=714 comm="syz.6.171" name="file1" dev="loop6" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.742906][  T757] F2FS-fs (loop6): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[   33.852710][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.879091][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.907005][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.914100][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.931727][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.950256][  T736] loop5: detected capacity change from 0 to 131072
[   33.962284][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.983519][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.990650][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.999007][  T736] F2FS-fs (loop5): Found nat_bits in checkpoint
[   34.031611][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.043726][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.064991][  T736] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   34.076605][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.096141][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.129202][   T28] audit: type=1400 audit(1794327113.204:240): avc:  denied  { ioctl } for  pid=767 comm="syz.4.190" path="socket:[18557]" dev="sockfs" ino=18557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.169341][  T770] tap0: tun_chr_ioctl cmd 2147767511
[   34.186931][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.187772][   T28] audit: type=1400 audit(1794327113.234:241): avc:  denied  { write } for  pid=767 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.215737][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.235880][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.243832][   T28] audit: type=1400 audit(1794327113.314:242): avc:  denied  { setattr } for  pid=735 comm="syz.5.178" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   34.257351][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.304902][  T718] device veth0_vlan entered promiscuous mode
[   34.311811][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.320395][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.320410][   T28] audit: type=1400 audit(1794327113.394:243): avc:  denied  { name_bind } for  pid=775 comm="syz.3.194" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   34.362845][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.375679][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.403306][  T718] device veth1_macvtap entered promiscuous mode
[   34.426314][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.444968][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.454863][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.476407][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.496306][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.504879][  T291] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.685310][  T781] loop6: detected capacity change from 0 to 40427
[   34.696841][  T291] usb 5-1: Using ep0 maxpacket: 8
[   34.709119][  T291] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   34.720407][  T781] F2FS-fs (loop6): invalid crc value
[   34.734447][  T291] usb 5-1: config 179 has no interface number 0
[   34.741627][  T291] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   34.754651][  T781] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   34.772716][  T291] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   34.794252][  T291] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   34.815925][  T291] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   34.832715][  T781] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   34.840376][  T291] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   34.866858][  T291] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   34.886844][  T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.906726][  T774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   34.980098][  T591] syz-executor: attempt to access beyond end of device
[   34.980098][  T591] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   35.146767][   T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5
[   35.352578][   T19] usb 5-1: USB disconnect, device number 4
[   35.358576][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   35.358608][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   35.397288][   T19] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   35.544217][  T799] loop5: detected capacity change from 0 to 131072
[   35.565783][  T799] F2FS-fs (loop5): Test dummy encryption mode enabled
[   35.577816][  T799] F2FS-fs (loop5): invalid crc value
[   35.583852][  T854] loop7: detected capacity change from 0 to 512
[   35.592925][  T854] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.608191][  T799] F2FS-fs (loop5): Found nat_bits in checkpoint
[   35.649825][  T861] loop6: detected capacity change from 0 to 256
[   35.696130][  T799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   35.696706][  T861] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   35.759065][  T799] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   35.816906][  T799] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   35.829586][  T799] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   35.869655][  T874] loop6: detected capacity change from 0 to 256
[   35.892830][  T799] syz.5.193 (799) used greatest stack depth: 22136 bytes left
[   35.911527][  T874] exfat: Deprecated parameter 'utf8'
[   35.924470][  T874] exfat: Deprecated parameter 'namecase'
[   35.946867][  T874] exfat: Deprecated parameter 'utf8'
[   35.958375][  T874] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   36.457332][  T893] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.464450][  T893] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.872820][  T868] loop7: detected capacity change from 0 to 131072
[   36.874226][  T901] loop6: detected capacity change from 0 to 256
[   36.891652][  T868] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945)
[   36.910654][  T868] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   36.939955][  T868] F2FS-fs (loop7): invalid crc value
[   36.992684][  T868] F2FS-fs (loop7): Found nat_bits in checkpoint
[   37.056388][  T878] loop4: detected capacity change from 0 to 131072
[   37.084674][  T878] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   37.112666][  T878] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   37.131378][  T868] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   37.139740][  T878] F2FS-fs (loop4): invalid crc value
[   37.146428][  T868] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   37.168926][  T878] F2FS-fs (loop4): Found nat_bits in checkpoint
[   37.226422][  T878] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   37.236292][  T878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   37.377391][  T906] loop5: detected capacity change from 0 to 40427
[   37.401465][  T906] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   37.427346][  T906] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   37.456260][  T906] F2FS-fs (loop5): invalid crc value
[   37.476838][   T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   37.497667][  T906] F2FS-fs (loop5): Found nat_bits in checkpoint
[   37.587599][  T906] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   37.594724][  T906] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   37.671138][   T19] usb 7-1: Using ep0 maxpacket: 8
[   37.677530][   T19] usb 7-1: config 2 has an invalid interface number: 254 but max is 1
[   37.685730][   T19] usb 7-1: config 2 has an invalid interface number: 172 but max is 1
[   37.704512][   T19] usb 7-1: config 2 has no interface number 0
[   37.711245][   T19] usb 7-1: config 2 has no interface number 1
[   37.717603][   T19] usb 7-1: config 2 interface 254 has no altsetting 0
[   37.724453][   T19] usb 7-1: config 2 interface 172 has no altsetting 0
[   37.742685][   T19] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice=54.52
[   37.757509][   T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.775688][   T19] usb 7-1: Product: syz
[   37.788176][   T19] usb 7-1: Manufacturer: syz
[   37.792818][   T19] usb 7-1: SerialNumber: syz
[   37.956822][  T291] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   38.022622][   T19] usb 7-1: USB disconnect, device number 2
[   38.038992][  T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.254/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.097737][  T961] netlink: 'syz.5.267': attribute type 2 has an invalid length.
[   38.105706][  T961] netlink: 'syz.5.267': attribute type 3 has an invalid length.
[   38.147900][  T291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.168511][  T291] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   38.185583][  T291] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.207038][  T291] usb 8-1: Product: syz
[   38.211284][  T291] usb 8-1: Manufacturer: syz
[   38.220034][  T291] usb 8-1: SerialNumber: syz
[   38.238702][  T291] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   38.328711][  T971] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[   38.395580][  T977] xt_hashlimit: size too large, truncated to 1048576
[   38.442617][   T28] kauditd_printk_skb: 484 callbacks suppressed
[   38.442632][   T28] audit: type=1400 audit(1794327117.514:728): avc:  denied  { read write } for  pid=934 comm="syz.7.255" name="cdc-wdm0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   38.459698][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.479011][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.484367][  T981] loop5: detected capacity change from 0 to 256
[   38.485965][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.497983][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.504750][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.511382][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.517647][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.524278][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.525042][   T28] audit: type=1400 audit(1794327117.534:729): avc:  denied  { open } for  pid=934 comm="syz.7.255" path="/dev/cdc-wdm0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   38.530814][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.560550][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.567187][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.573827][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.580194][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.582626][  T981] exfat: Deprecated parameter 'utf8'
[   38.586840][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.587119][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.604860][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.611094][   T24] usb 8-1: USB disconnect, device number 2
[   38.611131][    C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   38.623620][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   38.629741][    C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   38.640528][  T981] exfat: Deprecated parameter 'utf8'
[   38.658702][  T981] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   38.679912][  T985] pimreg0: tun_chr_ioctl cmd 1074025677
[   38.699603][  T985] pimreg0: linktype set to 768
[   38.712943][   T28] audit: type=1400 audit(1794327117.784:730): avc:  denied  { read } for  pid=980 comm="syz.5.276" path="/33/bus/file1" dev="loop5" ino=1048722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.881603][ T1000] capability: warning: `syz.6.284' uses 32-bit capabilities (legacy support in use)
[   39.036892][ T1011] SELinux: security_context_str_to_sid (measure) failed with errno=-22
[   39.156709][ T1027] loop6: detected capacity change from 0 to 512
[   39.178839][ T1027] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   39.196585][ T1027] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.296: missing EA_INODE flag
[   39.218817][ T1027] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.296: error while reading EA inode 2 err=-117
[   39.231549][ T1027] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.246551][ T1027] EXT4-fs (loop6): 1 truncate cleaned up
[   39.252293][ T1027] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   39.279042][   T28] audit: type=1400 audit(1794327118.354:731): avc:  denied  { reparent } for  pid=1026 comm="syz.6.296" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   39.351594][  T591] EXT4-fs (loop6): unmounting filesystem.
[   39.410497][ T1048] loop4: detected capacity change from 0 to 128
[   39.578419][   T28] audit: type=1400 audit(1794327118.654:732): avc:  denied  { getopt } for  pid=1049 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.587861][ T1043] loop7: detected capacity change from 0 to 40427
[   39.614828][ T1043] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   39.629105][ T1043] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   39.652183][ T1043] F2FS-fs (loop7): invalid crc value
[   39.670221][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   39.684309][ T1043] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   39.747845][ T1043] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   39.759055][ T1043] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   39.887908][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   39.906043][   T24] usb 7-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[   39.925019][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.944893][   T24] usb-storage 7-1:1.0: USB Mass Storage device detected
[   39.969885][ T1065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.308'.
[   40.095352][ T1077] loop7: detected capacity change from 0 to 512
[   40.120325][ T1077] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.313: inode has both inline data and extents flags
[   40.135397][ T1077] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.313: couldn't read orphan inode 15 (err -117)
[   40.147717][ T1077] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   40.171226][  T718] EXT4-fs (loop7): unmounting filesystem.
[   40.206236][ T1083] loop7: detected capacity change from 0 to 256
[   40.387132][   T28] audit: type=1400 audit(1794327119.464:733): avc:  denied  { getopt } for  pid=1090 comm="syz.7.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   40.668209][   T19] usb 7-1: USB disconnect, device number 3
[   40.797939][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   40.820458][   T28] audit: type=1400 audit(1794327119.894:734): avc:  denied  { bind } for  pid=1126 comm="syz.7.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   41.136831][  T291] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   41.286874][  T298] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   41.319186][  T291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   41.330193][  T291] usb 8-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[   41.339782][  T291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.362345][  T291] usb-storage 8-1:1.0: USB Mass Storage device detected
[   41.478037][  T298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.490596][  T298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.500411][  T298] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   41.509508][  T298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.518276][  T298] usb 6-1: config 0 descriptor??
[   42.072540][  T291] usb 8-1: USB disconnect, device number 3
[   42.108165][ T1150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.344'.
[   42.126715][  T298] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71
[   42.137464][  T298] usb 6-1: USB disconnect, device number 2
[   42.536843][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   42.712142][   T28] audit: type=1400 audit(1794327121.784:735): avc:  denied  { read write } for  pid=1173 comm="syz.5.354" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   42.726969][   T24] usb 7-1: Using ep0 maxpacket: 16
[   42.737181][   T28] audit: type=1400 audit(1794327121.784:736): avc:  denied  { open } for  pid=1173 comm="syz.5.354" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   42.765998][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.797586][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.806862][  T611] Bluetooth: hci0: command 0x1003 tx timeout
[   42.807197][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   42.832554][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   42.865052][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   42.903792][   T24] usb 7-1: SerialNumber: syz
[   42.917062][   T24] usb 7-1: 0:2 : does not exist
[   42.931272][ T1170] set_capacity_and_notify: 1 callbacks suppressed
[   42.931289][ T1170] loop7: detected capacity change from 0 to 131072
[   42.963470][ T1170] F2FS-fs (loop7): Test dummy encryption mode enabled
[   42.997477][ T1170] F2FS-fs (loop7): invalid crc value
[   43.044430][ T1170] F2FS-fs (loop7): Found nat_bits in checkpoint
[   43.074038][   T28] audit: type=1400 audit(1794327122.144:737): avc:  denied  { setopt } for  pid=1192 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   43.149771][ T1170] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   43.241406][ T1170] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   43.368159][   T24] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[   43.397923][   T24] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[   43.426972][   T24] usb 7-1: USB disconnect, device number 4
[   43.620960][   T28] kauditd_printk_skb: 18 callbacks suppressed
[   43.620976][   T28] audit: type=1400 audit(1794327122.694:756): avc:  denied  { mounton } for  pid=1212 comm="syz.5.370" path="/56/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   43.695677][   T28] audit: type=1400 audit(1794327122.764:757): avc:  denied  { search } for  pid=1218 comm="syz.5.373" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   43.776227][ T1229] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   43.798773][ T1233] loop5: detected capacity change from 0 to 128
[   43.819356][ T1233] EXT4-fs: Ignoring removed i_version option
[   43.869548][ T1233] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   43.916394][ T1233] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   44.049398][  T589] EXT4-fs (loop5): unmounting filesystem.
[   44.096619][ T1257] loop5: detected capacity change from 0 to 1024
[   44.138406][ T1257] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   44.177829][  T589] EXT4-fs (loop5): unmounting filesystem.
[   44.249011][   T28] audit: type=1400 audit(1794327123.324:758): avc:  denied  { ioctl } for  pid=1274 comm="syz.5.397" path="socket:[20716]" dev="sockfs" ino=20716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.274850][ T1275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.397'.
[   44.317262][ T1281] netlink: 104 bytes leftover after parsing attributes in process `syz.5.400'.
[   44.357934][ T1286] loop5: detected capacity change from 0 to 512
[   44.383170][ T1286] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.402: invalid indirect mapped block 256 (level 2)
[   44.420971][ T1286] EXT4-fs (loop5): 2 truncates cleaned up
[   44.439155][ T1286] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   44.465661][   T28] audit: type=1400 audit(1794327123.534:759): avc:  denied  { map } for  pid=1285 comm="syz.5.402" path="/66/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.492274][ T1286] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.402: bg 0: block 5: invalid block bitmap
[   44.505563][ T1286] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 1 with error 28
[   44.517915][ T1286] EXT4-fs (loop5): This should not happen!! Data will be lost
[   44.517915][ T1286] 
[   44.527830][ T1286] EXT4-fs (loop5): Total free blocks count 0
[   44.533991][ T1286] EXT4-fs (loop5): Free/Dirty block details
[   44.540110][ T1286] EXT4-fs (loop5): free_blocks=0
[   44.545206][ T1286] EXT4-fs (loop5): dirty_blocks=3
[   44.550454][ T1286] EXT4-fs (loop5): Block reservation details
[   44.556552][ T1286] EXT4-fs (loop5): i_reserved_data_blocks=3
[   44.594936][  T589] EXT4-fs (loop5): unmounting filesystem.
[   44.604777][   T28] audit: type=1400 audit(1794327123.674:760): avc:  denied  { write } for  pid=1295 comm="syz.6.407" name="ip6_mr_vif" dev="proc" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   44.667461][   T28] audit: type=1400 audit(1794327123.744:761): avc:  denied  { write } for  pid=1301 comm="syz.6.409" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   44.697738][   T28] audit: type=1400 audit(1794327123.764:762): avc:  denied  { open } for  pid=1301 comm="syz.6.409" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   44.721431][   T28] audit: type=1400 audit(1794327123.764:763): avc:  denied  { ioctl } for  pid=1301 comm="syz.6.409" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   44.763288][ T1307] loop7: detected capacity change from 0 to 512
[   44.793470][ T1307] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   44.879032][ T1309] xt_hashlimit: size too large, truncated to 1048576
[   44.937662][ T1305] loop6: detected capacity change from 0 to 40427
[   44.964340][ T1305] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   44.987426][ T1305] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   45.017032][ T1305] F2FS-fs (loop6): invalid crc value
[   45.057659][ T1305] F2FS-fs (loop6): Found nat_bits in checkpoint
[   45.097960][   T28] audit: type=1400 audit(1794327124.174:764): avc:  denied  { write } for  pid=1317 comm="syz.4.415" laddr=fe80::502e:78ff:fe2d:1364 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   45.141431][   T28] audit: type=1400 audit(1794327124.194:765): avc:  denied  { read } for  pid=1317 comm="syz.4.415" laddr=fe80::502e:78ff:fe2d:1364 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   45.166839][ T1305] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   45.174010][ T1305] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   45.228600][ T1323] tun0: tun_chr_ioctl cmd 1074025675
[   45.233991][ T1323] tun0: persist disabled
[   45.476821][  T291] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   45.509885][ T1340] loop5: detected capacity change from 0 to 512
[   45.552015][ T1331] loop4: detected capacity change from 0 to 40427
[   45.559475][ T1331] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   45.567639][ T1331] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   45.576616][ T1331] F2FS-fs (loop4): invalid crc value
[   45.582650][ T1340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   45.605092][ T1331] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   45.626426][ T1340] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.667936][  T291] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.684242][  T291] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   45.707833][ T1340] EXT4-fs (loop5): shut down requested (1)
[   45.714090][ T1340] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop5 ino=15
[   45.725509][ T1340] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop5 ino=15
[   45.735440][ T1331] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   45.745515][  T291] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   45.764069][ T1331] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   45.771883][  T291] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.780482][  T291] usb 8-1: Product: syz
[   45.791751][  T291] usb 8-1: Manufacturer: syz
[   45.796732][  T291] usb 8-1: SerialNumber: syz
[   45.798461][  T589] EXT4-fs (loop5): unmounting filesystem.
[   46.021627][   T19] usb 8-1: USB disconnect, device number 4
[   46.042098][ T1371] loop6: detected capacity change from 0 to 1024
[   46.066969][ T1371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   46.088343][ T1373] loop4: detected capacity change from 0 to 512
[   46.102307][ T1373] EXT4-fs: Ignoring removed nobh option
[   46.110806][ T1373] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   46.127361][ T1371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0003]
[   46.138662][ T1373] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.428: attempt to clear invalid blocks 2 len 1
[   46.155968][ T1371] System zones: 0-1, 3-12
[   46.161533][ T1371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   46.184037][ T1373] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   46.227096][ T1373] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.428: invalid indirect mapped block 1819239214 (level 0)
[   46.269239][ T1373] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.428: invalid indirect mapped block 1819239214 (level 1)
[   46.293119][  T591] EXT4-fs (loop6): unmounting filesystem.
[   46.322223][ T1373] EXT4-fs (loop4): 1 truncate cleaned up
[   46.338701][ T1373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   46.367692][ T1373] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.428: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   46.429306][ T1384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   46.440260][  T290] EXT4-fs (loop4): unmounting filesystem.
[   46.466899][ T1384] FAT-fs (loop6): Filesystem has been set read-only
[   46.481931][ T1384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   46.509926][ T1384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   46.531174][ T1387] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   46.564876][ T1394] device ip6gre1 entered promiscuous mode
[   46.593748][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   46.611924][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   46.630212][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   46.643057][ T1400] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x80d498ee, utbl_chksum : 0xe619d30d)
[   46.764082][ T1409] exfat: Deprecated parameter 'utf8'
[   46.775858][ T1409] exfat: Deprecated parameter 'namecase'
[   46.792697][ T1409] exfat: Deprecated parameter 'namecase'
[   46.828840][ T1409] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   46.843287][ T1413] netlink: 104 bytes leftover after parsing attributes in process `syz.7.452'.
[   47.185101][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.192302][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.200080][ T1427] device bridge_slave_0 entered promiscuous mode
[   47.210584][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.217883][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.225838][ T1427] device bridge_slave_1 entered promiscuous mode
[   47.316333][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.323468][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.330804][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.337896][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.348831][    T8] device bridge_slave_1 left promiscuous mode
[   47.355223][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.370768][    T8] device bridge_slave_0 left promiscuous mode
[   47.383526][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.403282][    T8] device veth1_macvtap left promiscuous mode
[   47.415589][    T8] device veth0_vlan left promiscuous mode
[   47.562201][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.570817][  T758] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.597579][  T758] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.619028][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.627961][  T758] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.635032][  T758] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.643037][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.651698][  T758] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.658965][  T758] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.683274][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.691696][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.715998][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.739977][ T1427] device veth0_vlan entered promiscuous mode
[   47.748249][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.756654][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.776652][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.791804][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.808605][ T1427] device veth1_macvtap entered promiscuous mode
[   47.828430][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.842461][  T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.887374][   T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   47.964926][ T1456] set_capacity_and_notify: 3 callbacks suppressed
[   47.964947][ T1456] loop7: detected capacity change from 0 to 40427
[   48.001172][ T1456] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[   48.016433][ T1456] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   48.034913][ T1456] F2FS-fs (loop7): Image doesn't support compression
[   48.055035][ T1456] F2FS-fs (loop7): Image doesn't support compression
[   48.065563][ T1456] F2FS-fs (loop7): invalid crc value
[   48.077770][ T1456] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   48.078583][   T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.108100][ T1465] loop6: detected capacity change from 0 to 40427
[   48.123006][ T1465] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[   48.138083][   T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   48.150018][ T1465] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   48.159580][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.168758][ T1465] F2FS-fs (loop6): Image doesn't support compression
[   48.175494][ T1465] F2FS-fs (loop6): Image doesn't support compression
[   48.182348][   T19] usb 6-1: Product: syz
[   48.186533][   T19] usb 6-1: Manufacturer: syz
[   48.191185][   T19] usb 6-1: SerialNumber: syz
[   48.196378][ T1465] F2FS-fs (loop6): invalid crc value
[   48.211274][ T1456] F2FS-fs (loop7): Start checkpoint disabled!
[   48.213614][   T19] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   48.224040][ T1465] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   48.232598][ T1456] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[   48.267937][ T1465] F2FS-fs (loop6): Start checkpoint disabled!
[   48.274519][ T1465] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   48.282194][ T1456] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   48.282652][ T1465] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   48.296505][ T1465] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   48.299587][ T1456] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[   48.353775][ T1467] loop8: detected capacity change from 0 to 40427
[   48.370148][ T1467] F2FS-fs (loop8): invalid crc value
[   48.385024][ T1467] F2FS-fs (loop8): Found nat_bits in checkpoint
[   48.386690][ T1456] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   48.422033][  T758] kworker/u4:5: attempt to access beyond end of device
[   48.422033][  T758] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   48.446801][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.453455][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.459839][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.466469][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.472751][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.479411][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.485694][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.492323][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.498630][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.505278][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.511565][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.511564][    T8] kworker/u4:0: attempt to access beyond end of device
[   48.511564][    T8] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   48.532106][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.538399][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.545023][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.551277][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.557897][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.564287][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.570920][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.577108][   T19] usb 6-1: USB disconnect, device number 3
[   48.583205][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[   48.583228][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[   48.583246][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   48.677503][ T1467] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   48.775203][ T1481] loop7: detected capacity change from 0 to 512
[   48.793005][ T1481] EXT4-fs: Ignoring removed nobh option
[   48.826570][ T1481] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.481: invalid indirect mapped block 256 (level 2)
[   48.852736][ T1481] EXT4-fs (loop7): 2 truncates cleaned up
[   48.867220][ T1481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   48.928158][   T28] kauditd_printk_skb: 71 callbacks suppressed
[   48.928176][   T28] audit: type=1400 audit(1794327128.004:837): avc:  denied  { read } for  pid=1493 comm="syz.8.486" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   48.957217][   T28] audit: type=1400 audit(1794327128.004:838): avc:  denied  { rename } for  pid=1480 comm="syz.7.481" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   49.297108][  T313] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[   49.318512][  T313] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28
[   49.344027][  T313] EXT4-fs (loop7): This should not happen!! Data will be lost
[   49.344027][  T313] 
[   49.362427][  T313] EXT4-fs (loop7): Total free blocks count 0
[   49.375221][  T313] EXT4-fs (loop7): Free/Dirty block details
[   49.387897][  T313] EXT4-fs (loop7): free_blocks=0
[   49.397976][  T313] EXT4-fs (loop7): dirty_blocks=16003
[   49.408815][  T313] EXT4-fs (loop7): Block reservation details
[   49.421358][  T313] EXT4-fs (loop7): i_reserved_data_blocks=16003
[   50.476774][    C0] sched: RT throttling activated
[   50.502525][ T1481] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 2060 with max blocks 2048 with error 28
[   51.652485][   T28] audit: type=1400 audit(1794327130.714:839): avc:  denied  { bind } for  pid=1513 comm="syz.5.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   51.720151][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.727912][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.735446][ T1512] device bridge_slave_0 entered promiscuous mode
[   51.744415][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.751554][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.759219][ T1512] device bridge_slave_1 entered promiscuous mode
[   51.760681][  T286] syz-executor (286) used greatest stack depth: 21920 bytes left
[   51.851057][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.858169][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.865471][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.872616][ T1512] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.881380][ T1526] loop5: detected capacity change from 0 to 256
[   51.969519][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.977643][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.979716][ T1536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.502'.
[   51.994321][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.012122][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.040531][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.048981][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.056042][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.084427][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.098612][ T1542] loop5: detected capacity change from 0 to 256
[   52.103558][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.111961][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.129871][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.177798][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.195376][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.219478][ T1512] device veth0_vlan entered promiscuous mode
[   52.225926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.257342][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.277141][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.294564][ T1512] device veth1_macvtap entered promiscuous mode
[   52.319742][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.351019][ T1555] loop5: detected capacity change from 0 to 512
[   52.363090][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.384612][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.425199][ T1560] loop8: detected capacity change from 0 to 256
[   52.432625][ T1555] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   52.447297][ T1560] exfat: Deprecated parameter 'namecase'
[   52.463816][ T1560] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x980bb927, utbl_chksum : 0xe619d30d)
[   52.465947][ T1555] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.535910][ T1546] loop6: detected capacity change from 0 to 40427
[   52.545124][ T1555] EXT4-fs (loop5): unmounting filesystem.
[   52.552342][  T313] device bridge_slave_1 left promiscuous mode
[   52.560300][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.584299][ T1546] F2FS-fs (loop6): invalid crc value
[   52.608626][ T1546] F2FS-fs (loop6): Found nat_bits in checkpoint
[   52.615724][  T313] device bridge_slave_0 left promiscuous mode
[   52.637986][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.660058][  T313] device veth1_macvtap left promiscuous mode
[   52.666125][  T313] device veth0_vlan left promiscuous mode
[   52.681176][   T28] audit: type=1400 audit(1794327131.754:840): avc:  denied  { ioctl } for  pid=1586 comm="syz.9.522" path="socket:[22362]" dev="sockfs" ino=22362 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.736457][ T1546] F2FS-fs (loop6): Start checkpoint disabled!
[   52.755934][ T1546] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   52.766881][ T1546] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   52.774192][ T1596] loop5: detected capacity change from 0 to 512
[   52.842776][   T28] audit: type=1400 audit(1794327131.914:841): avc:  denied  { read } for  pid=1545 comm="syz.6.507" path="/88/file0/file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.885943][   T28] audit: type=1400 audit(1794327131.944:842): avc:  denied  { unlink } for  pid=1545 comm="syz.6.507" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.917444][    T8] kworker/u4:0: attempt to access beyond end of device
[   52.917444][    T8] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   53.139393][ T1624] loop7: detected capacity change from 0 to 8192
[   53.164009][ T1624] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.272882][ T1638] loop8: detected capacity change from 0 to 512
[   53.308754][   T28] audit: type=1400 audit(1794327132.384:843): avc:  denied  { bind } for  pid=1639 comm="syz.7.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   53.348538][ T1638] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.541: invalid indirect mapped block 256 (level 2)
[   53.373179][ T1634] loop5: detected capacity change from 0 to 8192
[   53.377444][   T28] audit: type=1400 audit(1794327132.384:844): avc:  denied  { ioctl } for  pid=1639 comm="syz.7.543" path="socket:[22415]" dev="sockfs" ino=22415 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   53.382934][ T1634] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.423952][ T1638] EXT4-fs (loop8): 2 truncates cleaned up
[   53.447047][ T1638] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   53.474098][ T1638] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.541: bg 0: block 5: invalid block bitmap
[   53.497873][ T1638] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 1 with error 28
[   53.523795][ T1638] EXT4-fs (loop8): This should not happen!! Data will be lost
[   53.523795][ T1638] 
[   53.534783][ T1638] EXT4-fs (loop8): Total free blocks count 0
[   53.550169][ T1623] loop6: detected capacity change from 0 to 40427
[   53.553263][ T1638] EXT4-fs (loop8): Free/Dirty block details
[   53.567007][ T1623] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[   53.576669][ T1623] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   53.598131][ T1638] EXT4-fs (loop8): free_blocks=0
[   53.604461][ T1638] EXT4-fs (loop8): dirty_blocks=3
[   53.620132][ T1623] F2FS-fs (loop6): Image doesn't support compression
[   53.628324][ T1657] loop5: detected capacity change from 0 to 256
[   53.629028][ T1638] EXT4-fs (loop8): Block reservation details
[   53.635350][ T1623] F2FS-fs (loop6): Image doesn't support compression
[   53.650079][ T1638] EXT4-fs (loop8): i_reserved_data_blocks=3
[   53.656530][ T1657] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.667596][ T1623] F2FS-fs (loop6): invalid crc value
[   53.684371][ T1623] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   53.696962][ T1427] EXT4-fs (loop8): unmounting filesystem.
[   53.735459][ T1658] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264)
[   53.750915][ T1623] F2FS-fs (loop6): Start checkpoint disabled!
[   53.760354][ T1658] FAT-fs (loop5): Filesystem has been set read-only
[   53.763278][ T1623] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   53.776006][ T1658] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[   53.789922][ T1658] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[   53.798350][ T1623] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   53.811137][ T1623] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   53.843384][ T1669] loop9: detected capacity change from 0 to 512
[   53.883186][   T28] audit: type=1400 audit(1794327132.954:845): avc:  denied  { append } for  pid=1622 comm="syz.6.537" path="/90/file0/file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.914916][   T43] kworker/u4:2: attempt to access beyond end of device
[   53.914916][   T43] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   53.942607][ T1669] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   53.951792][ T1669] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.975138][ T1669] EXT4-fs (loop9): shut down requested (1)
[   53.983341][ T1676] device-mapper: table: 252:1: crypt: Device lookup failed (-ENODEV)
[   53.992102][ T1669] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=15
[   54.001388][ T1676] device-mapper: ioctl: error adding target to table
[   54.008524][ T1669] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=15
[   54.067900][ T1512] EXT4-fs (loop9): unmounting filesystem.
[   54.092362][ T1694] loop6: detected capacity change from 0 to 512
[   54.189402][ T1710] loop6: detected capacity change from 0 to 1024
[   54.224918][ T1710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.241836][   T28] audit: type=1400 audit(1794327133.314:846): avc:  denied  { setopt } for  pid=1719 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   54.274437][ T1710] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   54.322389][ T1736] netlink: 'syz.7.582': attribute type 5 has an invalid length.
[   54.353425][  T591] EXT4-fs (loop6): unmounting filesystem.
[   54.412002][ T1750] loop9: detected capacity change from 0 to 1024
[   54.441333][ T1750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.485692][ T1750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0003]
[   54.517611][ T1750] System zones: 0-1, 3-12
[   54.522539][ T1750] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   54.561183][ T1767] loop6: detected capacity change from 0 to 512
[   54.580116][ T1767] EXT4-fs: Ignoring removed oldalloc option
[   54.600175][ T1767] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   54.621493][ T1767] EXT4-fs (loop6): 1 truncate cleaned up
[   54.627913][ T1748] F2FS-fs (loop7): invalid crc value
[   54.634651][ T1767] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   54.656423][ T1748] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   54.680461][   T28] audit: type=1400 audit(1794327133.754:847): avc:  denied  { bind } for  pid=1774 comm="syz.8.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   54.713231][ T1512] EXT4-fs (loop9): unmounting filesystem.
[   54.723637][  T591] EXT4-fs (loop6): unmounting filesystem.
[   54.732177][   T28] audit: type=1400 audit(1794327133.804:848): avc:  denied  { listen } for  pid=1777 comm="syz.8.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.790502][ T1748] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   54.802883][   T28] audit: type=1400 audit(1794327133.804:849): avc:  denied  { accept } for  pid=1777 comm="syz.8.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.959185][  T718] syz-executor: attempt to access beyond end of device
[   54.959185][  T718] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   55.163879][ T1813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.213600][ T1799] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[   55.231172][ T1813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0003]
[   55.244299][ T1799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   55.265350][ T1813] System zones: 0-1, 3-12
[   55.292295][ T1799] F2FS-fs (loop5): Image doesn't support compression
[   55.299787][ T1813] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   55.323119][ T1799] F2FS-fs (loop5): Image doesn't support compression
[   55.325779][ T1811] F2FS-fs (loop8): invalid crc value
[   55.341297][ T1799] F2FS-fs (loop5): invalid crc value
[   55.351901][ T1799] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   55.380654][ T1811] F2FS-fs (loop8): Found nat_bits in checkpoint
[   55.423952][ T1799] F2FS-fs (loop5): Start checkpoint disabled!
[   55.431304][ T1799] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   55.450242][ T1799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   55.460233][ T1799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   55.486163][ T1811] F2FS-fs (loop8): Start checkpoint disabled!
[   55.499141][  T718] EXT4-fs (loop7): unmounting filesystem.
[   55.505406][ T1811] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[   55.525359][ T1811] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[   55.566932][ T1558] kworker/u4:6: attempt to access beyond end of device
[   55.566932][ T1558] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   55.652836][  T313] kworker/u4:3: attempt to access beyond end of device
[   55.652836][  T313] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   55.772978][ T1830] exfat: Deprecated parameter 'utf8'
[   55.787161][ T1830] exfat: Deprecated parameter 'namecase'
[   55.795570][ T1830] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   55.945689][ T1797] F2FS-fs (loop9): Invalid log sectorsize (0)
[   55.961455][ T1797] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   55.977322][ T1797] F2FS-fs (loop9): invalid crc value
[   55.983906][ T1797] F2FS-fs (loop9): Found nat_bits in checkpoint
[   56.023745][ T1797] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   56.030910][ T1797] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   56.159601][ T1823] F2FS-fs (loop6): Test dummy encryption mode enabled
[   56.176417][ T1823] F2FS-fs (loop6): invalid crc value
[   56.191628][ T1823] F2FS-fs (loop6): Found nat_bits in checkpoint
[   56.198123][  T777] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   56.239771][ T1823] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   56.398532][  T777] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.411532][  T777] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.421526][  T777] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   56.434503][  T777] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   56.443904][  T777] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.456248][  T777] usb 9-1: config 0 descriptor??
[   56.864313][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.871832][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.879308][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.886758][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.894508][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.902030][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.909438][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.916893][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.924326][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.931765][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.939177][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.946552][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.953985][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.961403][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.968855][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.976253][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.983682][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.991091][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   56.998506][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.005904][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.013341][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.020775][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.028237][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.035640][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.043070][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.050510][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.057933][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.065332][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.072774][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.080225][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.087682][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.095097][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.102524][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.109952][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.117388][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.124801][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.132488][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.139941][  T777] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   57.147541][  T777] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   57.156437][  T777] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[   57.174810][  T777] usb 9-1: USB disconnect, device number 2
[   57.192859][ T1857] fido_id[1857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[   57.603348][   T28] audit: type=1400 audit(1794327136.674:850): avc:  denied  { listen } for  pid=1862 comm="syz.9.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   57.631319][ T1866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   57.643181][   T28] audit: type=1400 audit(1794327136.674:851): avc:  denied  { accept } for  pid=1862 comm="syz.9.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   57.665594][ T1869] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   57.685333][ T1866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0003]
[   57.694664][ T1866] System zones: 0-1, 3-12
[   57.699610][ T1869] EXT4-fs (loop6): 1 truncate cleaned up
[   57.706018][ T1866] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   57.714648][ T1869] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   57.729204][   T28] audit: type=1400 audit(1794327136.804:852): avc:  denied  { rename } for  pid=1868 comm="syz.6.633" name="#9" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.782117][   T28] audit: type=1400 audit(1794327136.834:853): avc:  denied  { remount } for  pid=1868 comm="syz.6.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   57.804985][   T28] audit: type=1400 audit(1794327136.834:854): avc:  denied  { read write } for  pid=1868 comm="syz.6.633" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.844778][ T1427] EXT4-fs (loop8): unmounting filesystem.
[   57.851845][   T28] audit: type=1400 audit(1794327136.834:855): avc:  denied  { open } for  pid=1868 comm="syz.6.633" path="/106/bus/file0/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.873496][ T1867] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0)
[   57.883064][ T1867] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   57.891768][  T591] EXT4-fs (loop6): unmounting filesystem.
[   57.901384][ T1867] F2FS-fs (loop7): invalid crc value
[   57.911065][ T1867] F2FS-fs (loop7): Found nat_bits in checkpoint
[   57.966469][ T1867] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   57.976085][ T1867] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   58.049164][ T1867] syz.7.632: attempt to access beyond end of device
[   58.049164][ T1867] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   58.075560][ T1867] syz.7.632: attempt to access beyond end of device
[   58.075560][ T1867] loop7: rw=2049, sector=53272, nr_sectors = 8 limit=40427
[   58.103883][  T718] syz-executor: attempt to access beyond end of device
[   58.103883][  T718] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.144322][ T1884] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   58.256930][ T1887] set_capacity_and_notify: 11 callbacks suppressed
[   58.256949][ T1887] loop8: detected capacity change from 0 to 4096
[   58.292250][ T1887] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   58.301500][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.308894][ T1885] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.324658][ T1885] device bridge_slave_0 entered promiscuous mode
[   58.331894][ T1427] EXT4-fs (loop8): unmounting filesystem.
[   58.333211][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.346991][ T1885] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.354560][ T1885] device bridge_slave_1 entered promiscuous mode
[   58.400222][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.645'.
[   58.449806][   T43] device bridge_slave_1 left promiscuous mode
[   58.456002][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.474720][   T43] device bridge_slave_0 left promiscuous mode
[   58.485414][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.509190][   T43] device veth1_macvtap left promiscuous mode
[   58.515266][   T43] device veth0_vlan left promiscuous mode
[   58.683181][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.690299][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.697631][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.704680][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.716481][ T1916] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[   58.747744][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.755657][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.758395][ T1920] loop9: detected capacity change from 0 to 512
[   58.770784][ T1920] EXT4-fs: Ignoring removed nobh option
[   58.772763][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.790605][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.799061][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.806125][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.820293][ T1922] xt_hashlimit: size too large, truncated to 1048576
[   58.824409][ T1920] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.653: invalid indirect mapped block 256 (level 2)
[   58.841105][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.849431][ T1920] EXT4-fs (loop9): 2 truncates cleaned up
[   58.855600][ T1920] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   58.864986][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.872087][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.897307][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.914230][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.943614][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.956417][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.974546][ T1885] device veth0_vlan entered promiscuous mode
[   58.987118][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.998321][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.020340][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.033354][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.048466][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.064410][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.079770][ T1885] device veth1_macvtap entered promiscuous mode
[   59.094848][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.105880][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.114664][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.140206][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.156143][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.328296][ T1558] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[   59.341297][ T1558] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28
[   59.354234][ T1558] EXT4-fs (loop9): This should not happen!! Data will be lost
[   59.354234][ T1558] 
[   59.363995][ T1558] EXT4-fs (loop9): Total free blocks count 0
[   59.372795][ T1558] EXT4-fs (loop9): Free/Dirty block details
[   59.379548][ T1558] EXT4-fs (loop9): free_blocks=0
[   59.384626][ T1558] EXT4-fs (loop9): dirty_blocks=16015
[   59.390467][ T1558] EXT4-fs (loop9): Block reservation details
[   59.402262][ T1558] EXT4-fs (loop9): i_reserved_data_blocks=16015
[   59.422030][ T1926] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 2060 with max blocks 2048 with error 28
[   59.498919][ T1946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   59.548455][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   59.567063][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.585529][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   59.606300][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.624718][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.633021][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.649021][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.663151][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.667491][   T28] kauditd_printk_skb: 26 callbacks suppressed
[   59.667532][   T28] audit: type=1400 audit(1794327138.734:882): avc:  denied  { bind } for  pid=1949 comm="syz.7.664" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   59.721069][   T28] audit: type=1400 audit(1794327138.774:883): avc:  denied  { name_bind } for  pid=1949 comm="syz.7.664" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   59.777249][   T28] audit: type=1400 audit(1794327138.774:884): avc:  denied  { node_bind } for  pid=1949 comm="syz.7.664" saddr=ff05::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   59.890268][ T1957] loop9: detected capacity change from 0 to 128
[   59.955712][ T1957] syz.9.665: attempt to access beyond end of device
[   59.955712][ T1957] loop9: rw=2049, sector=145, nr_sectors = 6 limit=128
[   59.980503][ T1957] syz.9.665: attempt to access beyond end of device
[   59.980503][ T1957] loop9: rw=2049, sector=150, nr_sectors = 1 limit=128
[   59.993971][ T1957] Buffer I/O error on dev loop9, logical block 150, lost async page write
[   60.079907][ T1967] loop8: detected capacity change from 0 to 2048
[   60.114663][ T1967]  loop8: p1 < > p4
[   60.124190][ T1967] loop8: p4 size 8388608 extends beyond EOD, truncated
[   60.149706][   T28] audit: type=1400 audit(1794327139.224:885): avc:  denied  { map } for  pid=1965 comm="syz.8.671" path="/dev/loop8p1" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   60.238188][   T28] audit: type=1400 audit(1794327139.314:886): avc:  denied  { create } for  pid=1978 comm="syz.9.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   60.286283][ T1982] loop2: detected capacity change from 0 to 512
[   60.292943][   T28] audit: type=1400 audit(1794327139.364:887): avc:  denied  { read } for  pid=1978 comm="syz.9.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   60.313145][ T1982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   60.336718][ T1982] EXT4-fs (loop2): 1 truncate cleaned up
[   60.342664][ T1982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   60.429544][ T1885] EXT4-fs (loop2): unmounting filesystem.
[   60.493005][ T1990] loop8: detected capacity change from 0 to 16
[   60.512800][  T350] udevd[350]: incorrect erofs checksum on /dev/loop8
[   60.513580][ T1990] erofs: (device loop8): erofs_superblock_csum_verify: invalid checksum 0x37c479b1, 0x7bbbea8c expected
[   60.702204][   T28] audit: type=1400 audit(1794327139.774:888): avc:  denied  { write } for  pid=1997 comm="syz.9.685" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   60.758079][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.765257][ T1996] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.773050][ T1996] device bridge_slave_0 entered promiscuous mode
[   60.780457][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.788033][ T1996] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.795638][ T1996] device bridge_slave_1 entered promiscuous mode
[   60.873361][   T28] audit: type=1400 audit(1794327139.944:889): avc:  denied  { set_context_mgr } for  pid=2002 comm="syz.9.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   60.899805][ T2003] binder: 2002:2003 ioctl c0306201 200000000740 returned -22
[   60.911770][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.918861][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.926174][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.933277][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.942562][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.957862][   T28] audit: type=1400 audit(1794327140.034:890): avc:  denied  { map } for  pid=2004 comm="syz.9.687" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   60.982688][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.012441][ T2007] FAULT_INJECTION: forcing a failure.
[   61.012441][ T2007] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   61.025818][ T2007] CPU: 1 PID: 2007 Comm: syz.7.688 Not tainted syzkaller #0
[   61.027877][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.033146][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   61.042088][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.050429][ T2007] Call Trace:
[   61.050438][ T2007]  <TASK>
[   61.050446][ T2007]  __dump_stack+0x21/0x24
[   61.050481][ T2007]  dump_stack_lvl+0x110/0x170
[   61.067866][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.068260][ T2007]  ? __cfi_dump_stack_lvl+0x8/0x8
[   61.074145][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.081016][ T2007]  ? __cfi_futex_wait+0x10/0x10
[   61.081049][ T2007]  dump_stack+0x15/0x24
[   61.086673][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.094048][ T2007]  should_fail_ex+0x3bf/0x510
[   61.094079][ T2007]  should_fail_alloc_page+0x61/0x90
[   61.098955][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.103087][ T2007]  prepare_alloc_pages+0x131/0x570
[   61.112009][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.114792][ T2007]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   61.120968][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.127188][ T2007]  ? vfs_write+0xa51/0xd00
[   61.127219][ T2007]  __alloc_pages+0x15b/0x610
[   61.132974][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.140425][ T2007]  ? __cfi___alloc_pages+0x10/0x10
[   61.140461][ T2007]  ? mutex_unlock+0x8f/0x230
[   61.145652][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.153629][ T2007]  ? __se_sys_futex+0x136/0x310
[   61.153658][ T2007]  ? __this_cpu_preempt_check+0x13/0x20
[   61.177298][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.179947][ T2007]  ? xfd_validate_state+0x70/0x150
[   61.210490][ T2007]  __get_free_pages+0xe/0x30
[   61.215111][ T2007]  __se_sys_mincore+0xdb/0x5b0
[   61.219896][ T2007]  ? fpregs_restore_userregs+0x128/0x260
[   61.225553][ T2007]  __x64_sys_mincore+0x7b/0x90
[   61.230340][ T2007]  x64_sys_call+0x32a/0x9a0
[   61.234864][ T2007]  do_syscall_64+0x4c/0xa0
[   61.239299][ T2007]  ? clear_bhb_loop+0x30/0x80
[   61.244088][ T2007]  ? clear_bhb_loop+0x30/0x80
[   61.248804][ T2007]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   61.254732][ T2007] RIP: 0033:0x7f4a36ba8f19
[   61.259169][ T2007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.278794][ T2007] RSP: 002b:00007f4a37983028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[   61.287245][ T2007] RAX: ffffffffffffffda RBX: 00007f4a36e25fa0 RCX: 00007f4a36ba8f19
[   61.295236][ T2007] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000
[   61.303223][ T2007] RBP: 00007f4a36c37f6d R08: 0000000000000000 R09: 0000000000000000
[   61.311209][ T2007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.319192][ T2007] R13: 00007f4a36e26038 R14: 00007f4a36e25fa0 R15: 00007fff76cd8108
[   61.327180][ T2007]  </TASK>
[   61.331268][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.340163][   T43] device bridge_slave_1 left promiscuous mode
[   61.346916][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.354859][   T43] device bridge_slave_0 left promiscuous mode
[   61.362094][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.370473][   T43] device veth1_macvtap left promiscuous mode
[   61.376576][   T43] device veth0_vlan left promiscuous mode
[   61.406060][ T2009] loop7: detected capacity change from 0 to 512
[   61.415904][ T2009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   61.447190][ T2012] loop8: detected capacity change from 0 to 16
[   61.454412][ T2012] erofs: (device loop8): mounted with root inode @ nid 36.
[   61.462410][ T2009] EXT4-fs (loop7): 1 truncate cleaned up
[   61.477135][ T2009] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   61.566826][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.575330][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.589891][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.598290][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.610078][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.618151][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.626658][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.634260][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.643683][ T1996] device veth0_vlan entered promiscuous mode
[   61.644740][  T718] EXT4-fs (loop7): unmounting filesystem.
[   61.660311][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.669040][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.679294][ T1996] device veth1_macvtap entered promiscuous mode
[   61.698815][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.707011][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.715312][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.729300][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.739301][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.804361][   T28] audit: type=1400 audit(1794327140.874:891): avc:  denied  { setopt } for  pid=2017 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.826050][ T2019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.693'.
[   61.957671][ T2030] loop0: detected capacity change from 0 to 512
[   61.990613][ T2027] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.998396][ T2027] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.005820][ T2027] device bridge_slave_0 entered promiscuous mode
[   62.013360][ T2027] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.020633][ T2027] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.023924][ T2030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   62.029568][ T2027] device bridge_slave_1 entered promiscuous mode
[   62.037035][ T2030] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.072454][ T2039] syz.9.698[2039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.072556][ T2039] syz.9.698[2039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.090297][ T1996] EXT4-fs (loop0): unmounting filesystem.
[   62.126859][   T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[   62.162687][ T2027] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.169801][ T2027] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.177125][ T2027] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.184172][ T2027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.219427][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.227157][ T2049] loop0: detected capacity change from 0 to 512
[   62.234189][ T2049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   62.244171][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.252574][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.253904][ T2049] EXT4-fs (loop0): 1 truncate cleaned up
[   62.265662][ T2049] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   62.283857][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.292596][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.299682][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.307421][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.315895][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.322981][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.337205][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.352117][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.357547][   T24] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   62.369039][   T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[   62.379130][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.399067][   T24] usb 9-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[   62.408535][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.416579][   T24] usb 9-1: Product: syz
[   62.421091][   T24] usb 9-1: Manufacturer: syz
[   62.426527][   T24] usb 9-1: SerialNumber: syz
[   62.434884][ T1996] EXT4-fs (loop0): unmounting filesystem.
[   62.460898][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.481569][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.491950][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.500037][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.509134][ T2027] device veth0_vlan entered promiscuous mode
[   62.521905][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.536585][ T2027] device veth1_macvtap entered promiscuous mode
[   62.561159][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.575888][ T1558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.578720][ T2056] device-mapper: table: 252:2: too large device
[   62.590387][ T2056] device-mapper: ioctl: error adding target to table
[   62.599648][   T43] device bridge_slave_1 left promiscuous mode
[   62.607475][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.627835][   T43] device bridge_slave_0 left promiscuous mode
[   62.655757][   T24] usb 9-1: unit 4 not found!
[   62.660526][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.670810][   T24] snd-usb-audio: probe of 9-1:1.0 failed with error -71
[   62.678875][   T43] device veth0_vlan left promiscuous mode
[   62.698419][   T24] usb 9-1: USB disconnect, device number 3
[   62.726680][ T2059] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   62.740218][ T2059] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.774645][ T1512] EXT4-fs (loop9): unmounting filesystem.
[   62.856643][ T2061] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.864228][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.872108][ T2061] device bridge_slave_0 entered promiscuous mode
[   62.881715][ T2061] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.889461][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.898865][ T2061] device bridge_slave_1 entered promiscuous mode
[   62.937596][  T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   63.009879][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.017484][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.028291][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.036644][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.045013][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.052087][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.059830][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.067311][   T40] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   63.075631][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.084136][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.092405][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.099466][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.112358][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.121953][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.136501][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.149685][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.157942][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.165418][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.174305][ T2061] device veth0_vlan entered promiscuous mode
[   63.192972][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.202875][ T2061] device veth1_macvtap entered promiscuous mode
[   63.214892][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.223633][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.238560][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.247165][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.258068][   T40] usb 10-1: Using ep0 maxpacket: 32
[   63.264954][   T40] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[   63.278920][   T40] usb 10-1: config 0 has no interface number 0
[   63.295210][ T2083] set_capacity_and_notify: 2 callbacks suppressed
[   63.295228][ T2083] loop8: detected capacity change from 0 to 512
[   63.302438][   T40] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   63.320597][   T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.329262][   T40] usb 10-1: Product: syz
[   63.333548][   T40] usb 10-1: Manufacturer: syz
[   63.339061][   T40] usb 10-1: SerialNumber: syz
[   63.347519][   T40] usb 10-1: config 0 descriptor??
[   63.352371][ T2083] FAT-fs (loop8): error, corrupted file size (i_pos 0, 8960)
[   63.360569][ T2083] FAT-fs (loop8): error, corrupted file size (i_pos 0, 8960)
[   63.369381][   T40] smsc95xx v2.0.0
[   63.379301][ T2083] FAT-fs (loop8): error, corrupted file size (i_pos 0, 8960)
[   63.510748][ T2091] loop8: detected capacity change from 0 to 512
[   63.528994][ T2091] EXT4-fs: Ignoring removed nobh option
[   63.542677][ T2091] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   63.552776][ T2091] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.582415][ T1427] EXT4-fs (loop8): unmounting filesystem.
[   63.628170][   T43] device bridge_slave_1 left promiscuous mode
[   63.635500][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.643760][   T43] device bridge_slave_0 left promiscuous mode
[   63.650757][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.659451][   T43] device veth1_macvtap left promiscuous mode
[   63.665784][   T43] device veth0_vlan left promiscuous mode
[   63.765593][   T40] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   63.781716][   T40] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   63.871471][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.733'.
[   63.883787][ T2123] bridge0: port 3(vlan2) entered blocking state
[   63.891138][ T2123] bridge0: port 3(vlan2) entered disabled state
[   63.898425][ T2123] device vlan2 entered promiscuous mode
[   63.904190][ T2123] device macsec0 entered promiscuous mode
[   63.938248][ T2128] WARNING! power/level is deprecated; use power/control instead
[   64.125469][ T2148] ------------[ cut here ]------------
[   64.131134][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/trace.c:2464 __trace_find_cmdline+0x166/0x1c0
[   64.141260][ T2148] Modules linked in:
[   64.145185][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Not tainted syzkaller #0
[   64.152642][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   64.162846][ T2148] RIP: 0010:__trace_find_cmdline+0x166/0x1c0
[   64.169280][ T2148] Code: 65 d0 ba 06 00 00 00 4c 89 e7 48 c7 c6 c0 00 ab 85 e8 ae b6 42 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8a 14 fd ff <0f> 0b ba 06 00 00 00 4c 89 e7 48 c7 c6 a0 00 ab 85 eb d4 44 89 f9
[   64.188995][ T2148] RSP: 0018:ffffc90000ba7980 EFLAGS: 00010287
[   64.195119][ T2148] RAX: ffffffff81745d96 RBX: ffff8881220e4000 RCX: 0000000000080000
[   64.201650][   T40] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[   64.203216][ T2148] RDX: ffffc90002e70000 RSI: 00000000000007da RDI: 00000000000007db
[   64.215519][   T40] smsc95xx: probe of 10-1:0.67 failed with error -71
[   64.222062][ T2148] RBP: ffffc90000ba79b0 R08: 0000000000000003 R09: 0000000000000004
[   64.222081][ T2148] R10: dffffc0000000000 R11: fffff52000174f40 R12: ffffc90000ba7ac0
[   64.244794][ T2148] R13: dffffc0000000000 R14: 00000000af11887e R15: 0000000000000000
[   64.250957][   T40] usb 10-1: USB disconnect, device number 2
[   64.253007][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   64.267888][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.274504][ T2148] CR2: 000000110c24876c CR3: 0000000123690000 CR4: 00000000003506b0
[   64.282555][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   64.290593][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   64.298863][ T2148] Call Trace:
[   64.302171][ T2148]  <TASK>
[   64.305124][ T2148]  ? trace_find_cmdline+0xde/0x1c0
[   64.310320][ T2148]  trace_find_cmdline+0xf1/0x1c0
[   64.315304][ T2148]  ? __cfi_trace_find_cmdline+0x10/0x10
[   64.320932][ T2148]  ? ring_buffer_peek+0x345/0x3b0
[   64.325998][ T2148]  trace_print_context+0xf9/0x4d0
[   64.331170][ T2148]  ? __cfi_trace_print_context+0x10/0x10
[   64.336864][ T2148]  ? __find_next_entry+0x5af/0x6c0
[   64.342037][ T2148]  print_trace_fmt+0x3c6/0x720
[   64.346940][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   64.352609][ T2148]  print_trace_line+0x393/0x6b0
[   64.357654][ T2148]  tracing_read_pipe+0x517/0xaf0
[   64.362659][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   64.368231][ T2148]  vfs_read+0x286/0x930
[   64.372421][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   64.377137][ T2148]  ? __kasan_check_write+0x14/0x20
[   64.382308][ T2148]  ? mutex_lock+0x93/0x1b0
[   64.386833][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   64.391727][ T2148]  ? __fdget_pos+0x2cd/0x380
[   64.396328][ T2148]  ? ksys_read+0x70/0x260
[   64.400730][ T2148]  ksys_read+0x14a/0x260
[   64.404997][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   64.409834][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   64.415498][ T2148]  __x64_sys_read+0x7b/0x90
[   64.420042][ T2148]  x64_sys_call+0x2f/0x9a0
[   64.424513][ T2148]  do_syscall_64+0x4c/0xa0
[   64.429019][ T2148]  ? clear_bhb_loop+0x30/0x80
[   64.433726][ T2148]  ? clear_bhb_loop+0x30/0x80
[   64.438474][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.444399][ T2148] RIP: 0033:0x7fb5f37a8f19
[   64.448861][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.468558][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   64.477031][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   64.485029][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   64.493102][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   64.501117][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.509149][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   64.517163][ T2148]  </TASK>
[   64.520192][ T2148] ---[ end trace 0000000000000000 ]---
[   64.525887][ T2148] ------------[ cut here ]------------
[   64.531372][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   64.541651][ T2148] Modules linked in:
[   64.545563][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G        W          syzkaller #0
[   64.554341][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   64.564407][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   64.570234][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   64.589853][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   64.595939][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   64.603926][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   64.611928][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   64.619915][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   64.627901][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   64.635892][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   64.644837][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.651437][ T2148] CR2: 00007f657283d1f6 CR3: 0000000123690000 CR4: 00000000003506a0
[   64.659436][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   64.667424][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   64.675415][ T2148] Call Trace:
[   64.678708][ T2148]  <TASK>
[   64.681655][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   64.687312][ T2148]  ? __kasan_check_write+0x14/0x20
[   64.692438][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   64.697129][ T2148]  rb_buffer_peek+0x5f/0x930
[   64.701731][ T2148]  ring_buffer_peek+0x184/0x3b0
[   64.706592][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   64.711972][ T2148]  ? __kasan_check_write+0x14/0x20
[   64.717100][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   64.721790][ T2148]  ? _find_next_bit+0x8a/0x130
[   64.726592][ T2148]  __find_next_entry+0x33c/0x6c0
[   64.731553][ T2148]  ? trace_find_next_entry+0x380/0x380
[   64.737068][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   64.742729][ T2148]  ? print_trace_line+0x393/0x6b0
[   64.747767][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   64.752728][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   64.758203][ T2148]  vfs_read+0x286/0x930
[   64.762392][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   64.767083][ T2148]  ? __kasan_check_write+0x14/0x20
[   64.772212][ T2148]  ? mutex_lock+0x93/0x1b0
[   64.776662][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   64.781529][ T2148]  ? __fdget_pos+0x2cd/0x380
[   64.786134][ T2148]  ? ksys_read+0x70/0x260
[   64.790485][ T2148]  ksys_read+0x14a/0x260
[   64.794754][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   64.799530][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   64.805178][ T2148]  __x64_sys_read+0x7b/0x90
[   64.809693][ T2148]  x64_sys_call+0x2f/0x9a0
[   64.814131][ T2148]  do_syscall_64+0x4c/0xa0
[   64.818567][ T2148]  ? clear_bhb_loop+0x30/0x80
[   64.823266][ T2148]  ? clear_bhb_loop+0x30/0x80
[   64.827961][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.834050][ T2148] RIP: 0033:0x7fb5f37a8f19
[   64.838476][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.858091][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   64.866552][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   64.874567][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   64.882563][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   64.890552][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.898549][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   64.906550][ T2148]  </TASK>
[   64.909587][ T2148] ---[ end trace 0000000000000000 ]---
[   64.915075][ T2148] ==================================================================
[   64.923148][ T2148] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930
[   64.930381][ T2148] Read of size 4 at addr ffff8881c9c8b08d by task syz.7.752/2148
[   64.938109][ T2148] 
[   64.940453][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G        W          syzkaller #0
[   64.949231][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   64.959297][ T2148] Call Trace:
[   64.962590][ T2148]  <TASK>
[   64.965533][ T2148]  __dump_stack+0x21/0x24
[   64.969888][ T2148]  dump_stack_lvl+0x110/0x170
[   64.974581][ T2148]  ? __cfi_dump_stack_lvl+0x8/0x8
[   64.979617][ T2148]  ? rb_get_reader_page+0x9f6/0xc60
[   64.984837][ T2148]  ? rb_buffer_peek+0x88d/0x930
[   64.989707][ T2148]  print_address_description+0x71/0x200
[   64.995281][ T2148]  print_report+0x4a/0x60
[   64.999638][ T2148]  kasan_report+0x122/0x150
[   65.004165][ T2148]  ? rb_buffer_peek+0x88d/0x930
[   65.009038][ T2148]  ? __kasan_check_write+0x14/0x20
[   65.014171][ T2148]  __asan_report_load4_noabort+0x14/0x20
[   65.019831][ T2148]  rb_buffer_peek+0x88d/0x930
[   65.024544][ T2148]  ring_buffer_peek+0x184/0x3b0
[   65.029416][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   65.034801][ T2148]  ? __kasan_check_write+0x14/0x20
[   65.039930][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   65.044622][ T2148]  ? _find_next_bit+0x8a/0x130
[   65.049407][ T2148]  __find_next_entry+0x33c/0x6c0
[   65.054461][ T2148]  ? trace_find_next_entry+0x380/0x380
[   65.059948][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   65.065594][ T2148]  ? print_trace_line+0x393/0x6b0
[   65.070635][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   65.075593][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   65.081076][ T2148]  vfs_read+0x286/0x930
[   65.085685][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   65.090373][ T2148]  ? __kasan_check_write+0x14/0x20
[   65.095518][ T2148]  ? mutex_lock+0x93/0x1b0
[   65.100219][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   65.105089][ T2148]  ? __fdget_pos+0x2cd/0x380
[   65.109699][ T2148]  ? ksys_read+0x70/0x260
[   65.114052][ T2148]  ksys_read+0x14a/0x260
[   65.118327][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   65.123123][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   65.128775][ T2148]  __x64_sys_read+0x7b/0x90
[   65.133299][ T2148]  x64_sys_call+0x2f/0x9a0
[   65.137755][ T2148]  do_syscall_64+0x4c/0xa0
[   65.142211][ T2148]  ? clear_bhb_loop+0x30/0x80
[   65.146909][ T2148]  ? clear_bhb_loop+0x30/0x80
[   65.151604][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   65.157517][ T2148] RIP: 0033:0x7fb5f37a8f19
[   65.161956][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.181581][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.190039][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   65.198025][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   65.206007][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   65.213991][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.221972][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   65.229962][ T2148]  </TASK>
[   65.233018][ T2148] 
[   65.235358][ T2148] The buggy address belongs to the physical page:
[   65.241775][ T2148] page:ffffea00072722c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c9c8b
[   65.252038][ T2148] flags: 0x4000000000000000(zone=1)
[   65.257275][ T2148] raw: 4000000000000000 ffffea00072722c8 ffffea00072722c8 0000000000000000
[   65.266066][ T2148] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   65.274656][ T2148] page dumped because: kasan: bad access detected
[   65.281093][ T2148] page_owner info is not present (never set?)
[   65.287159][ T2148] 
[   65.289507][ T2148] Memory state around the buggy address:
[   65.295147][ T2148]  ffff8881c9c8af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   65.303224][ T2148]  ffff8881c9c8b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   65.311315][ T2148] >ffff8881c9c8b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   65.319401][ T2148]                       ^
[   65.323834][ T2148]  ffff8881c9c8b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   65.331902][ T2148]  ffff8881c9c8b180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   65.339967][ T2148] ==================================================================
[   65.348035][ T2148] Disabling lock debugging due to kernel taint
[   65.356824][   T28] kauditd_printk_skb: 2 callbacks suppressed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   65.356838][   T28] audit: type=1400 audit(1794327144.424:894): avc:  denied  { write } for  pid=278 comm="syz-executor" path="pipe:[15263]" dev="pipefs" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   65.453035][ T2148] ------------[ cut here ]------------
[   65.458580][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   65.468865][ T2148] Modules linked in:
[   65.472817][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   65.481602][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   65.491710][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   65.497558][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   65.517199][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   65.523326][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   65.531349][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   65.539354][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   65.547441][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   65.555442][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   65.563448][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   65.572437][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.579061][ T2148] CR2: 00005555812c6898 CR3: 0000000123690000 CR4: 00000000003506b0
[   65.587058][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.595055][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   65.603138][ T2148] Call Trace:
[   65.606445][ T2148]  <TASK>
[   65.609401][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   65.615069][ T2148]  ? __kasan_check_write+0x14/0x20
[   65.620205][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   65.624914][ T2148]  rb_buffer_peek+0x5f/0x930
[   65.629538][ T2148]  ring_buffer_consume+0x1aa/0x370
[   65.634689][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   65.640342][ T2148]  ? print_trace_line+0x393/0x6b0
[   65.645385][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   65.650365][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   65.655857][ T2148]  vfs_read+0x286/0x930
[   65.660055][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   65.664766][ T2148]  ? __kasan_check_write+0x14/0x20
[   65.669986][ T2148]  ? mutex_lock+0x93/0x1b0
[   65.674429][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   65.679309][ T2148]  ? __fdget_pos+0x2cd/0x380
[   65.683918][ T2148]  ? ksys_read+0x70/0x260
[   65.688265][ T2148]  ksys_read+0x14a/0x260
[   65.692520][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   65.697294][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   65.702946][ T2148]  __x64_sys_read+0x7b/0x90
[   65.707470][ T2148]  x64_sys_call+0x2f/0x9a0
[   65.711919][ T2148]  do_syscall_64+0x4c/0xa0
[   65.716352][ T2148]  ? clear_bhb_loop+0x30/0x80
[   65.721048][ T2148]  ? clear_bhb_loop+0x30/0x80
[   65.725749][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   65.731657][ T2148] RIP: 0033:0x7fb5f37a8f19
[   65.736112][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.755752][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.764184][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   65.772259][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   65.780344][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   65.788328][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.796316][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   65.804395][ T2148]  </TASK>
[   65.807428][ T2148] ---[ end trace 0000000000000000 ]---
[   65.812976][ T2148] ------------[ cut here ]------------
[   65.818486][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   65.828761][ T2148] Modules linked in:
[   65.832684][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   65.841487][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   65.851655][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   65.857496][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   65.877124][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   65.883211][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   65.891200][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   65.899193][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   65.907188][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   65.915187][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   65.923211][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   65.932160][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.938851][ T2148] CR2: 00005555812c6898 CR3: 0000000123690000 CR4: 00000000003506b0
[   65.946842][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.954828][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   65.963661][ T2148] Call Trace:
[   65.966963][ T2148]  <TASK>
[   65.969941][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   65.975601][ T2148]  rb_advance_reader+0x2b/0x770
[   65.980565][ T2148]  ring_buffer_consume+0x1e7/0x370
[   65.985785][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   65.991437][ T2148]  ? print_trace_line+0x393/0x6b0
[   65.996509][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   66.001486][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   66.006970][ T2148]  vfs_read+0x286/0x930
[   66.011147][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   66.015846][ T2148]  ? __kasan_check_write+0x14/0x20
[   66.020978][ T2148]  ? mutex_lock+0x93/0x1b0
[   66.025423][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   66.030300][ T2148]  ? __fdget_pos+0x2cd/0x380
[   66.034929][ T2148]  ? ksys_read+0x70/0x260
[   66.039281][ T2148]  ksys_read+0x14a/0x260
[   66.043544][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   66.048336][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   66.054077][ T2148]  __x64_sys_read+0x7b/0x90
[   66.058618][ T2148]  x64_sys_call+0x2f/0x9a0
[   66.063059][ T2148]  do_syscall_64+0x4c/0xa0
[   66.067489][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.072203][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.076898][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   66.082807][ T2148] RIP: 0033:0x7fb5f37a8f19
[   66.087236][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.106946][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.115373][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   66.123364][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   66.131354][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   66.139340][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.147328][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   66.155321][ T2148]  </TASK>
[   66.158359][ T2148] ---[ end trace 0000000000000000 ]---
[   66.165787][   T19] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[   66.239652][ T2148] ------------[ cut here ]------------
[   66.245169][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   66.255453][ T2148] Modules linked in:
[   66.259372][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   66.268161][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   66.278250][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   66.284100][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   66.303735][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   66.309837][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   66.317858][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   66.325867][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   66.333867][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   66.341874][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   66.349910][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   66.358870][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.365493][ T2148] CR2: 0000559bdcf9faf8 CR3: 0000000123690000 CR4: 00000000003506a0
[   66.373485][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   66.381478][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   66.389464][ T2148] Call Trace:
[   66.392771][ T2148]  <TASK>
[   66.395723][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   66.401376][ T2148]  ? __schedule+0xcbb/0x1700
[   66.405991][ T2148]  ? __kasan_check_write+0x14/0x20
[   66.411141][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   66.415887][ T2148]  rb_buffer_peek+0x5f/0x930
[   66.420521][ T2148]  ring_buffer_peek+0x184/0x3b0
[   66.425378][ T2148]  ? __kasan_check_read+0x11/0x20
[   66.430428][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   66.436006][ T2148]  ? _find_next_bit+0x8a/0x130
[   66.440808][ T2148]  __find_next_entry+0x33c/0x6c0
[   66.445857][ T2148]  ? trace_find_next_entry+0x380/0x380
[   66.451348][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   66.457009][ T2148]  ? print_trace_line+0x393/0x6b0
[   66.462054][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   66.467022][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   66.472598][ T2148]  vfs_read+0x286/0x930
[   66.476804][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   66.481513][ T2148]  ? __kasan_check_write+0x14/0x20
[   66.486684][ T2148]  ? mutex_lock+0x93/0x1b0
[   66.491125][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   66.496018][ T2148]  ? __fdget_pos+0x2cd/0x380
[   66.500624][ T2148]  ? ksys_read+0x70/0x260
[   66.504983][ T2148]  ksys_read+0x14a/0x260
[   66.509256][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   66.514050][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   66.519727][ T2148]  __x64_sys_read+0x7b/0x90
[   66.524271][ T2148]  x64_sys_call+0x2f/0x9a0
[   66.528717][ T2148]  do_syscall_64+0x4c/0xa0
[   66.533163][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.537878][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.542597][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   66.548526][ T2148] RIP: 0033:0x7fb5f37a8f19
[   66.552965][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.572678][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.581147][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   66.589165][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   66.597165][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   66.605178][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.613176][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   66.621260][ T2148]  </TASK>
[   66.624291][ T2148] ---[ end trace 0000000000000000 ]---
[   66.632192][ T2148] ------------[ cut here ]------------
[   66.637686][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   66.647968][ T2148] Modules linked in:
[   66.651902][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   66.660682][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   66.670755][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   66.676686][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   66.696397][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   66.702501][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   66.710497][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   66.718529][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   66.726640][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   66.734636][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   66.742631][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   66.751592][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.758191][ T2148] CR2: 0000559bdcf9faf8 CR3: 0000000123690000 CR4: 00000000003506a0
[   66.766189][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   66.774176][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   66.782162][ T2148] Call Trace:
[   66.785459][ T2148]  <TASK>
[   66.788423][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   66.794091][ T2148]  ? __kasan_check_write+0x14/0x20
[   66.799247][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   66.803958][ T2148]  rb_buffer_peek+0x5f/0x930
[   66.808573][ T2148]  ring_buffer_consume+0x1aa/0x370
[   66.813708][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   66.819373][ T2148]  ? print_trace_line+0x393/0x6b0
[   66.824428][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   66.829400][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   66.834903][ T2148]  vfs_read+0x286/0x930
[   66.839082][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   66.843777][ T2148]  ? __kasan_check_write+0x14/0x20
[   66.848926][ T2148]  ? mutex_lock+0x93/0x1b0
[   66.853366][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   66.858245][ T2148]  ? __fdget_pos+0x2cd/0x380
[   66.862866][ T2148]  ? ksys_read+0x70/0x260
[   66.867219][ T2148]  ksys_read+0x14a/0x260
[   66.871472][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   66.876251][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   66.881918][ T2148]  __x64_sys_read+0x7b/0x90
[   66.886476][ T2148]  x64_sys_call+0x2f/0x9a0
[   66.890920][ T2148]  do_syscall_64+0x4c/0xa0
[   66.895345][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.900064][ T2148]  ? clear_bhb_loop+0x30/0x80
[   66.904778][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   66.910692][ T2148] RIP: 0033:0x7fb5f37a8f19
[   66.915214][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.934845][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.943300][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   66.951302][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   66.959315][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   66.967312][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.975329][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   66.983384][ T2148]  </TASK>
[   66.986424][ T2148] ---[ end trace 0000000000000000 ]---
[   66.991951][ T2148] ------------[ cut here ]------------
[   66.997417][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   67.007702][ T2148] Modules linked in:
[   67.011612][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   67.020398][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   67.030469][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   67.036422][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   67.056073][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   67.062169][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   67.070156][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   67.078180][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   67.086176][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   67.094163][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   67.102156][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   67.111110][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.117716][ T2148] CR2: 0000559bdcf9faf8 CR3: 0000000123690000 CR4: 00000000003506a0
[   67.125709][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   67.133712][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   67.141716][ T2148] Call Trace:
[   67.145096][ T2148]  <TASK>
[   67.148051][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   67.153739][ T2148]  rb_advance_reader+0x2b/0x770
[   67.158620][ T2148]  ring_buffer_consume+0x1e7/0x370
[   67.163772][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   67.169437][ T2148]  ? print_trace_line+0x393/0x6b0
[   67.174490][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   67.179452][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   67.184937][ T2148]  vfs_read+0x286/0x930
[   67.189118][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   67.193988][ T2148]  ? __kasan_check_write+0x14/0x20
[   67.199206][ T2148]  ? mutex_lock+0x93/0x1b0
[   67.203664][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   67.208539][ T2148]  ? __fdget_pos+0x2cd/0x380
[   67.213155][ T2148]  ? ksys_read+0x70/0x260
[   67.217518][ T2148]  ksys_read+0x14a/0x260
[   67.221795][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   67.226588][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   67.232259][ T2148]  __x64_sys_read+0x7b/0x90
[   67.236791][ T2148]  x64_sys_call+0x2f/0x9a0
[   67.241240][ T2148]  do_syscall_64+0x4c/0xa0
[   67.245699][ T2148]  ? clear_bhb_loop+0x30/0x80
[   67.250402][ T2148]  ? clear_bhb_loop+0x30/0x80
[   67.255113][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.261055][ T2148] RIP: 0033:0x7fb5f37a8f19
[   67.265487][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.285302][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   67.293742][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   67.301757][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   67.309779][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   67.317776][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.325749][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   67.333763][ T2148]  </TASK>
[   67.336793][ T2148] ---[ end trace 0000000000000000 ]---
[   67.348718][ T2148] ------------[ cut here ]------------
[   67.354221][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   67.364512][ T2148] Modules linked in:
[   67.368433][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   67.377248][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   67.387334][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   67.393178][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   67.412807][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   67.418899][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   67.426890][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   67.434897][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   67.442886][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   67.450876][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   67.458887][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   67.467863][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.474462][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   67.482450][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   67.490440][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   67.498429][ T2148] Call Trace:
[   67.501721][ T2148]  <TASK>
[   67.504669][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   67.510329][ T2148]  ? __schedule+0xcbb/0x1700
[   67.514941][ T2148]  ? __kasan_check_write+0x14/0x20
[   67.520066][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   67.524766][ T2148]  rb_buffer_peek+0x5f/0x930
[   67.529377][ T2148]  ring_buffer_peek+0x184/0x3b0
[   67.534242][ T2148]  ? __kasan_check_read+0x11/0x20
[   67.539300][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   67.544718][ T2148]  ? _find_next_bit+0x8a/0x130
[   67.549501][ T2148]  __find_next_entry+0x33c/0x6c0
[   67.554484][ T2148]  ? trace_find_next_entry+0x380/0x380
[   67.559968][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   67.565623][ T2148]  ? print_trace_line+0x393/0x6b0
[   67.570665][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   67.575644][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   67.581124][ T2148]  vfs_read+0x286/0x930
[   67.585324][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   67.590013][ T2148]  ? __kasan_check_write+0x14/0x20
[   67.595154][ T2148]  ? mutex_lock+0x93/0x1b0
[   67.599591][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   67.604467][ T2148]  ? __fdget_pos+0x2cd/0x380
[   67.609076][ T2148]  ? ksys_read+0x70/0x260
[   67.613619][ T2148]  ksys_read+0x14a/0x260
[   67.617883][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   67.622664][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   67.628319][ T2148]  __x64_sys_read+0x7b/0x90
[   67.632836][ T2148]  x64_sys_call+0x2f/0x9a0
[   67.637276][ T2148]  do_syscall_64+0x4c/0xa0
[   67.641718][ T2148]  ? clear_bhb_loop+0x30/0x80
[   67.646414][ T2148]  ? clear_bhb_loop+0x30/0x80
[   67.651115][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.657038][ T2148] RIP: 0033:0x7fb5f37a8f19
[   67.661654][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.681292][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   67.689729][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   67.697724][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   67.705738][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   67.713745][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.721731][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   67.729725][ T2148]  </TASK>
[   67.732757][ T2148] ---[ end trace 0000000000000000 ]---
[   67.740546][ T2148] ------------[ cut here ]------------
[   67.746040][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   67.756328][ T2148] Modules linked in:
[   67.760247][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   67.769024][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   67.779082][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   67.784897][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   67.804507][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   67.810579][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   67.818553][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   67.826609][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   67.834600][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   67.842581][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   67.850575][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   67.859520][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.866115][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   67.874115][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   67.882095][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   67.890071][ T2148] Call Trace:
[   67.893356][ T2148]  <TASK>
[   67.896313][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   67.901953][ T2148]  ? __kasan_check_write+0x14/0x20
[   67.907074][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   67.911754][ T2148]  rb_buffer_peek+0x5f/0x930
[   67.916350][ T2148]  ring_buffer_consume+0x1aa/0x370
[   67.921465][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   67.927099][ T2148]  ? print_trace_line+0x393/0x6b0
[   67.932144][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   67.937090][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   67.942571][ T2148]  vfs_read+0x286/0x930
[   67.946735][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   67.951468][ T2148]  ? __kasan_check_write+0x14/0x20
[   67.956593][ T2148]  ? mutex_lock+0x93/0x1b0
[   67.961012][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   67.965870][ T2148]  ? __fdget_pos+0x2cd/0x380
[   67.970465][ T2148]  ? ksys_read+0x70/0x260
[   67.974800][ T2148]  ksys_read+0x14a/0x260
[   67.979058][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   67.983835][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   67.989471][ T2148]  __x64_sys_read+0x7b/0x90
[   67.993976][ T2148]  x64_sys_call+0x2f/0x9a0
[   67.998400][ T2148]  do_syscall_64+0x4c/0xa0
[   68.002836][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.007519][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.012204][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   68.018107][ T2148] RIP: 0033:0x7fb5f37a8f19
[   68.022527][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.042133][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   68.050552][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   68.058532][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   68.066699][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   68.074672][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.082646][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   68.090626][ T2148]  </TASK>
[   68.093647][ T2148] ---[ end trace 0000000000000000 ]---
[   68.099146][ T2148] ------------[ cut here ]------------
[   68.104597][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   68.114843][ T2148] Modules linked in:
[   68.118735][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   68.127495][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   68.137551][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   68.143448][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   68.163057][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   68.169126][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   68.177119][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   68.185108][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   68.193083][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   68.201065][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   68.209038][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   68.217997][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.224579][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   68.232574][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   68.240650][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   68.248627][ T2148] Call Trace:
[   68.251930][ T2148]  <TASK>
[   68.254891][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   68.260550][ T2148]  rb_advance_reader+0x2b/0x770
[   68.265422][ T2148]  ring_buffer_consume+0x1e7/0x370
[   68.270544][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   68.276180][ T2148]  ? print_trace_line+0x393/0x6b0
[   68.281302][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   68.286257][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   68.291736][ T2148]  vfs_read+0x286/0x930
[   68.295896][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   68.300682][ T2148]  ? __kasan_check_write+0x14/0x20
[   68.305821][ T2148]  ? mutex_lock+0x93/0x1b0
[   68.310244][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   68.315215][ T2148]  ? __fdget_pos+0x2cd/0x380
[   68.319810][ T2148]  ? ksys_read+0x70/0x260
[   68.324143][ T2148]  ksys_read+0x14a/0x260
[   68.328388][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   68.333184][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   68.338823][ T2148]  __x64_sys_read+0x7b/0x90
[   68.343343][ T2148]  x64_sys_call+0x2f/0x9a0
[   68.347763][ T2148]  do_syscall_64+0x4c/0xa0
[   68.352211][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.356896][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.361589][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   68.367486][ T2148] RIP: 0033:0x7fb5f37a8f19
[   68.371903][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.391514][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   68.399939][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   68.407916][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   68.415895][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   68.423898][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.431877][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   68.439953][ T2148]  </TASK>
[   68.442977][ T2148] ---[ end trace 0000000000000000 ]---
[   68.450523][ T2148] ------------[ cut here ]------------
[   68.456025][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   68.466307][ T2148] Modules linked in:
[   68.470233][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   68.479016][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   68.489126][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   68.494976][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   68.514605][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010006
[   68.521121][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   68.529116][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   68.537105][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   68.545112][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   68.553115][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   68.561115][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   68.570075][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.576745][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   68.584808][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   68.592808][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   68.600837][ T2148] Call Trace:
[   68.604142][ T2148]  <TASK>
[   68.607125][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   68.612789][ T2148]  ? __schedule+0xcbb/0x1700
[   68.617416][ T2148]  ? __kasan_check_write+0x14/0x20
[   68.622566][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   68.627274][ T2148]  rb_buffer_peek+0x5f/0x930
[   68.631891][ T2148]  ring_buffer_peek+0x184/0x3b0
[   68.636841][ T2148]  ? __kasan_check_read+0x11/0x20
[   68.641903][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   68.647296][ T2148]  ? _find_next_bit+0x8a/0x130
[   68.652094][ T2148]  __find_next_entry+0x33c/0x6c0
[   68.657076][ T2148]  ? trace_find_next_entry+0x380/0x380
[   68.662568][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   68.668239][ T2148]  ? print_trace_line+0x393/0x6b0
[   68.673296][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   68.678277][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   68.683928][ T2148]  vfs_read+0x286/0x930
[   68.688100][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   68.692809][ T2148]  ? __kasan_check_write+0x14/0x20
[   68.697962][ T2148]  ? mutex_lock+0x93/0x1b0
[   68.702401][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   68.707276][ T2148]  ? __fdget_pos+0x2cd/0x380
[   68.711910][ T2148]  ? ksys_read+0x70/0x260
[   68.716283][ T2148]  ksys_read+0x14a/0x260
[   68.720550][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   68.725340][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   68.731009][ T2148]  __x64_sys_read+0x7b/0x90
[   68.735540][ T2148]  x64_sys_call+0x2f/0x9a0
[   68.739974][ T2148]  do_syscall_64+0x4c/0xa0
[   68.744399][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.749113][ T2148]  ? clear_bhb_loop+0x30/0x80
[   68.753816][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   68.759733][ T2148] RIP: 0033:0x7fb5f37a8f19
[   68.764166][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.783823][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   68.792266][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   68.800261][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   68.808249][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   68.816265][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.824255][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   68.832333][ T2148]  </TASK>
[   68.835383][ T2148] ---[ end trace 0000000000000000 ]---
[   68.841620][ T2148] ------------[ cut here ]------------
[   68.847112][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   68.857389][ T2148] Modules linked in:
[   68.861282][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   68.870040][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   68.880100][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   68.885922][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   68.905537][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   68.911614][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   68.919591][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   68.927570][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   68.935558][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   68.943554][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   68.951534][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   68.960465][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.967050][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   68.975027][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   68.983002][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   68.990984][ T2148] Call Trace:
[   68.994303][ T2148]  <TASK>
[   68.997262][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   69.003095][ T2148]  ? __kasan_check_write+0x14/0x20
[   69.008235][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   69.012938][ T2148]  rb_buffer_peek+0x5f/0x930
[   69.017636][ T2148]  ring_buffer_consume+0x1aa/0x370
[   69.022770][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   69.028857][ T2148]  ? print_trace_line+0x393/0x6b0
[   69.033902][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   69.038868][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   69.044350][ T2148]  vfs_read+0x286/0x930
[   69.048530][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   69.053245][ T2148]  ? __kasan_check_write+0x14/0x20
[   69.058381][ T2148]  ? mutex_lock+0x93/0x1b0
[   69.062816][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   69.067694][ T2148]  ? __fdget_pos+0x2cd/0x380
[   69.072303][ T2148]  ? ksys_read+0x70/0x260
[   69.076649][ T2148]  ksys_read+0x14a/0x260
[   69.080903][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   69.085683][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   69.091338][ T2148]  __x64_sys_read+0x7b/0x90
[   69.095859][ T2148]  x64_sys_call+0x2f/0x9a0
[   69.100293][ T2148]  do_syscall_64+0x4c/0xa0
[   69.104719][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.109410][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.114111][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.120024][ T2148] RIP: 0033:0x7fb5f37a8f19
[   69.124453][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.144078][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   69.152534][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   69.160523][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   69.168506][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   69.176581][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.184566][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   69.192561][ T2148]  </TASK>
[   69.195590][ T2148] ---[ end trace 0000000000000000 ]---
[   69.201111][ T2148] ------------[ cut here ]------------
[   69.206579][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   69.216840][ T2148] Modules linked in:
[   69.220749][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   69.229533][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   69.239603][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   69.245431][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   69.265050][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   69.271154][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   69.279148][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   69.287140][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   69.295137][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   69.303148][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   69.311137][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   69.320084][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.326685][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   69.334675][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.342681][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   69.350693][ T2148] Call Trace:
[   69.354009][ T2148]  <TASK>
[   69.356959][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   69.362617][ T2148]  rb_advance_reader+0x2b/0x770
[   69.367617][ T2148]  ring_buffer_consume+0x1e7/0x370
[   69.372856][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   69.378511][ T2148]  ? print_trace_line+0x393/0x6b0
[   69.383551][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   69.388604][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   69.394085][ T2148]  vfs_read+0x286/0x930
[   69.398264][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   69.402952][ T2148]  ? __kasan_check_write+0x14/0x20
[   69.408073][ T2148]  ? mutex_lock+0x93/0x1b0
[   69.412607][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   69.417478][ T2148]  ? __fdget_pos+0x2cd/0x380
[   69.422170][ T2148]  ? ksys_read+0x70/0x260
[   69.426541][ T2148]  ksys_read+0x14a/0x260
[   69.430797][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   69.435586][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   69.441239][ T2148]  __x64_sys_read+0x7b/0x90
[   69.445763][ T2148]  x64_sys_call+0x2f/0x9a0
[   69.450207][ T2148]  do_syscall_64+0x4c/0xa0
[   69.454656][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.459385][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.464081][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.469997][ T2148] RIP: 0033:0x7fb5f37a8f19
[   69.474429][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.494052][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   69.502488][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   69.510477][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   69.518468][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   69.526454][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.534437][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   69.542428][ T2148]  </TASK>
[   69.545468][ T2148] ---[ end trace 0000000000000000 ]---
[   69.552604][ T2148] ------------[ cut here ]------------
[   69.558142][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   69.568427][ T2148] Modules linked in:
[   69.572346][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   69.581133][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   69.591230][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   69.597079][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   69.616708][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   69.622821][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   69.630816][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   69.638823][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   69.646814][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   69.654838][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   69.662840][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   69.671819][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.678424][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   69.686443][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.694438][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   69.702429][ T2148] Call Trace:
[   69.705711][ T2148]  <TASK>
[   69.708659][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   69.714350][ T2148]  ? __schedule+0xcbb/0x1700
[   69.718968][ T2148]  ? __kasan_check_write+0x14/0x20
[   69.724457][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   69.729163][ T2148]  rb_buffer_peek+0x5f/0x930
[   69.733882][ T2148]  ring_buffer_peek+0x184/0x3b0
[   69.738756][ T2148]  ? __kasan_check_read+0x11/0x20
[   69.743890][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   69.749316][ T2148]  ? _find_next_bit+0x8a/0x130
[   69.754110][ T2148]  __find_next_entry+0x33c/0x6c0
[   69.759089][ T2148]  ? trace_find_next_entry+0x380/0x380
[   69.764583][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   69.770249][ T2148]  ? print_trace_line+0x393/0x6b0
[   69.775295][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   69.780257][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   69.785734][ T2148]  vfs_read+0x286/0x930
[   69.789909][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   69.794612][ T2148]  ? __kasan_check_write+0x14/0x20
[   69.799754][ T2148]  ? mutex_lock+0x93/0x1b0
[   69.804279][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   69.809156][ T2148]  ? __fdget_pos+0x2cd/0x380
[   69.813791][ T2148]  ? ksys_read+0x70/0x260
[   69.818138][ T2148]  ksys_read+0x14a/0x260
[   69.822404][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   69.827214][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   69.832889][ T2148]  __x64_sys_read+0x7b/0x90
[   69.837418][ T2148]  x64_sys_call+0x2f/0x9a0
[   69.841850][ T2148]  do_syscall_64+0x4c/0xa0
[   69.846290][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.850994][ T2148]  ? clear_bhb_loop+0x30/0x80
[   69.855729][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.861673][ T2148] RIP: 0033:0x7fb5f37a8f19
[   69.866136][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.885758][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   69.894197][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   69.902216][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   69.910204][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   69.918192][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.926268][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   69.934301][ T2148]  </TASK>
[   69.937337][ T2148] ---[ end trace 0000000000000000 ]---
[   69.950300][ T2148] ------------[ cut here ]------------
[   69.955796][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   69.966061][ T2148] Modules linked in:
[   69.969991][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   69.978789][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   69.988864][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   69.994789][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   70.014428][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   70.020526][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   70.028519][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   70.036513][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   70.044507][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   70.052518][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   70.060511][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   70.069455][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.076075][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   70.084065][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   70.092050][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   70.100038][ T2148] Call Trace:
[   70.103328][ T2148]  <TASK>
[   70.106279][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   70.111939][ T2148]  ? __kasan_check_write+0x14/0x20
[   70.117066][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   70.121758][ T2148]  rb_buffer_peek+0x5f/0x930
[   70.126370][ T2148]  ring_buffer_consume+0x1aa/0x370
[   70.131503][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   70.137154][ T2148]  ? print_trace_line+0x393/0x6b0
[   70.142197][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   70.147155][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   70.152635][ T2148]  vfs_read+0x286/0x930
[   70.156808][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   70.161503][ T2148]  ? __kasan_check_write+0x14/0x20
[   70.166634][ T2148]  ? mutex_lock+0x93/0x1b0
[   70.171074][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   70.175943][ T2148]  ? __fdget_pos+0x2cd/0x380
[   70.180553][ T2148]  ? ksys_read+0x70/0x260
[   70.184919][ T2148]  ksys_read+0x14a/0x260
[   70.189187][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   70.193972][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   70.199644][ T2148]  __x64_sys_read+0x7b/0x90
[   70.204160][ T2148]  x64_sys_call+0x2f/0x9a0
[   70.208598][ T2148]  do_syscall_64+0x4c/0xa0
[   70.213042][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.217736][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.222435][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.228362][ T2148] RIP: 0033:0x7fb5f37a8f19
[   70.232812][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.252433][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.260866][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   70.268856][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   70.276839][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   70.284846][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.292833][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   70.300831][ T2148]  </TASK>
[   70.303861][ T2148] ---[ end trace 0000000000000000 ]---
[   70.309375][ T2148] ------------[ cut here ]------------
[   70.314853][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   70.325113][ T2148] Modules linked in:
[   70.329035][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   70.337832][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   70.347909][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   70.353734][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   70.373351][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   70.379446][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   70.387443][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   70.395425][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   70.403416][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   70.411399][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   70.419383][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   70.428327][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.434925][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   70.442922][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   70.450905][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   70.458908][ T2148] Call Trace:
[   70.462219][ T2148]  <TASK>
[   70.465170][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   70.470825][ T2148]  rb_advance_reader+0x2b/0x770
[   70.475718][ T2148]  ring_buffer_consume+0x1e7/0x370
[   70.480856][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   70.486509][ T2148]  ? print_trace_line+0x393/0x6b0
[   70.491567][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   70.496531][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   70.502025][ T2148]  vfs_read+0x286/0x930
[   70.506369][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   70.511061][ T2148]  ? __kasan_check_write+0x14/0x20
[   70.516185][ T2148]  ? mutex_lock+0x93/0x1b0
[   70.520620][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   70.525486][ T2148]  ? __fdget_pos+0x2cd/0x380
[   70.530115][ T2148]  ? ksys_read+0x70/0x260
[   70.534482][ T2148]  ksys_read+0x14a/0x260
[   70.538753][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   70.543540][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   70.549193][ T2148]  __x64_sys_read+0x7b/0x90
[   70.553718][ T2148]  x64_sys_call+0x2f/0x9a0
[   70.558158][ T2148]  do_syscall_64+0x4c/0xa0
[   70.562590][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.567304][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.572005][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.577914][ T2148] RIP: 0033:0x7fb5f37a8f19
[   70.582341][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.601960][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.610391][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   70.618373][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   70.626367][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   70.634384][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.642388][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   70.650391][ T2148]  </TASK>
[   70.653441][ T2148] ---[ end trace 0000000000000000 ]---
[   70.659316][ T2148] ------------[ cut here ]------------
[   70.664807][ T2148] WARNING: CPU: 0 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   70.675071][ T2148] Modules linked in:
[   70.678983][ T2148] CPU: 0 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   70.687756][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   70.697824][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   70.703646][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   70.723271][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010012
[   70.729362][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   70.737356][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   70.745341][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   70.753349][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   70.761341][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   70.769339][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   70.778286][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.784881][ T2148] CR2: 000000110c3000ac CR3: 0000000123690000 CR4: 00000000003506b0
[   70.792870][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   70.800856][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   70.808880][ T2148] Call Trace:
[   70.812178][ T2148]  <TASK>
[   70.815134][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   70.820815][ T2148]  ? __schedule+0xcbb/0x1700
[   70.825427][ T2148]  ? __kasan_check_write+0x14/0x20
[   70.830560][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   70.835262][ T2148]  rb_buffer_peek+0x5f/0x930
[   70.839868][ T2148]  ring_buffer_peek+0x184/0x3b0
[   70.844732][ T2148]  ? __kasan_check_read+0x11/0x20
[   70.849772][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   70.855160][ T2148]  ? _find_next_bit+0x8a/0x130
[   70.859948][ T2148]  __find_next_entry+0x33c/0x6c0
[   70.864922][ T2148]  ? trace_find_next_entry+0x380/0x380
[   70.870413][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   70.876099][ T2148]  ? print_trace_line+0x393/0x6b0
[   70.881143][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   70.886142][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   70.891625][ T2148]  vfs_read+0x286/0x930
[   70.895798][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   70.900493][ T2148]  ? __kasan_check_write+0x14/0x20
[   70.905629][ T2148]  ? mutex_lock+0x93/0x1b0
[   70.910073][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   70.914949][ T2148]  ? __fdget_pos+0x2cd/0x380
[   70.919561][ T2148]  ? ksys_read+0x70/0x260
[   70.923908][ T2148]  ksys_read+0x14a/0x260
[   70.928164][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   70.932942][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   70.938591][ T2148]  __x64_sys_read+0x7b/0x90
[   70.943116][ T2148]  x64_sys_call+0x2f/0x9a0
[   70.947549][ T2148]  do_syscall_64+0x4c/0xa0
[   70.951983][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.956692][ T2148]  ? clear_bhb_loop+0x30/0x80
[   70.961403][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.967313][ T2148] RIP: 0033:0x7fb5f37a8f19
[   70.971742][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.991360][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.999794][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   71.007780][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   71.015764][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   71.023743][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.031724][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   71.039715][ T2148]  </TASK>
[   71.042743][ T2148] ---[ end trace 0000000000000000 ]---
[   71.051029][ T2148] ------------[ cut here ]------------
[   71.056547][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   71.066836][ T2148] Modules linked in:
[   71.070757][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   71.079544][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   71.089637][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   71.095474][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   71.115099][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   71.121185][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   71.129174][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   71.137162][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   71.145150][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   71.153133][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   71.161127][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   71.170095][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.176694][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   71.184687][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   71.192669][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   71.200661][ T2148] Call Trace:
[   71.203955][ T2148]  <TASK>
[   71.206905][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   71.212562][ T2148]  ? __kasan_check_write+0x14/0x20
[   71.217698][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   71.222390][ T2148]  rb_buffer_peek+0x5f/0x930
[   71.226999][ T2148]  ring_buffer_consume+0x1aa/0x370
[   71.232131][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   71.237787][ T2148]  ? print_trace_line+0x393/0x6b0
[   71.242826][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   71.247786][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   71.253264][ T2148]  vfs_read+0x286/0x930
[   71.257440][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   71.262127][ T2148]  ? __kasan_check_write+0x14/0x20
[   71.267256][ T2148]  ? mutex_lock+0x93/0x1b0
[   71.271686][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   71.276563][ T2148]  ? __fdget_pos+0x2cd/0x380
[   71.281177][ T2148]  ? ksys_read+0x70/0x260
[   71.285525][ T2148]  ksys_read+0x14a/0x260
[   71.289789][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   71.294571][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   71.300221][ T2148]  __x64_sys_read+0x7b/0x90
[   71.304740][ T2148]  x64_sys_call+0x2f/0x9a0
[   71.309178][ T2148]  do_syscall_64+0x4c/0xa0
[   71.313608][ T2148]  ? clear_bhb_loop+0x30/0x80
[   71.318301][ T2148]  ? clear_bhb_loop+0x30/0x80
[   71.323021][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.328946][ T2148] RIP: 0033:0x7fb5f37a8f19
[   71.333376][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.352994][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   71.361426][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   71.369417][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   71.377491][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   71.385484][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.393473][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   71.401470][ T2148]  </TASK>
[   71.404509][ T2148] ---[ end trace 0000000000000000 ]---
[   71.410038][ T2148] ------------[ cut here ]------------
[   71.415502][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   71.425789][ T2148] Modules linked in:
[   71.429692][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   71.438465][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   71.448564][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   71.454390][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   71.474007][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   71.480094][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   71.488098][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   71.496090][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   71.504084][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   71.512073][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   71.520063][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   71.529013][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.535611][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   71.543603][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   71.551589][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   71.559581][ T2148] Call Trace:
[   71.562872][ T2148]  <TASK>
[   71.565819][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   71.571478][ T2148]  rb_advance_reader+0x2b/0x770
[   71.576367][ T2148]  ring_buffer_consume+0x1e7/0x370
[   71.581498][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   71.587160][ T2148]  ? print_trace_line+0x393/0x6b0
[   71.592213][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   71.597181][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   71.602667][ T2148]  vfs_read+0x286/0x930
[   71.606850][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   71.611560][ T2148]  ? __kasan_check_write+0x14/0x20
[   71.616693][ T2148]  ? mutex_lock+0x93/0x1b0
[   71.621136][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   71.626021][ T2148]  ? __fdget_pos+0x2cd/0x380
[   71.630637][ T2148]  ? ksys_read+0x70/0x260
[   71.634986][ T2148]  ksys_read+0x14a/0x260
[   71.639246][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   71.644028][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   71.649706][ T2148]  __x64_sys_read+0x7b/0x90
[   71.654239][ T2148]  x64_sys_call+0x2f/0x9a0
[   71.658685][ T2148]  do_syscall_64+0x4c/0xa0
[   71.663129][ T2148]  ? clear_bhb_loop+0x30/0x80
[   71.667829][ T2148]  ? clear_bhb_loop+0x30/0x80
[   71.672525][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.678440][ T2148] RIP: 0033:0x7fb5f37a8f19
[   71.682874][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.702499][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   71.711023][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   71.719012][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   71.727001][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   71.734987][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.742968][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   71.750959][ T2148]  </TASK>
[   71.753993][ T2148] ---[ end trace 0000000000000000 ]---
[   71.760400][ T2148] ------------[ cut here ]------------
[   71.765890][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   71.776163][ T2148] Modules linked in:
[   71.780073][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   71.788833][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   71.798894][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   71.804708][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   71.824316][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   71.830386][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   71.838373][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   71.846349][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   71.854335][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   71.862322][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   71.870315][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   71.879254][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.885836][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   71.893812][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   71.901783][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   71.907006][   T19] usb 9-1: device descriptor read/64, error -32
[   71.909757][ T2148] Call Trace:
[   71.909766][ T2148]  <TASK>
[   71.922262][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   71.927909][ T2148]  ? __schedule+0xcbb/0x1700
[   71.932507][ T2148]  ? __kasan_check_write+0x14/0x20
[   71.937626][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   71.942305][ T2148]  rb_buffer_peek+0x5f/0x930
[   71.946906][ T2148]  ring_buffer_peek+0x184/0x3b0
[   71.951763][ T2148]  ? __kasan_check_read+0x11/0x20
[   71.956809][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   71.962199][ T2148]  ? _find_next_bit+0x8a/0x130
[   71.966970][ T2148]  __find_next_entry+0x33c/0x6c0
[   71.971928][ T2148]  ? trace_find_next_entry+0x380/0x380
[   71.977399][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   71.983036][ T2148]  ? print_trace_line+0x393/0x6b0
[   71.988059][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   71.993029][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   71.998493][ T2148]  vfs_read+0x286/0x930
[   72.002652][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   72.007342][ T2148]  ? __kasan_check_write+0x14/0x20
[   72.012472][ T2148]  ? mutex_lock+0x93/0x1b0
[   72.016919][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   72.021790][ T2148]  ? __fdget_pos+0x2cd/0x380
[   72.026381][ T2148]  ? ksys_read+0x70/0x260
[   72.030712][ T2148]  ksys_read+0x14a/0x260
[   72.034971][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   72.039740][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   72.045383][ T2148]  __x64_sys_read+0x7b/0x90
[   72.049909][ T2148]  x64_sys_call+0x2f/0x9a0
[   72.054343][ T2148]  do_syscall_64+0x4c/0xa0
[   72.058760][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.063462][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.068149][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.074061][ T2148] RIP: 0033:0x7fb5f37a8f19
[   72.078477][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.098086][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   72.106504][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   72.114481][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   72.122458][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   72.130697][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.138672][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   72.146648][ T2148]  </TASK>
[   72.149666][ T2148] ---[ end trace 0000000000000000 ]---
[   72.157327][ T2148] ------------[ cut here ]------------
[   72.162820][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   72.173102][ T2148] Modules linked in:
[   72.176935][   T19] usb 9-1: device descriptor read/64, error -32
[   72.177011][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   72.192023][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   72.202101][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   72.207953][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   72.227584][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   72.233655][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   72.241626][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   72.249596][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   72.257563][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   72.265535][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   72.273504][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.282431][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.289188][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   72.297169][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.305157][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   72.313124][ T2148] Call Trace:
[   72.316395][ T2148]  <TASK>
[   72.319322][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   72.324959][ T2148]  ? __kasan_check_write+0x14/0x20
[   72.330071][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   72.334749][ T2148]  rb_buffer_peek+0x5f/0x930
[   72.339691][ T2148]  ring_buffer_consume+0x1aa/0x370
[   72.344815][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   72.350452][ T2148]  ? print_trace_line+0x393/0x6b0
[   72.355484][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   72.360433][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   72.365899][ T2148]  vfs_read+0x286/0x930
[   72.370064][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   72.374742][ T2148]  ? __kasan_check_write+0x14/0x20
[   72.379863][ T2148]  ? mutex_lock+0x93/0x1b0
[   72.384305][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   72.389165][ T2148]  ? __fdget_pos+0x2cd/0x380
[   72.393755][ T2148]  ? ksys_read+0x70/0x260
[   72.398087][ T2148]  ksys_read+0x14a/0x260
[   72.402331][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   72.407103][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   72.412783][ T2148]  __x64_sys_read+0x7b/0x90
[   72.417295][ T2148]  x64_sys_call+0x2f/0x9a0
[   72.421716][ T2148]  do_syscall_64+0x4c/0xa0
[   72.426134][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.430833][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.435526][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.441421][ T2148] RIP: 0033:0x7fb5f37a8f19
[   72.445845][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.465454][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   72.473885][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   72.481857][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   72.489836][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   72.497813][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.505808][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   72.513787][ T2148]  </TASK>
[   72.516811][ T2148] ---[ end trace 0000000000000000 ]---
[   72.522331][ T2148] ------------[ cut here ]------------
[   72.527797][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   72.538150][ T2148] Modules linked in:
[   72.542064][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   72.550830][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   72.560887][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   72.566701][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   72.586308][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   72.592389][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   72.600363][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   72.608331][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   72.616320][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   72.624292][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   72.632265][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.641213][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.647798][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   72.655781][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.663767][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   72.671751][ T2148] Call Trace:
[   72.675041][ T2148]  <TASK>
[   72.677978][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   72.683626][ T2148]  rb_advance_reader+0x2b/0x770
[   72.688572][ T2148]  ring_buffer_consume+0x1e7/0x370
[   72.693687][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   72.699323][ T2148]  ? print_trace_line+0x393/0x6b0
[   72.704346][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   72.709292][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   72.714755][ T2148]  vfs_read+0x286/0x930
[   72.718907][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   72.723582][ T2148]  ? __kasan_check_write+0x14/0x20
[   72.728691][ T2148]  ? mutex_lock+0x93/0x1b0
[   72.733113][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   72.737963][ T2148]  ? __fdget_pos+0x2cd/0x380
[   72.742638][ T2148]  ? ksys_read+0x70/0x260
[   72.746970][ T2148]  ksys_read+0x14a/0x260
[   72.751239][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   72.756021][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   72.761652][ T2148]  __x64_sys_read+0x7b/0x90
[   72.766151][ T2148]  x64_sys_call+0x2f/0x9a0
[   72.770568][ T2148]  do_syscall_64+0x4c/0xa0
[   72.774986][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.779686][ T2148]  ? clear_bhb_loop+0x30/0x80
[   72.784386][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.790312][ T2148] RIP: 0033:0x7fb5f37a8f19
[   72.794740][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.814355][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   72.822796][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   72.830801][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   72.838792][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   72.846787][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.854775][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   72.862755][ T2148]  </TASK>
[   72.865779][ T2148] ---[ end trace 0000000000000000 ]---
[   72.871629][ T2148] ------------[ cut here ]------------
[   72.877382][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   72.887662][ T2148] Modules linked in:
[   72.891582][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   72.900369][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   72.910441][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   72.916274][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   72.935908][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   72.941995][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   72.950005][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   72.958083][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   72.966094][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   72.974079][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   72.982072][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   72.991019][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.997621][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   73.005607][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   73.013592][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   73.021580][ T2148] Call Trace:
[   73.024871][ T2148]  <TASK>
[   73.027819][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   73.033493][ T2148]  ? __schedule+0xcbb/0x1700
[   73.038105][ T2148]  ? __kasan_check_write+0x14/0x20
[   73.043230][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   73.047923][ T2148]  rb_buffer_peek+0x5f/0x930
[   73.052531][ T2148]  ring_buffer_peek+0x184/0x3b0
[   73.057395][ T2148]  ? __kasan_check_read+0x11/0x20
[   73.062459][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   73.067851][ T2148]  ? _find_next_bit+0x8a/0x130
[   73.072633][ T2148]  __find_next_entry+0x33c/0x6c0
[   73.077597][ T2148]  ? trace_find_next_entry+0x380/0x380
[   73.083083][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   73.088730][ T2148]  ? print_trace_line+0x393/0x6b0
[   73.093769][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   73.098736][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   73.104240][ T2148]  vfs_read+0x286/0x930
[   73.108417][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   73.113108][ T2148]  ? __kasan_check_write+0x14/0x20
[   73.118239][ T2148]  ? mutex_lock+0x93/0x1b0
[   73.122685][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   73.127579][ T2148]  ? __fdget_pos+0x2cd/0x380
[   73.132199][ T2148]  ? ksys_read+0x70/0x260
[   73.136547][ T2148]  ksys_read+0x14a/0x260
[   73.140896][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   73.145703][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   73.151364][ T2148]  __x64_sys_read+0x7b/0x90
[   73.155890][ T2148]  x64_sys_call+0x2f/0x9a0
[   73.160324][ T2148]  do_syscall_64+0x4c/0xa0
[   73.164756][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.169460][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.174160][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.180072][ T2148] RIP: 0033:0x7fb5f37a8f19
[   73.184509][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.204126][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.212556][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   73.220544][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   73.228535][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   73.236526][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.244515][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   73.252507][ T2148]  </TASK>
[   73.255535][ T2148] ---[ end trace 0000000000000000 ]---
[   73.263196][ T2148] ------------[ cut here ]------------
[   73.268690][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   73.278965][ T2148] Modules linked in:
[   73.282873][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   73.291647][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   73.301712][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   73.307547][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   73.327262][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   73.333352][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   73.341339][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   73.349329][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   73.357404][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   73.365393][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   73.373405][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   73.382371][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   73.388966][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   73.396969][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   73.404950][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   73.412957][ T2148] Call Trace:
[   73.416268][ T2148]  <TASK>
[   73.419218][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   73.424877][ T2148]  ? __kasan_check_write+0x14/0x20
[   73.430064][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   73.434767][ T2148]  rb_buffer_peek+0x5f/0x930
[   73.439408][ T2148]  ring_buffer_consume+0x1aa/0x370
[   73.444542][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   73.450315][ T2148]  ? print_trace_line+0x393/0x6b0
[   73.455358][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   73.460338][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   73.465827][ T2148]  vfs_read+0x286/0x930
[   73.470093][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   73.474790][ T2148]  ? __kasan_check_write+0x14/0x20
[   73.479939][ T2148]  ? mutex_lock+0x93/0x1b0
[   73.484375][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   73.489264][ T2148]  ? __fdget_pos+0x2cd/0x380
[   73.493873][ T2148]  ? ksys_read+0x70/0x260
[   73.498217][ T2148]  ksys_read+0x14a/0x260
[   73.502482][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   73.507264][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   73.512918][ T2148]  __x64_sys_read+0x7b/0x90
[   73.517440][ T2148]  x64_sys_call+0x2f/0x9a0
[   73.521885][ T2148]  do_syscall_64+0x4c/0xa0
[   73.526318][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.531021][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.535719][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.541725][ T2148] RIP: 0033:0x7fb5f37a8f19
[   73.546163][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.565813][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.574243][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   73.582228][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   73.590229][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   73.598250][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.606318][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   73.614308][ T2148]  </TASK>
[   73.617353][ T2148] ---[ end trace 0000000000000000 ]---
[   73.622886][ T2148] ------------[ cut here ]------------
[   73.628347][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   73.638610][ T2148] Modules linked in:
[   73.642519][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   73.651289][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   73.661358][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   73.667191][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   73.686813][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   73.692906][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   73.700900][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   73.708977][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   73.716965][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   73.724958][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   73.732947][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   73.741895][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   73.748592][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   73.756584][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   73.764590][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   73.772578][ T2148] Call Trace:
[   73.775874][ T2148]  <TASK>
[   73.778826][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   73.784483][ T2148]  rb_advance_reader+0x2b/0x770
[   73.789351][ T2148]  ring_buffer_consume+0x1e7/0x370
[   73.794481][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   73.800134][ T2148]  ? print_trace_line+0x393/0x6b0
[   73.805171][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   73.810154][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   73.815635][ T2148]  vfs_read+0x286/0x930
[   73.819895][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   73.824587][ T2148]  ? __kasan_check_write+0x14/0x20
[   73.829714][ T2148]  ? mutex_lock+0x93/0x1b0
[   73.834342][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   73.839233][ T2148]  ? __fdget_pos+0x2cd/0x380
[   73.843842][ T2148]  ? ksys_read+0x70/0x260
[   73.848187][ T2148]  ksys_read+0x14a/0x260
[   73.852452][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   73.857317][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   73.862966][ T2148]  __x64_sys_read+0x7b/0x90
[   73.867483][ T2148]  x64_sys_call+0x2f/0x9a0
[   73.871932][ T2148]  do_syscall_64+0x4c/0xa0
[   73.876384][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.881083][ T2148]  ? clear_bhb_loop+0x30/0x80
[   73.885781][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.891691][ T2148] RIP: 0033:0x7fb5f37a8f19
[   73.896124][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.915742][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.924171][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   73.932161][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   73.940153][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   73.948148][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.956328][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   73.964325][ T2148]  </TASK>
[   73.967357][ T2148] ---[ end trace 0000000000000000 ]---
[   73.974261][ T2148] ------------[ cut here ]------------
[   73.979748][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   73.990036][ T2148] Modules linked in:
[   73.993963][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   74.002781][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   74.012867][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   74.018707][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   74.038347][ T2148] RSP: 0018:ffffc90000ba7820 EFLAGS: 00010002
[   74.044450][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   74.052458][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   74.060446][ T2148] RBP: ffffc90000ba7990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   74.068434][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   74.076434][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   74.084451][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   74.093394][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   74.099995][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   74.107984][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   74.115968][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   74.123954][ T2148] Call Trace:
[   74.127245][ T2148]  <TASK>
[   74.130198][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   74.135851][ T2148]  ? __schedule+0xcbb/0x1700
[   74.140472][ T2148]  ? __kasan_check_write+0x14/0x20
[   74.145599][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   74.150290][ T2148]  rb_buffer_peek+0x5f/0x930
[   74.154901][ T2148]  ring_buffer_peek+0x184/0x3b0
[   74.159770][ T2148]  ? __kasan_check_read+0x11/0x20
[   74.164816][ T2148]  ? __cfi_ring_buffer_peek+0x10/0x10
[   74.170204][ T2148]  ? _find_next_bit+0x8a/0x130
[   74.174991][ T2148]  __find_next_entry+0x33c/0x6c0
[   74.179976][ T2148]  ? trace_find_next_entry+0x380/0x380
[   74.185458][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   74.191105][ T2148]  ? print_trace_line+0x393/0x6b0
[   74.196147][ T2148]  tracing_read_pipe+0x3d2/0xaf0
[   74.201108][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   74.206592][ T2148]  vfs_read+0x286/0x930
[   74.210946][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   74.215646][ T2148]  ? __kasan_check_write+0x14/0x20
[   74.220787][ T2148]  ? mutex_lock+0x93/0x1b0
[   74.225228][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   74.230368][ T2148]  ? __fdget_pos+0x2cd/0x380
[   74.235009][ T2148]  ? ksys_read+0x70/0x260
[   74.239360][ T2148]  ksys_read+0x14a/0x260
[   74.243625][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   74.248406][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   74.254058][ T2148]  __x64_sys_read+0x7b/0x90
[   74.258578][ T2148]  x64_sys_call+0x2f/0x9a0
[   74.263016][ T2148]  do_syscall_64+0x4c/0xa0
[   74.267444][ T2148]  ? clear_bhb_loop+0x30/0x80
[   74.272164][ T2148]  ? clear_bhb_loop+0x30/0x80
[   74.276864][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.282776][ T2148] RIP: 0033:0x7fb5f37a8f19
[   74.287296][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.306921][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   74.315354][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   74.323600][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   74.331593][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   74.339670][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.347861][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   74.355856][ T2148]  </TASK>
[   74.358896][ T2148] ---[ end trace 0000000000000000 ]---
[   74.366821][ T2148] ------------[ cut here ]------------
[   74.372305][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   74.382576][ T2148] Modules linked in:
[   74.386466][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   74.395226][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   74.405287][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   74.411110][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   74.430723][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010002
[   74.436822][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   74.444835][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   74.452826][ T2148] RBP: ffffc90000ba7ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   74.460893][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   74.468893][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   74.476902][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   74.486027][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   74.492651][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   74.500736][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   74.508709][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   74.516681][ T2148] Call Trace:
[   74.519958][ T2148]  <TASK>
[   74.522898][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   74.528540][ T2148]  ? __kasan_check_write+0x14/0x20
[   74.533655][ T2148]  ? _raw_spin_lock+0x94/0xf0
[   74.538335][ T2148]  rb_buffer_peek+0x5f/0x930
[   74.542927][ T2148]  ring_buffer_consume+0x1aa/0x370
[   74.548038][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   74.553674][ T2148]  ? print_trace_line+0x393/0x6b0
[   74.558702][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   74.563652][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   74.569110][ T2148]  vfs_read+0x286/0x930
[   74.573265][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   74.577939][ T2148]  ? __kasan_check_write+0x14/0x20
[   74.583051][ T2148]  ? mutex_lock+0x93/0x1b0
[   74.587491][ T2148]  ? __cfi_mutex_lock+0x10/0x10
[   74.592363][ T2148]  ? __fdget_pos+0x2cd/0x380
[   74.596959][ T2148]  ? ksys_read+0x70/0x260
[   74.601289][ T2148]  ksys_read+0x14a/0x260
[   74.605532][ T2148]  ? __cfi_ksys_read+0x10/0x10
[   74.610293][ T2148]  ? fpregs_restore_userregs+0x128/0x260
[   74.615927][ T2148]  __x64_sys_read+0x7b/0x90
[   74.620428][ T2148]  x64_sys_call+0x2f/0x9a0
[   74.624849][ T2148]  do_syscall_64+0x4c/0xa0
[   74.629265][ T2148]  ? clear_bhb_loop+0x30/0x80
[   74.633959][ T2148]  ? clear_bhb_loop+0x30/0x80
[   74.638644][ T2148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.644538][ T2148] RIP: 0033:0x7fb5f37a8f19
[   74.648955][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.668558][ T2148] RSP: 002b:00007fb5f4713028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   74.676972][ T2148] RAX: ffffffffffffffda RBX: 00007fb5f3a25fa0 RCX: 00007fb5f37a8f19
[   74.684959][ T2148] RDX: 0000000000004000 RSI: 0000200000005c80 RDI: 0000000000000003
[   74.692928][ T2148] RBP: 00007fb5f3837f6d R08: 0000000000000000 R09: 0000000000000000
[   74.700901][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.708869][ T2148] R13: 00007fb5f3a26038 R14: 00007fb5f3a25fa0 R15: 00007ffde4c93b28
[   74.716853][ T2148]  </TASK>
[   74.719877][ T2148] ---[ end trace 0000000000000000 ]---
[   74.725382][ T2148] ------------[ cut here ]------------
[   74.730825][ T2148] WARNING: CPU: 1 PID: 2148 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[   74.741077][ T2148] Modules linked in:
[   74.744964][ T2148] CPU: 1 PID: 2148 Comm: syz.7.752 Tainted: G    B   W          syzkaller #0
[   74.753722][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   74.763771][ T2148] RIP: 0010:rb_get_reader_page+0xada/0xc60
[   74.769586][ T2148] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 ef 3f 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 7a 42 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[   74.789194][ T2148] RSP: 0018:ffffc90000ba7940 EFLAGS: 00010006
[   74.795265][ T2148] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[   74.803234][ T2148] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   74.811223][ T2148] RBP: ffffc90000ba7ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   74.819468][ T2148] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[   74.827450][ T2148] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000148
[   74.835448][ T2148] FS:  00007fb5f47136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   74.844378][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   74.850961][ T2148] CR2: 0000558210ff8d70 CR3: 0000000123690000 CR4: 00000000003506a0
[   74.858940][ T2148] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[   74.866914][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   74.874904][ T2148] Call Trace:
[   74.878202][ T2148]  <TASK>
[   74.881151][ T2148]  ? ring_buffer_read_page+0x1260/0x1260
[   74.886820][ T2148]  rb_advance_reader+0x2b/0x770
[   74.891693][ T2148]  ring_buffer_consume+0x1e7/0x370
[   74.896825][ T2148]  ? __cfi_ring_buffer_consume+0x10/0x10
[   74.902471][ T2148]  ? print_trace_line+0x393/0x6b0
[   74.907504][ T2148]  tracing_read_pipe+0x5b3/0xaf0
[   74.912458][ T2148]  ? __cfi_tracing_read_pipe+0x10/0x10
[   74.917930][ T2148]  vfs_read+0x286/0x930
[   74.922115][ T2148]  ? __cfi_vfs_read+0x10/0x10
[   74.926800][ T2148]  ? __kasan_check_write+0x14/0x20