last executing test programs: 22.900109511s ago: executing program 0 (id=45): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0xfffffffffffffef7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 22.858450743s ago: executing program 0 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x3, r3, 0x3, 0x80000}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r5, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 22.006504633s ago: executing program 2 (id=60): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x539, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7}) 21.956238805s ago: executing program 0 (id=61): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 21.461255927s ago: executing program 0 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) 21.301649771s ago: executing program 0 (id=67): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='10485', 0x5) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) 21.279061082s ago: executing program 2 (id=69): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_gettime(0x2, &(0x7f0000000900)) 21.054375297s ago: executing program 2 (id=71): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) io_setup(0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1) 20.95945669s ago: executing program 0 (id=74): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.077025692s ago: executing program 2 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 19.821242178s ago: executing program 2 (id=84): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='10485', 0x5) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) 19.548259955s ago: executing program 2 (id=87): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) sched_setattr(0x0, &(0x7f0000000000)={0x82, 0x3, 0x3, 0x2, 0x1800000, 0x6, 0x7, 0x4, 0x7, 0xc329}, 0x0) 5.896074114s ago: executing program 32 (id=74): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.217477595s ago: executing program 33 (id=87): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) sched_setattr(0x0, &(0x7f0000000000)={0x82, 0x3, 0x3, 0x2, 0x1800000, 0x6, 0x7, 0x4, 0x7, 0xc329}, 0x0) 3.405407485s ago: executing program 4 (id=264): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL_GET(0x22) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x56}, 0x28) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000440)) 2.254757954s ago: executing program 4 (id=270): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x10001, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6, 0x0, 0x0, 0x0, 0x400000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0xd, {{0x0, 0x5, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 1.955710462s ago: executing program 1 (id=273): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.901285803s ago: executing program 4 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x3, r3, 0x3, 0x80000}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 1.895269933s ago: executing program 1 (id=275): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x9, "a6b73d0c4e4bcb7cffa51a00d8046d6fa4d71a9a9a5b2f4d45d026abfe6c72c4", "850bdb54a923bd8777061febd8ab77ea", {"ae40248fd73e6116d10e7d48d84d58e1", "bf006a15f77655df3542f5fe2b0dbfd5"}}}}}}}, 0x0) 1.777855796s ago: executing program 3 (id=276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r5, &(0x7f00000004c0)='\n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) 1.681526778s ago: executing program 1 (id=277): syz_open_procfs(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) dup(r0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000014}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1.538785712s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x3, r3, 0x3, 0x80000}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r4, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 1.363759406s ago: executing program 3 (id=283): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, &(0x7f00000003c0), 0x514) 1.253379569s ago: executing program 5 (id=285): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9fff, 0xe, "3d52e3ff00"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x44, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.099787323s ago: executing program 3 (id=286): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x6020400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="9ccd41dcbda6f9", 0x7}], 0x1, 0x8) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340), 0x0, 0x0, 0x0) msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) 942.176397ms ago: executing program 4 (id=287): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 890.944358ms ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:fb', 0xc) 809.11994ms ago: executing program 3 (id=289): request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0x0) 705.805953ms ago: executing program 4 (id=290): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) socket(0x15, 0x5, 0x0) 705.646493ms ago: executing program 3 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000000300), 0x1000) 403.49728ms ago: executing program 1 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) 376.84061ms ago: executing program 5 (id=293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x6}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x5}]}]}, 0x1bc}}, 0x20000000) 298.278112ms ago: executing program 4 (id=294): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x15, 0x0, 0x8, 0xfffffffffe000001}) 253.265753ms ago: executing program 5 (id=295): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x42, 0xa, 0x9, 0x0, 0x10}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 131.501967ms ago: executing program 5 (id=296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24042, 0x1fc) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4607fc3c40010001000000000002003e000700000094020000000000004000000000000000dd0100000000000013000000000038000100000033030000030000000000000004000000000000000000000001000000c801000000000000e8"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 121.239847ms ago: executing program 5 (id=297): r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f0000000400)=""/191, 0xbf) 55.297769ms ago: executing program 5 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000004040)=[{0x0}, {0x0, 0x420}], 0x2, 0x0, 0x0, 0x8000}, 0x8880) 0s ago: executing program 1 (id=299): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x101c08a, &(0x7f0000001140)=ANY=[], 0x6, 0x2c5, &(0x7f0000000440)="$eJzs3U+LG2UcB/Df7GYnoyLJwZMIHbAHT8XtTbxkkRbEPVlyUA+62BZkE4QWCv7B2JNXLx48+AoEwRfSi+9A8Cp4s0LhkZnMbCY1hmQxlXY/n8s++8zznfk9mSU7e8hvP3plenqzjNv3v/w1iiKLvVGM4mEWw9iL1texZPRtAABPs4cpxR9pbptcFhHF7soCAHZos9//vcXw5ydSFgCwQzfee/+do+Pja+8WUcT16Tf3xtVf9tXX+fGj2/FJTOJWvB6DeBRRPygcRP20UA2vp5RmvbIyjMvT2b1xlZx++KA5/9HvEXX+MAYxrKfOnjbq/NvH1w7LuU5+VtXxfHP9UZW/GoN46Sy8lL+6Ih/jPF57tVP/lRjELx/HpzGJm3URi/xXh2X5Vvruzy8+qMqr8tmLMe7X6xbS/hO+NQAAAAAAAAAAAAAAAAAAAAAAPMOuNL1z+lFeisvTaqrpv7P/KPLq27I1XO7PM89n7Ym6/YFSSrMUP3RaCpapWbjI9+LlXrexIAAAAAAAAAAAAAAAAAAAAFxcdz/7/PRkMrl15z8ZtN0AehHx142I855n1Jm5FOsX95trnkwme81wac2DvDsT++2aLGJtGdUmzlN8atoebJF67vGa28GPP1Ub3PA87e7PZt5YvcGD8+1rm0H703V6kq2+Vj/amaJ5ob7PIxZr8tjwWvm/HUpb3YJ85aHB1nvPX6gHszVrIltX2Ju/zV+5ZiZ7fBd5/aqujB80g058eU2x0X2PYh7/53tFVnfr6O/kfQgAAAAAAAAAAAAAAAAAAOh+/n/Fwftro3vJR4EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEYs/v//FoNZE95gcR537v7PWwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAC+DsAAP//c8pVRg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x105040, 0x198) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file2\x00', 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.064930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.074482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.083243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.091737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.100657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.109112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.120017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.128599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.157417][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.165780][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 26.167771][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.183081][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.190842][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.198635][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.207212][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.215266][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.223894][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.232164][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.240198][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.248815][ T289] device veth0_vlan entered promiscuous mode [ 26.259684][ T286] device veth0_vlan entered promiscuous mode [ 26.272995][ T285] device veth1_macvtap entered promiscuous mode [ 26.286360][ T292] device veth1_macvtap entered promiscuous mode [ 26.295350][ T310] loop4: detected capacity change from 0 to 512 [ 26.305814][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.316341][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.325267][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.325270][ T310] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.349346][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.364950][ T289] device veth1_macvtap entered promiscuous mode [ 26.382734][ T286] device veth1_macvtap entered promiscuous mode [ 26.392048][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.403337][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.414802][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.424315][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.434381][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.444348][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.454732][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.472986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.481395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.491919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.500629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.510706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.520166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.535832][ T312] Zero length message leads to an empty skb [ 26.554116][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.574314][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.619964][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.635583][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.750151][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.757768][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.897183][ T326] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 26.916761][ T318] loop2: detected capacity change from 0 to 4096 [ 26.951523][ T320] syz.1.2 (320) used greatest stack depth: 21016 bytes left [ 26.988228][ T333] loop4: detected capacity change from 0 to 128 [ 26.997787][ T330] ------------[ cut here ]------------ [ 27.036248][ T330] WARNING: CPU: 0 PID: 330 at crypto/rsa-pkcs1pad.c:538 pkcs1pad_verify+0x50c/0x680 [ 27.047768][ T330] Modules linked in: [ 27.052006][ T330] CPU: 1 PID: 330 Comm: syz.1.11 Not tainted syzkaller #0 [ 27.061104][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.072008][ T330] RIP: 0010:pkcs1pad_verify+0x50c/0x680 [ 27.104582][ T330] Code: 44 89 f6 e8 96 0e 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 82 eb 39 ff 0f 0b b8 ea ff ff ff eb e3 e8 74 eb 39 ff <0f> 0b b8 ea ff ff ff eb d5 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c [ 27.126064][ T330] RSP: 0018:ffffc900077f7728 EFLAGS: 00010287 [ 27.128474][ T333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.133368][ T330] RAX: ffffffff822fd00c RBX: ffff88810ef66a00 RCX: 0000000000080000 [ 27.151919][ T330] RDX: ffffc9000133b000 RSI: 0000000000000862 RDI: 0000000000000863 [ 27.160378][ T330] RBP: ffffc900077f7770 R08: ffffc900077f78af R09: ffffc900077f7898 [ 27.168677][ T330] R10: dffffc0000000000 R11: fffff52000efef16 R12: 0000000000000000 [ 27.176955][ T330] R13: ffff88810f9c6f80 R14: ffff88810ef66a44 R15: dffffc0000000000 [ 27.185328][ T330] FS: 00007f284a8a06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.191443][ T333] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.196864][ T330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.212065][ T330] CR2: 00007f42af484960 CR3: 0000000128a72000 CR4: 00000000003506b0 [ 27.223086][ T330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.231798][ T330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.240810][ T330] Call Trace: [ 27.244245][ T330] [ 27.247299][ T330] ? sg_init_one+0x93/0x140 [ 27.251932][ T330] public_key_verify_signature+0x992/0xec0 [ 27.258024][ T330] ? public_key_free+0x80/0x80 [ 27.262963][ T330] ? __kasan_kmalloc+0xe6/0x100 [ 27.268350][ T330] ? __kasan_kmalloc+0xd4/0x100 [ 27.273344][ T330] ? __kmalloc_track_caller+0x13c/0x2c0 [ 27.283929][ T330] ? x64_sys_call+0x648/0x9a0 [ 27.290166][ T330] ? do_syscall_64+0x4c/0xa0 [ 27.294919][ T330] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.303359][ T330] ? software_key_eds_op+0xb40/0xb40 [ 27.316840][ T330] public_key_verify_signature_2+0x43/0x50 [ 27.333672][ T330] verify_signature+0xd6/0x100 [ 27.338873][ T330] asymmetric_key_verify_signature+0x171/0x210 [ 27.345315][ T330] ? asymmetric_lookup_restriction+0x4f0/0x4f0 [ 27.352586][ T330] ? __kasan_check_write+0x14/0x20 [ 27.358347][ T330] ? _copy_from_user+0x95/0xd0 [ 27.363454][ T330] keyctl_pkey_verify+0x40e/0x430 [ 27.369045][ T330] ? keyctl_pkey_params_get_2+0x490/0x490 [ 27.375125][ T330] ? kasan_quarantine_put+0x34/0x190 [ 27.382919][ T330] ? kfree+0xc4/0x270 [ 27.387522][ T330] ? __kasan_slab_free+0x11/0x20 [ 27.392765][ T330] ? slab_free_freelist_hook+0xc2/0x190 [ 27.421802][ T330] __se_sys_keyctl+0x764/0xdb0 [ 27.438450][ T330] ? __x64_sys_keyctl+0xd0/0xd0 [ 27.451030][ T330] ? btf_new_fd+0x5c7/0x930 [ 27.462875][ T330] ? __se_sys_futex+0x135/0x330 [ 27.468122][ T330] ? __x64_sys_futex+0x100/0x100 [ 27.473422][ T330] ? __kasan_check_write+0x14/0x20 [ 27.484311][ T330] __x64_sys_keyctl+0xbf/0xd0 [ 27.489401][ T330] x64_sys_call+0x648/0x9a0 [ 27.494086][ T330] do_syscall_64+0x4c/0xa0 [ 27.501168][ T330] ? clear_bhb_loop+0x50/0xa0 [ 27.506652][ T330] ? clear_bhb_loop+0x50/0xa0 [ 27.513543][ T330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.520101][ T330] RIP: 0033:0x7f284be47159 [ 27.524999][ T330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.547647][ T350] loop7: detected capacity change from 0 to 7 [ 27.555781][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.567013][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.575338][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.588387][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.596580][ T309] loop7: unable to read partition table [ 27.604370][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.615353][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.623573][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.634560][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.642951][ T350] loop7: unable to read partition table [ 27.648854][ T350] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 27.651380][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.667827][ T330] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 [ 27.674610][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.689323][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.695478][ T330] ORIG_RAX: 00000000000000fa [ 27.700382][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.707370][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.725004][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.734056][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.746688][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.758309][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.769489][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 27.781156][ T330] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 27.789911][ T330] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 27.798275][ T330] RBP: 00007f284bede024 R08: 0000200000000440 R09: 0000000000000000 [ 27.841888][ T330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.856375][ T330] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 27.866168][ T330] [ 27.869324][ T330] ---[ end trace bd39ae3f3f60eaf2 ]--- [ 27.987668][ T362] loop3: detected capacity change from 0 to 128 [ 27.995374][ T352] loop4: detected capacity change from 0 to 8192 [ 28.006368][ T352] ======================================================= [ 28.006368][ T352] WARNING: The mand mount option has been deprecated and [ 28.006368][ T352] and is ignored by this kernel. Remove the mand [ 28.006368][ T352] option from the mount to silence this warning. [ 28.006368][ T352] ======================================================= [ 28.068366][ T365] FAULT_INJECTION: forcing a failure. [ 28.068366][ T365] name failslab, interval 1, probability 0, space 0, times 1 [ 28.089049][ T365] CPU: 0 PID: 365 Comm: syz.1.23 Tainted: G W syzkaller #0 [ 28.097628][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.107731][ T365] Call Trace: [ 28.111051][ T365] [ 28.114030][ T365] __dump_stack+0x21/0x30 [ 28.118832][ T365] dump_stack_lvl+0x110/0x170 [ 28.123559][ T365] ? show_regs_print_info+0x20/0x20 [ 28.128816][ T365] dump_stack+0x15/0x20 [ 28.133035][ T365] should_fail+0x3ab/0x500 [ 28.138602][ T365] __should_failslab+0xa4/0xe0 [ 28.143435][ T365] should_failslab+0x9/0x20 [ 28.148079][ T365] slab_pre_alloc_hook+0x39/0xd0 [ 28.153070][ T365] ? alloc_vmap_area+0x186/0x1a70 [ 28.158163][ T365] kmem_cache_alloc+0x44/0x260 [ 28.162981][ T365] alloc_vmap_area+0x186/0x1a70 [ 28.168140][ T365] ? vm_map_ram+0xa70/0xa70 [ 28.172689][ T365] ? kmem_cache_alloc_trace+0x119/0x270 [ 28.178797][ T365] __get_vm_area_node+0x14e/0x350 [ 28.183896][ T365] __vmalloc_node_range+0xe8/0xad0 [ 28.189137][ T365] ? htable_create+0x139/0x7d0 [ 28.193954][ T365] ? htable_create+0x139/0x7d0 [ 28.198759][ T365] vmalloc+0x78/0x90 [ 28.202860][ T365] ? htable_create+0x139/0x7d0 [ 28.208251][ T365] htable_create+0x139/0x7d0 [ 28.212905][ T365] hashlimit_mt_check_common+0x753/0xa80 [ 28.221318][ T365] hashlimit_mt_check_v1+0x1bc/0x2d0 [ 28.226660][ T365] xt_check_match+0x499/0xc50 [ 28.231470][ T365] ? xt_check_proc_name+0x260/0x260 [ 28.236915][ T365] ? mutex_unlock+0x8f/0x230 [ 28.241820][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 28.247243][ T365] ? xt_find_target+0x238/0x250 [ 28.252128][ T365] ? xt_find_match+0x1f/0x250 [ 28.256932][ T365] ? xt_find_match+0x238/0x250 [ 28.262460][ T365] translate_table+0x150d/0x2020 [ 28.268322][ T365] ? ip6t_register_table+0x7b0/0x7b0 [ 28.275046][ T365] ? __kmalloc+0x13d/0x2c0 [ 28.280428][ T365] ? kvmalloc_node+0x211/0x320 [ 28.285501][ T365] ? kvmalloc_node+0x23c/0x320 [ 28.290511][ T365] ? __kasan_check_write+0x14/0x20 [ 28.297254][ T365] ? copy_from_sockptr_offset+0x77/0x90 [ 28.303376][ T365] do_ip6t_set_ctl+0x960/0xd80 [ 28.308439][ T365] ? update_load_avg+0x442/0x1110 [ 28.313494][ T365] ? ip6t_unregister_table_exit+0x230/0x230 [ 28.319987][ T365] ? __kasan_check_write+0x14/0x20 [ 28.326057][ T365] ? mutex_unlock+0x8f/0x230 [ 28.330824][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 28.336258][ T365] ? _raw_spin_lock_bh+0x94/0xf0 [ 28.341225][ T365] ? _raw_spin_lock_irq+0xf0/0xf0 [ 28.346273][ T365] ? switch_mm_irqs_off+0x2f0/0x960 [ 28.351622][ T365] nf_setsockopt+0x272/0x2a0 [ 28.356246][ T365] ipv6_setsockopt+0x258f/0x3750 [ 28.361312][ T365] ? ipv6_update_options+0x410/0x410 [ 28.366799][ T365] ? preempt_schedule+0xbc/0xd0 [ 28.371902][ T365] ? schedule_preempt_disabled+0x20/0x20 [ 28.378575][ T365] ? __kasan_check_read+0x11/0x20 [ 28.384103][ T365] ? ttwu_do_wakeup+0x100/0x470 [ 28.389485][ T365] ? preempt_schedule_thunk+0x16/0x18 [ 28.395322][ T365] ? try_to_wake_up+0x632/0x1150 [ 28.403110][ T365] ? __kasan_check_write+0x14/0x20 [ 28.409340][ T365] ? wake_up_q+0x106/0x1b0 [ 28.413902][ T365] ? futex_wake+0x64b/0x8f0 [ 28.418700][ T365] ? futex_wait+0x8f0/0x8f0 [ 28.424187][ T365] ? __asan_set_shadow_00+0xe/0x10 [ 28.429476][ T365] ? avc_has_perm_noaudit+0x390/0x490 [ 28.435250][ T365] ? memcpy+0x56/0x70 [ 28.439522][ T365] ? avc_has_perm_noaudit+0x30a/0x490 [ 28.445526][ T365] ? avc_denied+0x1b0/0x1b0 [ 28.450156][ T365] ? avc_has_perm+0x163/0x250 [ 28.454909][ T365] ? avc_has_perm_noaudit+0x490/0x490 [ 28.460398][ T365] ? slab_post_alloc_hook+0x6d/0x2b0 [ 28.466334][ T365] tcp_setsockopt+0x22b/0x1e90 [ 28.471120][ T365] ? selinux_socket_setsockopt+0x282/0x360 [ 28.476945][ T365] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 28.482431][ T365] ? percpu_counter_add_batch+0x13c/0x160 [ 28.488193][ T365] ? __fget_files+0x2e1/0x340 [ 28.493015][ T365] sock_common_setsockopt+0xa0/0xb0 [ 28.498592][ T365] ? sock_common_recvmsg+0x1c0/0x1c0 [ 28.503902][ T365] __sys_setsockopt+0x2e9/0x470 [ 28.508867][ T365] ? __ia32_sys_recv+0xb0/0xb0 [ 28.513655][ T365] ? preempt_count_add+0x90/0x1b0 [ 28.518915][ T365] ? __kasan_check_write+0x14/0x20 [ 28.524773][ T365] __x64_sys_setsockopt+0xbf/0xd0 [ 28.531475][ T365] x64_sys_call+0x982/0x9a0 [ 28.536375][ T365] do_syscall_64+0x4c/0xa0 [ 28.540815][ T365] ? clear_bhb_loop+0x50/0xa0 [ 28.545554][ T365] ? clear_bhb_loop+0x50/0xa0 [ 28.550255][ T365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.556261][ T365] RIP: 0033:0x7f284be47159 [ 28.560710][ T365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.580461][ T365] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 28.589039][ T365] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 28.597054][ T365] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 28.605172][ T365] RBP: 00007f284bede024 R08: 0000000000000590 R09: 0000000000000000 [ 28.613370][ T365] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000 [ 28.621592][ T365] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 28.630188][ T365] [ 28.634567][ T365] syz.1.23: vmalloc error: size 65784, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 28.656836][ T365] CPU: 1 PID: 365 Comm: syz.1.23 Tainted: G W syzkaller #0 [ 28.665536][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.676647][ T365] Call Trace: [ 28.680088][ T365] [ 28.683448][ T365] __dump_stack+0x21/0x30 [ 28.688099][ T365] dump_stack_lvl+0x110/0x170 [ 28.692839][ T365] ? show_regs_print_info+0x20/0x20 [ 28.698112][ T365] ? pr_cont_kernfs_name+0xe3/0xf0 [ 28.703297][ T365] dump_stack+0x15/0x20 [ 28.707553][ T365] warn_alloc+0x1dc/0x200 [ 28.712183][ T365] ? __kasan_slab_free+0x11/0x20 [ 28.717578][ T365] ? slab_free_freelist_hook+0xc2/0x190 [ 28.723195][ T365] ? zone_watermark_ok_safe+0x270/0x270 [ 28.728819][ T365] ? kfree+0xc4/0x270 [ 28.732878][ T365] ? __get_vm_area_node+0x163/0x350 [ 28.738137][ T365] __vmalloc_node_range+0x15e/0xad0 [ 28.743414][ T365] ? htable_create+0x139/0x7d0 [ 28.748456][ T365] vmalloc+0x78/0x90 [ 28.752405][ T365] ? htable_create+0x139/0x7d0 [ 28.757232][ T365] htable_create+0x139/0x7d0 [ 28.762379][ T365] hashlimit_mt_check_common+0x753/0xa80 [ 28.768098][ T365] hashlimit_mt_check_v1+0x1bc/0x2d0 [ 28.773458][ T365] xt_check_match+0x499/0xc50 [ 28.778537][ T365] ? xt_check_proc_name+0x260/0x260 [ 28.783878][ T365] ? mutex_unlock+0x8f/0x230 [ 28.788844][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 28.794582][ T365] ? xt_find_target+0x238/0x250 [ 28.799485][ T365] ? xt_find_match+0x1f/0x250 [ 28.804198][ T365] ? xt_find_match+0x238/0x250 [ 28.809171][ T365] translate_table+0x150d/0x2020 [ 28.814629][ T365] ? ip6t_register_table+0x7b0/0x7b0 [ 28.820421][ T365] ? __kmalloc+0x13d/0x2c0 [ 28.825016][ T365] ? kvmalloc_node+0x211/0x320 [ 28.829952][ T365] ? kvmalloc_node+0x23c/0x320 [ 28.834873][ T365] ? __kasan_check_write+0x14/0x20 [ 28.840317][ T365] ? copy_from_sockptr_offset+0x77/0x90 [ 28.847514][ T365] do_ip6t_set_ctl+0x960/0xd80 [ 28.854318][ T365] ? update_load_avg+0x442/0x1110 [ 28.862996][ T365] ? ip6t_unregister_table_exit+0x230/0x230 [ 28.871158][ T365] ? __kasan_check_write+0x14/0x20 [ 28.877031][ T365] ? mutex_unlock+0x8f/0x230 [ 28.881859][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 28.888683][ T365] ? _raw_spin_lock_bh+0x94/0xf0 [ 28.894502][ T365] ? _raw_spin_lock_irq+0xf0/0xf0 [ 28.900667][ T365] ? switch_mm_irqs_off+0x2f0/0x960 [ 28.906536][ T365] nf_setsockopt+0x272/0x2a0 [ 28.912694][ T365] ipv6_setsockopt+0x258f/0x3750 [ 28.917736][ T365] ? ipv6_update_options+0x410/0x410 [ 28.923214][ T365] ? preempt_schedule+0xbc/0xd0 [ 28.928551][ T365] ? schedule_preempt_disabled+0x20/0x20 [ 28.934804][ T365] ? __kasan_check_read+0x11/0x20 [ 28.942072][ T365] ? ttwu_do_wakeup+0x100/0x470 [ 28.947451][ T365] ? preempt_schedule_thunk+0x16/0x18 [ 28.957024][ T365] ? try_to_wake_up+0x632/0x1150 [ 28.963276][ T365] ? __kasan_check_write+0x14/0x20 [ 28.968686][ T365] ? wake_up_q+0x106/0x1b0 [ 28.973310][ T365] ? futex_wake+0x64b/0x8f0 [ 28.978142][ T365] ? futex_wait+0x8f0/0x8f0 [ 28.983775][ T365] ? __asan_set_shadow_00+0xe/0x10 [ 28.990204][ T365] ? avc_has_perm_noaudit+0x390/0x490 [ 28.995637][ T365] ? memcpy+0x56/0x70 [ 28.999659][ T365] ? avc_has_perm_noaudit+0x30a/0x490 [ 29.005079][ T365] ? avc_denied+0x1b0/0x1b0 [ 29.009814][ T365] ? avc_has_perm+0x163/0x250 [ 29.014811][ T365] ? avc_has_perm_noaudit+0x490/0x490 [ 29.020958][ T365] ? slab_post_alloc_hook+0x6d/0x2b0 [ 29.026380][ T365] tcp_setsockopt+0x22b/0x1e90 [ 29.031667][ T365] ? selinux_socket_setsockopt+0x282/0x360 [ 29.038160][ T365] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 29.043781][ T365] ? percpu_counter_add_batch+0x13c/0x160 [ 29.050882][ T365] ? __fget_files+0x2e1/0x340 [ 29.056215][ T365] sock_common_setsockopt+0xa0/0xb0 [ 29.061735][ T365] ? sock_common_recvmsg+0x1c0/0x1c0 [ 29.068034][ T365] __sys_setsockopt+0x2e9/0x470 [ 29.073535][ T365] ? __ia32_sys_recv+0xb0/0xb0 [ 29.079173][ T365] ? preempt_count_add+0x90/0x1b0 [ 29.084423][ T365] ? __kasan_check_write+0x14/0x20 [ 29.089579][ T365] __x64_sys_setsockopt+0xbf/0xd0 [ 29.094663][ T365] x64_sys_call+0x982/0x9a0 [ 29.099276][ T365] do_syscall_64+0x4c/0xa0 [ 29.103722][ T365] ? clear_bhb_loop+0x50/0xa0 [ 29.108586][ T365] ? clear_bhb_loop+0x50/0xa0 [ 29.113636][ T365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.120270][ T365] RIP: 0033:0x7f284be47159 [ 29.124740][ T365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.149431][ T365] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 29.158236][ T365] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 29.167134][ T365] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 29.175369][ T365] RBP: 00007f284bede024 R08: 0000000000000590 R09: 0000000000000000 [ 29.184738][ T365] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000 [ 29.194310][ T365] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 29.203817][ T365] [ 29.217576][ T365] Mem-Info: [ 29.220915][ T365] active_anon:60 inactive_anon:6374 isolated_anon:0 [ 29.220915][ T365] active_file:4548 inactive_file:3541 isolated_file:0 [ 29.220915][ T365] unevictable:0 dirty:1484 writeback:0 [ 29.220915][ T365] slab_reclaimable:7314 slab_unreclaimable:77894 [ 29.220915][ T365] mapped:29101 shmem:1203 pagetables:624 bounce:0 [ 29.220915][ T365] kernel_misc_reclaimable:0 [ 29.220915][ T365] free:1577299 free_pcp:6082 free_cma:0 [ 29.270028][ T362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.281430][ T362] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.299047][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 29.299064][ T30] audit: type=1400 audit(1788364977.804:139): avc: denied { map } for pid=357 comm="syz.3.21" path="/1/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.384404][ T365] Node 0 active_anon:140kB inactive_anon:21596kB active_file:18192kB inactive_file:14364kB unevictable:6100kB isolated(anon):0kB isolated(file):0kB mapped:122604kB dirty:5936kB writeback:0kB shmem:812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4156kB pagetables:2496kB all_unreclaimable? no [ 29.417348][ T365] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982748kB mlocked:0kB bounce:0kB free_pcp:3976kB local_pcp:3920kB free_cma:0kB [ 29.445888][ T365] lowmem_reserve[]: 0 3941 3941 [ 29.451316][ T365] Normal free:3342304kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:140kB inactive_anon:21596kB active_file:18192kB inactive_file:14364kB unevictable:6100kB writepending:5936kB present:5242880kB managed:4036096kB mlocked:6100kB bounce:0kB free_pcp:25196kB local_pcp:4636kB free_cma:0kB [ 29.470575][ T30] audit: type=1400 audit(1788364977.804:140): avc: denied { execute } for pid=357 comm="syz.3.21" path="/1/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.506890][ T365] lowmem_reserve[]: 0 0 0 [ 29.536300][ T365] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 29.558406][ T372] loop0: detected capacity change from 0 to 128 [ 29.581007][ T30] audit: type=1400 audit(1788364977.924:141): avc: denied { create } for pid=368 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.586195][ T365] Normal: [ 29.602677][ T30] audit: type=1400 audit(1788364977.964:142): avc: denied { setopt } for pid=368 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.629318][ T365] 2*4kB (ME) 1*8kB (E) 2*16kB (ME) 2*32kB (ME) 0*64kB 1*128kB (M) 2*256kB (ME) 2*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 814*4096kB (UM) = 3344112kB [ 29.668919][ T30] audit: type=1400 audit(1788364978.074:143): avc: denied { prog_run } for pid=368 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.676889][ T376] FAULT_INJECTION: forcing a failure. [ 29.676889][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 29.704853][ T30] audit: type=1400 audit(1788364978.154:144): avc: denied { write } for pid=373 comm="syz.2.26" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.742783][ T365] 9869 total pagecache pages [ 29.748875][ T365] 0 pages in swap cache [ 29.753377][ T365] Swap cache stats: add 0, delete 0, find 0/0 [ 29.766771][ T365] Free swap = 124996kB [ 29.771166][ T365] Total swap = 124996kB [ 29.778837][ T376] CPU: 1 PID: 376 Comm: syz.4.27 Tainted: G W syzkaller #0 [ 29.778871][ T378] FAULT_INJECTION: forcing a failure. [ 29.778871][ T378] name failslab, interval 1, probability 0, space 0, times 0 [ 29.791000][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.791024][ T376] Call Trace: [ 29.791032][ T376] [ 29.791040][ T376] __dump_stack+0x21/0x30 [ 29.791069][ T376] dump_stack_lvl+0x110/0x170 [ 29.791088][ T376] ? show_regs_print_info+0x20/0x20 [ 29.791107][ T376] dump_stack+0x15/0x20 [ 29.791124][ T376] should_fail+0x3ab/0x500 [ 29.791143][ T376] ? audit_log_start+0x407/0x8a0 [ 29.791162][ T376] __should_failslab+0xa4/0xe0 [ 29.791186][ T376] should_failslab+0x9/0x20 [ 29.791204][ T376] slab_pre_alloc_hook+0x39/0xd0 [ 29.791226][ T376] ? audit_log_start+0x407/0x8a0 [ 29.791242][ T376] ? audit_log_start+0x407/0x8a0 [ 29.791259][ T376] __kmalloc_track_caller+0x6c/0x2c0 [ 29.835041][ T365] 2097051 pages RAM [ 29.838967][ T376] ? audit_log_start+0x407/0x8a0 [ 29.839003][ T376] ? audit_log_start+0x407/0x8a0 [ 29.839019][ T376] __alloc_skb+0x210/0x730 [ 29.839039][ T376] audit_log_start+0x407/0x8a0 [ 29.839056][ T376] ? audit_serial+0x30/0x30 [ 29.852417][ T365] 0 pages HighMem/MovableOnly [ 29.854674][ T376] ? call_rcu+0x5af/0xf60 [ 29.866073][ T365] 342340 pages reserved [ 29.869984][ T376] ? rcu_gp_kthread_wake+0x90/0x90 [ 29.875869][ T365] 0 pages cma reserved [ 29.881176][ T376] ? slow_avc_audit+0x240/0x240 [ 29.881211][ T376] common_lsm_audit+0xd2/0x1670 [ 29.881234][ T376] ? avc_update_node+0x34f/0x8a0 [ 29.881259][ T376] ? avc_audit_pre_callback+0x290/0x290 [ 29.970059][ T376] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 29.975650][ T376] ? avc_update_node+0x2c6/0x8a0 [ 29.980968][ T376] slow_avc_audit+0x1c4/0x240 [ 29.986913][ T376] ? avc_get_hash_stats+0x180/0x180 [ 29.992373][ T376] ? avc_has_perm_noaudit+0x30a/0x490 [ 29.998631][ T376] selinux_capable+0x244/0x3b0 [ 30.004311][ T376] ? selinux_capset+0xf0/0xf0 [ 30.009091][ T376] ? cap_capable+0x1a6/0x230 [ 30.014157][ T376] security_capable+0x77/0xb0 [ 30.018975][ T376] capable+0x6d/0xe0 [ 30.023711][ T376] do_epoll_ctl+0x19b/0xdc0 [ 30.025670][ T380] loop0: detected capacity change from 0 to 8192 [ 30.028386][ T376] __x64_sys_epoll_ctl+0x162/0x1b0 [ 30.028420][ T376] ? ep_modify+0x870/0x870 [ 30.028440][ T376] ? switch_fpu_return+0x15d/0x2c0 [ 30.028463][ T376] x64_sys_call+0x3af/0x9a0 [ 30.028481][ T376] do_syscall_64+0x4c/0xa0 [ 30.028500][ T376] ? clear_bhb_loop+0x50/0xa0 [ 30.067847][ T376] ? clear_bhb_loop+0x50/0xa0 [ 30.072580][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.079030][ T376] RIP: 0033:0x7fdc994b9159 [ 30.083755][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.104299][ T376] RSP: 002b:00007fdc97f12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 30.113724][ T376] RAX: ffffffffffffffda RBX: 00007fdc99740fa0 RCX: 00007fdc994b9159 [ 30.121935][ T376] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 30.130738][ T376] RBP: 00007fdc99550024 R08: 0000000000000000 R09: 0000000000000000 [ 30.139016][ T376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.147341][ T376] R13: 00007fdc99741038 R14: 00007fdc99740fa0 R15: 00007ffedf5522b8 [ 30.156275][ T376] [ 30.160369][ T378] CPU: 1 PID: 378 Comm: syz.2.28 Tainted: G W syzkaller #0 [ 30.169413][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.179945][ T378] Call Trace: [ 30.183959][ T378] [ 30.188344][ T378] __dump_stack+0x21/0x30 [ 30.193408][ T378] dump_stack_lvl+0x110/0x170 [ 30.199359][ T378] ? show_regs_print_info+0x20/0x20 [ 30.205741][ T378] ? avc_has_perm_noaudit+0x30a/0x490 [ 30.211442][ T378] dump_stack+0x15/0x20 [ 30.215741][ T378] should_fail+0x3ab/0x500 [ 30.220456][ T378] __should_failslab+0xa4/0xe0 [ 30.225422][ T378] should_failslab+0x9/0x20 [ 30.230279][ T378] slab_pre_alloc_hook+0x39/0xd0 [ 30.237010][ T378] ? dup_fd+0x55/0xad0 [ 30.241161][ T378] kmem_cache_alloc+0x44/0x260 [ 30.246660][ T378] dup_fd+0x55/0xad0 [ 30.250588][ T378] ? __mutex_init+0xcd/0x1a0 [ 30.255723][ T378] ? perf_event_init_task+0x47c/0x4c0 [ 30.262240][ T378] copy_files+0x76/0xe0 [ 30.266805][ T378] copy_process+0x10d4/0x3280 [ 30.272330][ T378] ? __pidfd_prepare+0x150/0x150 [ 30.277301][ T378] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 30.283242][ T378] kernel_clone+0x233/0x960 [ 30.288130][ T378] ? __delayed_free_task+0x20/0x20 [ 30.293762][ T378] ? create_io_thread+0x170/0x170 [ 30.300171][ T378] __x64_sys_clone3+0x2da/0x370 [ 30.306097][ T378] ? __ia32_sys_clone+0x200/0x200 [ 30.312668][ T378] ? mutex_unlock+0x8f/0x230 [ 30.317578][ T378] ? __kasan_check_write+0x14/0x20 [ 30.323802][ T378] ? switch_fpu_return+0x15d/0x2c0 [ 30.329556][ T378] x64_sys_call+0x53e/0x9a0 [ 30.334408][ T378] do_syscall_64+0x4c/0xa0 [ 30.338854][ T378] ? clear_bhb_loop+0x50/0xa0 [ 30.343642][ T378] ? clear_bhb_loop+0x50/0xa0 [ 30.348519][ T378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.354652][ T378] RIP: 0033:0x7f42af4c4159 [ 30.360093][ T378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.382203][ T378] RSP: 002b:00007f42adf1cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 30.391232][ T378] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42af4c4159 [ 30.399266][ T378] RDX: 00007f42adf1cf10 RSI: 0000000000000058 RDI: 00007f42adf1cf10 [ 30.407776][ T378] RBP: 00007f42af55b024 R08: 0000000000000000 R09: 0000000000000058 [ 30.416168][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.425679][ T378] R13: 00007f42af74c038 R14: 00007f42af74bfa0 R15: 00007ffd6f10b788 [ 30.434201][ T378] [ 30.439652][ T376] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 30.451391][ T376] audit: out of memory in audit_log_start [ 30.491772][ T382] loop1: detected capacity change from 0 to 512 [ 30.526748][ T30] audit: type=1400 audit(1788364979.034:145): avc: denied { remount } for pid=379 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.584670][ T388] loop2: detected capacity change from 0 to 1024 [ 30.602593][ T382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.622383][ T30] audit: type=1400 audit(1788364979.124:146): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.651341][ T388] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 30.714062][ T388] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 30.735510][ T395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 30.766191][ T388] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 30.786867][ T404] FAULT_INJECTION: forcing a failure. [ 30.786867][ T404] name failslab, interval 1, probability 0, space 0, times 0 [ 30.807006][ T404] CPU: 1 PID: 404 Comm: syz.1.38 Tainted: G W syzkaller #0 [ 30.816496][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.832081][ T404] Call Trace: [ 30.837370][ T404] [ 30.840899][ T404] __dump_stack+0x21/0x30 [ 30.846722][ T404] dump_stack_lvl+0x110/0x170 [ 30.853454][ T404] ? show_regs_print_info+0x20/0x20 [ 30.859659][ T404] dump_stack+0x15/0x20 [ 30.864554][ T404] should_fail+0x3ab/0x500 [ 30.870225][ T404] __should_failslab+0xa4/0xe0 [ 30.876750][ T404] should_failslab+0x9/0x20 [ 30.882980][ T404] slab_pre_alloc_hook+0x39/0xd0 [ 30.890268][ T404] ? create_task_io_context+0x2c/0x3d0 [ 30.898867][ T404] kmem_cache_alloc+0x44/0x260 [ 30.903889][ T404] ? _raw_spin_trylock_bh+0x150/0x150 [ 30.918671][ T404] create_task_io_context+0x2c/0x3d0 [ 30.925857][ T404] get_task_io_context+0xa3/0x130 [ 30.936148][ T404] set_task_ioprio+0x146/0x220 [ 30.945022][ T404] __se_sys_ioprio_set+0x2ea/0x740 [ 30.954139][ T404] __x64_sys_ioprio_set+0x7b/0x90 [ 30.964040][ T404] x64_sys_call+0x4dc/0x9a0 [ 30.970537][ T404] do_syscall_64+0x4c/0xa0 [ 30.978117][ T404] ? clear_bhb_loop+0x50/0xa0 [ 30.986355][ T404] ? clear_bhb_loop+0x50/0xa0 [ 30.996441][ T404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.003636][ T404] RIP: 0033:0x7f284be47159 [ 31.009344][ T404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.034732][ T404] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 31.047425][ T404] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 31.057328][ T404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 31.066807][ T404] RBP: 00007f284bede024 R08: 0000000000000000 R09: 0000000000000000 [ 31.076381][ T404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.087484][ T404] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 31.100042][ T404] [ 31.225145][ T424] netlink: 'syz.2.48': attribute type 30 has an invalid length. [ 31.245011][ T416] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.271556][ T430] xt_hashlimit: max too large, truncated to 1048576 [ 31.280831][ T430] xt_hashlimit: size too large, truncated to 1048576 [ 31.290294][ T430] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 31.301421][ T428] FAULT_INJECTION: forcing a failure. [ 31.301421][ T428] name failslab, interval 1, probability 0, space 0, times 0 [ 31.321186][ T286] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 31.334597][ T286] FAT-fs (loop3): Filesystem has been set read-only [ 31.354994][ T428] CPU: 0 PID: 428 Comm: syz.2.51 Tainted: G W syzkaller #0 [ 31.367765][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.378658][ T428] Call Trace: [ 31.382540][ T428] [ 31.385607][ T428] __dump_stack+0x21/0x30 [ 31.391113][ T428] dump_stack_lvl+0x110/0x170 [ 31.399155][ T428] ? show_regs_print_info+0x20/0x20 [ 31.407333][ T428] dump_stack+0x15/0x20 [ 31.416652][ T428] should_fail+0x3ab/0x500 [ 31.421585][ T428] __should_failslab+0xa4/0xe0 [ 31.428670][ T428] should_failslab+0x9/0x20 [ 31.434037][ T428] slab_pre_alloc_hook+0x39/0xd0 [ 31.441310][ T428] kmem_cache_alloc_trace+0x48/0x270 [ 31.447835][ T428] ? get_device_parent+0x2f3/0x410 [ 31.454147][ T428] get_device_parent+0x2f3/0x410 [ 31.462665][ T428] device_add+0x308/0xe90 [ 31.469271][ T428] wakeup_source_sysfs_add+0x1f7/0x2e0 [ 31.477671][ T428] wakeup_source_register+0x1a5/0x3d0 [ 31.485862][ T428] ep_insert+0xd8d/0x1740 [ 31.496694][ T428] ? ep_loop_check+0x80/0x80 [ 31.509774][ T428] ? __kasan_check_write+0x14/0x20 [ 31.521951][ T428] ? wait_for_completion_killable_timeout+0x10/0x10 [ 31.524420][ T434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 31.532201][ T428] ? ep_get_upwards_depth_proc+0x11b/0x1b0 [ 31.532241][ T428] do_epoll_ctl+0x878/0xdc0 [ 31.532264][ T428] __x64_sys_epoll_ctl+0x162/0x1b0 [ 31.581995][ T428] ? ep_modify+0x870/0x870 [ 31.590161][ T428] ? switch_fpu_return+0x15d/0x2c0 [ 31.599385][ T428] x64_sys_call+0x3af/0x9a0 [ 31.604361][ T428] do_syscall_64+0x4c/0xa0 [ 31.610063][ T428] ? clear_bhb_loop+0x50/0xa0 [ 31.617239][ T428] ? clear_bhb_loop+0x50/0xa0 [ 31.623363][ T428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.632837][ T428] RIP: 0033:0x7f42af4c4159 [ 31.638772][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.667849][ T428] RSP: 002b:00007f42adf1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 31.678977][ T428] RAX: ffffffffffffffda RBX: 00007f42af74bfa0 RCX: 00007f42af4c4159 [ 31.687971][ T428] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 31.703049][ T428] RBP: 00007f42af55b024 R08: 0000000000000000 R09: 0000000000000000 [ 31.717341][ T428] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.733513][ T428] R13: 00007f42af74c038 R14: 00007f42af74bfa0 R15: 00007ffd6f10b788 [ 31.744333][ T428] [ 31.759124][ T286] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.813576][ T440] set_capacity_and_notify: 2 callbacks suppressed [ 31.813594][ T440] loop4: detected capacity change from 0 to 128 [ 31.865819][ T447] loop3: detected capacity change from 0 to 512 [ 31.891631][ T440] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 31.919226][ T440] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.940720][ T447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.056056][ T447] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.081701][ T447] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 32.123994][ T447] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 32.138885][ T447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 32.148313][ T447] System zones: 0-2, 18-18, 34-35 [ 32.154454][ T454] loop2: detected capacity change from 0 to 512 [ 32.164296][ T447] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 32.195469][ T457] loop0: detected capacity change from 0 to 256 [ 32.209724][ T458] FAULT_INJECTION: forcing a failure. [ 32.209724][ T458] name failslab, interval 1, probability 0, space 0, times 0 [ 32.231221][ T458] CPU: 0 PID: 458 Comm: syz.4.62 Tainted: G W syzkaller #0 [ 32.242390][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.260655][ T458] Call Trace: [ 32.264261][ T458] [ 32.267565][ T458] __dump_stack+0x21/0x30 [ 32.280824][ T458] dump_stack_lvl+0x110/0x170 [ 32.286913][ T458] ? show_regs_print_info+0x20/0x20 [ 32.292828][ T458] dump_stack+0x15/0x20 [ 32.297287][ T458] should_fail+0x3ab/0x500 [ 32.302280][ T458] __should_failslab+0xa4/0xe0 [ 32.307912][ T458] should_failslab+0x9/0x20 [ 32.313592][ T458] slab_pre_alloc_hook+0x39/0xd0 [ 32.319599][ T458] ? __d_alloc+0x2d/0x690 [ 32.323970][ T458] kmem_cache_alloc+0x44/0x260 [ 32.329406][ T458] __d_alloc+0x2d/0x690 [ 32.334807][ T458] d_alloc_pseudo+0x1d/0x70 [ 32.339995][ T458] alloc_file_pseudo+0xe0/0x200 [ 32.345391][ T458] ? alloc_empty_file_noaccount+0x80/0x80 [ 32.351374][ T458] ? alloc_fd+0x4c2/0x570 [ 32.355951][ T458] sock_alloc_file+0xba/0x260 [ 32.362899][ T458] __sys_socket+0x12b/0x190 [ 32.368504][ T458] __x64_sys_socket+0x7a/0x90 [ 32.373392][ T458] x64_sys_call+0x8c5/0x9a0 [ 32.378519][ T458] do_syscall_64+0x4c/0xa0 [ 32.384325][ T458] ? clear_bhb_loop+0x50/0xa0 [ 32.390440][ T458] ? clear_bhb_loop+0x50/0xa0 [ 32.395389][ T458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.403286][ T458] RIP: 0033:0x7fdc994b9159 [ 32.408913][ T458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.429082][ T458] RSP: 002b:00007fdc97f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 32.438241][ T458] RAX: ffffffffffffffda RBX: 00007fdc99740fa0 RCX: 00007fdc994b9159 [ 32.447916][ T458] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 0000000000000002 [ 32.459487][ T458] RBP: 00007fdc99550024 R08: 0000000000000000 R09: 0000000000000000 [ 32.468189][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.476303][ T458] R13: 00007fdc99741038 R14: 00007fdc99740fa0 R15: 00007ffedf5522b8 [ 32.485700][ T458] [ 32.528888][ T460] loop4: detected capacity change from 0 to 512 [ 32.542767][ T454] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.556099][ T454] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 32.578897][ T460] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.631219][ T454] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 32.648775][ T454] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 32.665400][ T454] System zones: 0-2, 18-18, 34-35 [ 32.672815][ T460] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 32.683452][ T454] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 32.703121][ T460] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 32.716498][ T460] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 32.725706][ T460] System zones: 0-2, 18-18, 34-35 [ 32.731876][ T460] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 32.749894][ T454] EXT4-fs warning (device loop2): verify_group_input:165: Last group not full [ 33.206858][ T492] FAULT_INJECTION: forcing a failure. [ 33.206858][ T492] name failslab, interval 1, probability 0, space 0, times 0 [ 33.262548][ T492] CPU: 1 PID: 492 Comm: syz.1.75 Tainted: G W syzkaller #0 [ 33.272677][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.283556][ T492] Call Trace: [ 33.287005][ T492] [ 33.290069][ T492] __dump_stack+0x21/0x30 [ 33.295051][ T492] dump_stack_lvl+0x110/0x170 [ 33.299784][ T492] ? show_regs_print_info+0x20/0x20 [ 33.305829][ T492] dump_stack+0x15/0x20 [ 33.310557][ T492] should_fail+0x3ab/0x500 [ 33.315380][ T492] __should_failslab+0xa4/0xe0 [ 33.321094][ T492] should_failslab+0x9/0x20 [ 33.326360][ T492] slab_pre_alloc_hook+0x39/0xd0 [ 33.331900][ T492] ? __d_alloc+0x2d/0x690 [ 33.337362][ T492] kmem_cache_alloc+0x44/0x260 [ 33.343493][ T492] __d_alloc+0x2d/0x690 [ 33.348338][ T492] d_alloc_pseudo+0x1d/0x70 [ 33.354668][ T492] alloc_file_pseudo+0xe0/0x200 [ 33.360713][ T492] ? alloc_empty_file_noaccount+0x80/0x80 [ 33.368722][ T492] ? alloc_fd+0x4c2/0x570 [ 33.373202][ T492] sock_alloc_file+0xba/0x260 [ 33.378764][ T492] __sys_socket+0x12b/0x190 [ 33.383611][ T492] __x64_sys_socket+0x7a/0x90 [ 33.389753][ T492] x64_sys_call+0x8c5/0x9a0 [ 33.395653][ T492] do_syscall_64+0x4c/0xa0 [ 33.401049][ T492] ? clear_bhb_loop+0x50/0xa0 [ 33.406572][ T492] ? clear_bhb_loop+0x50/0xa0 [ 33.412067][ T492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.419710][ T492] RIP: 0033:0x7f284be47159 [ 33.424353][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.447252][ T492] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 33.457358][ T492] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 33.467511][ T492] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 0000000000000002 [ 33.476811][ T492] RBP: 00007f284bede024 R08: 0000000000000000 R09: 0000000000000000 [ 33.485028][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.494069][ T492] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 33.506841][ T492] [ 34.444839][ T521] loop4: detected capacity change from 0 to 512 [ 34.536017][ T521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.561634][ T521] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.697823][ T528] hub 8-0:1.0: USB hub found [ 34.719523][ T528] hub 8-0:1.0: 1 port detected [ 35.508776][ T539] loop1: detected capacity change from 0 to 8192 [ 35.557855][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 35.557871][ T30] audit: type=1400 audit(1788364984.064:192): avc: denied { read } for pid=542 comm="syz.4.93" dev="nsfs" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.621333][ T30] audit: type=1400 audit(1788364984.094:193): avc: denied { open } for pid=542 comm="syz.4.93" path="net:[4026532478]" dev="nsfs" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.681967][ T30] audit: type=1400 audit(1788364984.124:194): avc: denied { ioctl } for pid=542 comm="syz.4.93" path="socket:[16801]" dev="sockfs" ino=16801 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.786715][ T30] audit: type=1400 audit(1788364984.294:195): avc: denied { name_bind } for pid=546 comm="syz.4.95" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.815861][ T549] loop1: detected capacity change from 0 to 256 [ 35.878609][ T552] loop4: detected capacity change from 0 to 128 [ 35.937986][ T552] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 36.006761][ T552] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.047302][ T30] audit: type=1400 audit(1788364984.554:196): avc: denied { mount } for pid=556 comm="syz.1.98" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 36.160366][ T30] audit: type=1400 audit(1788364984.574:197): avc: denied { write } for pid=556 comm="syz.1.98" name="enable" dev="tracefs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 36.218822][ T564] loop3: detected capacity change from 0 to 512 [ 36.225728][ T30] audit: type=1400 audit(1788364984.574:198): avc: denied { open } for pid=556 comm="syz.1.98" path="/27/debug/tracing/events/sched/sched_switch/enable" dev="tracefs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 36.281699][ T30] audit: type=1400 audit(1788364984.624:199): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 36.281766][ T30] audit: type=1400 audit(1788364984.654:200): avc: denied { rmdir } for pid=551 comm="syz.4.96" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.299167][ T567] FAULT_INJECTION: forcing a failure. [ 36.299167][ T567] name failslab, interval 1, probability 0, space 0, times 0 [ 36.299196][ T567] CPU: 0 PID: 567 Comm: syz.4.101 Tainted: G W syzkaller #0 [ 36.299216][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.299226][ T567] Call Trace: [ 36.299231][ T567] [ 36.299237][ T567] __dump_stack+0x21/0x30 [ 36.299261][ T567] dump_stack_lvl+0x110/0x170 [ 36.299279][ T567] ? show_regs_print_info+0x20/0x20 [ 36.299298][ T567] dump_stack+0x15/0x20 [ 36.299314][ T567] should_fail+0x3ab/0x500 [ 36.299334][ T567] __should_failslab+0xa4/0xe0 [ 36.299356][ T567] should_failslab+0x9/0x20 [ 36.299375][ T567] slab_pre_alloc_hook+0x39/0xd0 [ 36.299396][ T567] ? __sigqueue_alloc+0x137/0x210 [ 36.299418][ T567] kmem_cache_alloc+0x44/0x260 [ 36.299439][ T567] __sigqueue_alloc+0x137/0x210 [ 36.299460][ T567] __send_signal+0x21a/0xce0 [ 36.299481][ T567] do_notify_parent+0x6a3/0x830 [ 36.299501][ T567] ? complete_signal+0xd10/0xd10 [ 36.299525][ T567] release_task+0xe39/0x1210 [ 36.299556][ T567] do_exit+0x1a9c/0x29a0 [ 36.299579][ T567] ? put_task_struct+0x90/0x90 [ 36.299599][ T567] ? __kasan_check_write+0x14/0x20 [ 36.299619][ T567] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.299644][ T567] do_group_exit+0x149/0x310 [ 36.299664][ T567] ? __kasan_check_write+0x14/0x20 [ 36.299684][ T567] ? recalc_sigpending+0x1ac/0x230 [ 36.299703][ T567] get_signal+0x64f/0x1430 [ 36.299726][ T567] arch_do_signal_or_restart+0xe2/0x1100 [ 36.299747][ T567] ? __fget_files+0x2e1/0x340 [ 36.299763][ T567] ? memcpy+0x56/0x70 [ 36.299783][ T567] ? get_sigframe_size+0x10/0x10 [ 36.299799][ T567] ? __se_sys_futex+0x135/0x330 [ 36.299820][ T567] ? __x64_sys_epoll_ctl+0x162/0x1b0 [ 36.299841][ T567] exit_to_user_mode_loop+0xa7/0xe0 [ 36.299860][ T567] exit_to_user_mode_prepare+0x87/0xd0 [ 36.299877][ T567] syscall_exit_to_user_mode+0x1a/0x30 [ 36.299896][ T567] do_syscall_64+0x58/0xa0 [ 36.299912][ T567] ? clear_bhb_loop+0x50/0xa0 [ 36.299930][ T567] ? clear_bhb_loop+0x50/0xa0 [ 36.299947][ T567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.299966][ T567] RIP: 0033:0x7fdc994b9159 [ 36.299980][ T567] Code: Unable to access opcode bytes at RIP 0x7fdc994b912f. [ 36.299989][ T567] RSP: 002b:00007fdc97f120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.300011][ T567] RAX: fffffffffffffe00 RBX: 00007fdc99740fa8 RCX: 00007fdc994b9159 [ 36.300024][ T567] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc99740fa8 [ 36.300036][ T567] RBP: 00007fdc99740fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.300047][ T567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.300058][ T567] R13: 00007fdc99741038 R14: 00007ffedf5521d0 R15: 00007ffedf5522b8 [ 36.300075][ T567] [ 36.385102][ T564] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.385200][ T564] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.819305][ T30] audit: type=1400 audit(1788364985.264:201): avc: denied { read write } for pid=573 comm="syz.1.105" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.958031][ T580] set_capacity_and_notify: 1 callbacks suppressed [ 36.958050][ T580] loop4: detected capacity change from 0 to 256 [ 37.468454][ T598] process 'syz.4.115' launched './file0' with NULL argv: empty string added [ 37.666071][ T606] loop1: detected capacity change from 0 to 512 [ 37.741082][ T606] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.809723][ T606] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.732879][ T625] FAULT_INJECTION: forcing a failure. [ 38.732879][ T625] name failslab, interval 1, probability 0, space 0, times 0 [ 38.770093][ T625] CPU: 1 PID: 625 Comm: syz.4.125 Tainted: G W syzkaller #0 [ 38.779748][ T625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.790753][ T625] Call Trace: [ 38.794080][ T625] [ 38.797374][ T625] __dump_stack+0x21/0x30 [ 38.802281][ T625] dump_stack_lvl+0x110/0x170 [ 38.807017][ T625] ? show_regs_print_info+0x20/0x20 [ 38.812879][ T625] dump_stack+0x15/0x20 [ 38.817476][ T625] should_fail+0x3ab/0x500 [ 38.821951][ T625] __should_failslab+0xa4/0xe0 [ 38.826769][ T625] should_failslab+0x9/0x20 [ 38.831466][ T625] slab_pre_alloc_hook+0x39/0xd0 [ 38.836782][ T625] ? __kernfs_new_node+0xe1/0x670 [ 38.842044][ T625] kmem_cache_alloc+0x44/0x260 [ 38.847096][ T625] __kernfs_new_node+0xe1/0x670 [ 38.852172][ T625] ? clear_nonspinnable+0x60/0x60 [ 38.857550][ T625] ? rwsem_write_trylock+0x136/0x300 [ 38.862908][ T625] ? kernfs_new_node+0x260/0x260 [ 38.868174][ T625] ? up_write+0x7b/0x290 [ 38.873126][ T625] ? kernfs_activate+0x35e/0x370 [ 38.878326][ T625] kernfs_new_node+0x150/0x260 [ 38.884215][ T625] kernfs_create_link+0xa4/0x200 [ 38.891307][ T625] sysfs_do_create_link_sd+0x8a/0x110 [ 38.897495][ T625] sysfs_create_link+0x68/0x80 [ 38.904339][ T625] device_add+0x734/0xe90 [ 38.908969][ T625] wakeup_source_sysfs_add+0x1f7/0x2e0 [ 38.914983][ T625] wakeup_source_register+0x1a5/0x3d0 [ 38.922988][ T625] ep_insert+0xd8d/0x1740 [ 38.931262][ T625] ? ep_loop_check+0x80/0x80 [ 38.936053][ T625] ? __kasan_check_write+0x14/0x20 [ 38.942716][ T625] ? wait_for_completion_killable_timeout+0x10/0x10 [ 38.951654][ T625] ? ep_get_upwards_depth_proc+0x11b/0x1b0 [ 38.957763][ T625] do_epoll_ctl+0x878/0xdc0 [ 38.960687][ T630] loop1: detected capacity change from 0 to 1024 [ 38.962691][ T625] __x64_sys_epoll_ctl+0x162/0x1b0 [ 38.974451][ T625] ? ep_modify+0x870/0x870 [ 38.979016][ T625] ? switch_fpu_return+0x15d/0x2c0 [ 38.984351][ T625] x64_sys_call+0x3af/0x9a0 [ 38.988905][ T625] do_syscall_64+0x4c/0xa0 [ 38.993485][ T625] ? clear_bhb_loop+0x50/0xa0 [ 38.998368][ T625] ? clear_bhb_loop+0x50/0xa0 [ 39.003431][ T625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.009463][ T625] RIP: 0033:0x7fdc994b9159 [ 39.014956][ T625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.034743][ T625] RSP: 002b:00007fdc97f12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 39.043978][ T625] RAX: ffffffffffffffda RBX: 00007fdc99740fa0 RCX: 00007fdc994b9159 [ 39.052390][ T625] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 39.061324][ T625] RBP: 00007fdc99550024 R08: 0000000000000000 R09: 0000000000000000 [ 39.070200][ T625] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.078430][ T625] R13: 00007fdc99741038 R14: 00007fdc99740fa0 R15: 00007ffedf5522b8 [ 39.086629][ T625] [ 39.117891][ T632] loop3: detected capacity change from 0 to 512 [ 39.145095][ T630] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 39.237759][ T636] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd29 [ 39.922094][ T677] hub 8-0:1.0: USB hub found [ 39.927630][ T677] hub 8-0:1.0: 1 port detected [ 40.103465][ T680] usb usb7: usbfs: process 680 (syz.1.148) did not claim interface 0 before use [ 40.702687][ T690] FAULT_INJECTION: forcing a failure. [ 40.702687][ T690] name failslab, interval 1, probability 0, space 0, times 0 [ 40.717617][ T690] CPU: 0 PID: 690 Comm: syz.3.153 Tainted: G W syzkaller #0 [ 40.732082][ T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.743904][ T690] Call Trace: [ 40.748637][ T690] [ 40.753220][ T690] __dump_stack+0x21/0x30 [ 40.761370][ T690] dump_stack_lvl+0x110/0x170 [ 40.767675][ T690] ? show_regs_print_info+0x20/0x20 [ 40.774977][ T690] dump_stack+0x15/0x20 [ 40.782266][ T690] should_fail+0x3ab/0x500 [ 40.787874][ T690] __should_failslab+0xa4/0xe0 [ 40.797399][ T690] should_failslab+0x9/0x20 [ 40.803906][ T690] slab_pre_alloc_hook+0x39/0xd0 [ 40.809822][ T690] ? __sigqueue_alloc+0x137/0x210 [ 40.816109][ T690] kmem_cache_alloc+0x44/0x260 [ 40.822121][ T690] __sigqueue_alloc+0x137/0x210 [ 40.829530][ T690] __send_signal+0x21a/0xce0 [ 40.835751][ T690] do_notify_parent+0x6a3/0x830 [ 40.841301][ T690] ? complete_signal+0xd10/0xd10 [ 40.846967][ T690] release_task+0xe39/0x1210 [ 40.853007][ T690] do_exit+0x1a9c/0x29a0 [ 40.857752][ T690] ? put_task_struct+0x90/0x90 [ 40.863489][ T690] ? __kasan_check_write+0x14/0x20 [ 40.869563][ T690] ? _raw_spin_lock_irq+0x95/0xf0 [ 40.878080][ T690] do_group_exit+0x149/0x310 [ 40.884984][ T690] ? __kasan_check_write+0x14/0x20 [ 40.891751][ T690] ? recalc_sigpending+0x1ac/0x230 [ 40.901148][ T690] get_signal+0x64f/0x1430 [ 40.906535][ T690] arch_do_signal_or_restart+0xe2/0x1100 [ 40.913131][ T690] ? __fget_files+0x2e1/0x340 [ 40.920611][ T690] ? get_sigframe_size+0x10/0x10 [ 40.927478][ T690] ? __se_sys_futex+0x135/0x330 [ 40.933817][ T690] ? __x64_sys_epoll_ctl+0x162/0x1b0 [ 40.945305][ T690] exit_to_user_mode_loop+0xa7/0xe0 [ 40.952052][ T690] exit_to_user_mode_prepare+0x87/0xd0 [ 40.960209][ T690] syscall_exit_to_user_mode+0x1a/0x30 [ 40.968418][ T690] do_syscall_64+0x58/0xa0 [ 40.975411][ T690] ? clear_bhb_loop+0x50/0xa0 [ 40.981034][ T690] ? clear_bhb_loop+0x50/0xa0 [ 40.987396][ T690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.995637][ T690] RIP: 0033:0x7f0f683ef159 [ 41.000975][ T690] Code: Unable to access opcode bytes at RIP 0x7f0f683ef12f. [ 41.011333][ T690] RSP: 002b:00007f0f66e480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.022248][ T690] RAX: fffffffffffffe00 RBX: 00007f0f68676fa8 RCX: 00007f0f683ef159 [ 41.033184][ T690] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f68676fa8 [ 41.045063][ T690] RBP: 00007f0f68676fa0 R08: 0000000000000000 R09: 0000000000000000 [ 41.055053][ T690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.065164][ T690] R13: 00007f0f68677038 R14: 00007ffd28a7d640 R15: 00007ffd28a7d728 [ 41.077644][ T690] [ 41.389114][ T700] loop3: detected capacity change from 0 to 128 [ 41.486997][ T704] device syzkaller0 entered promiscuous mode [ 41.508178][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 41.508200][ T30] audit: type=1400 audit(1788364990.014:227): avc: denied { ioctl } for pid=703 comm="syz.1.158" path="socket:[17086]" dev="sockfs" ino=17086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.550379][ T706] SELinux: failed to load policy [ 41.586251][ T700] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.607925][ T30] audit: type=1400 audit(1788364990.014:228): avc: denied { write } for pid=703 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.628809][ T30] audit: type=1400 audit(1788364990.054:229): avc: denied { load_policy } for pid=705 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.653444][ T700] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.670124][ T700] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.156: No space for directory leaf checksum. Please run e2fsck -D. [ 41.687333][ T700] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.156: checksumming directory block 0 [ 41.853030][ T724] FAULT_INJECTION: forcing a failure. [ 41.853030][ T724] name failslab, interval 1, probability 0, space 0, times 0 [ 41.905192][ T724] CPU: 1 PID: 724 Comm: syz.3.166 Tainted: G W syzkaller #0 [ 41.916061][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.927565][ T724] Call Trace: [ 41.933340][ T724] [ 41.936347][ T724] __dump_stack+0x21/0x30 [ 41.943157][ T724] dump_stack_lvl+0x110/0x170 [ 41.950586][ T724] ? show_regs_print_info+0x20/0x20 [ 41.957216][ T724] dump_stack+0x15/0x20 [ 41.962925][ T724] should_fail+0x3ab/0x500 [ 41.969741][ T724] __should_failslab+0xa4/0xe0 [ 41.976136][ T724] should_failslab+0x9/0x20 [ 41.981901][ T724] slab_pre_alloc_hook+0x39/0xd0 [ 41.987384][ T724] ? __kernfs_new_node+0xe1/0x670 [ 41.993472][ T724] kmem_cache_alloc+0x44/0x260 [ 41.999899][ T724] __kernfs_new_node+0xe1/0x670 [ 42.005647][ T724] ? clear_nonspinnable+0x60/0x60 [ 42.012717][ T724] ? rwsem_wake+0x104/0x200 [ 42.018861][ T724] ? kernfs_new_node+0x260/0x260 [ 42.024608][ T724] ? up_write+0x7b/0x290 [ 42.031053][ T724] ? kernfs_activate+0x35e/0x370 [ 42.037484][ T724] kernfs_new_node+0x150/0x260 [ 42.046073][ T724] kernfs_create_link+0xa4/0x200 [ 42.052489][ T724] sysfs_do_create_link_sd+0x8a/0x110 [ 42.058144][ T724] sysfs_create_link+0x68/0x80 [ 42.063556][ T724] device_add+0x734/0xe90 [ 42.068544][ T724] wakeup_source_sysfs_add+0x1f7/0x2e0 [ 42.074674][ T724] wakeup_source_register+0x1a5/0x3d0 [ 42.080550][ T724] ep_insert+0xd8d/0x1740 [ 42.086396][ T724] ? ep_loop_check+0x80/0x80 [ 42.092010][ T724] ? __kasan_check_write+0x14/0x20 [ 42.098570][ T724] ? wait_for_completion_killable_timeout+0x10/0x10 [ 42.105848][ T724] ? ep_get_upwards_depth_proc+0x11b/0x1b0 [ 42.112943][ T724] do_epoll_ctl+0x878/0xdc0 [ 42.118799][ T724] __x64_sys_epoll_ctl+0x162/0x1b0 [ 42.124798][ T724] ? ep_modify+0x870/0x870 [ 42.130951][ T724] ? switch_fpu_return+0x15d/0x2c0 [ 42.137229][ T724] x64_sys_call+0x3af/0x9a0 [ 42.142731][ T724] do_syscall_64+0x4c/0xa0 [ 42.147465][ T724] ? clear_bhb_loop+0x50/0xa0 [ 42.152196][ T724] ? clear_bhb_loop+0x50/0xa0 [ 42.157573][ T724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.165133][ T724] RIP: 0033:0x7f0f683ef159 [ 42.169871][ T724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.197232][ T724] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 42.206843][ T724] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 42.215515][ T724] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 42.224079][ T724] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 42.232775][ T724] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.242051][ T724] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 42.255493][ T724] [ 42.571903][ T742] xt_hashlimit: size too large, truncated to 1048576 [ 42.587760][ T734] loop3: detected capacity change from 0 to 8192 [ 42.664854][ T30] audit: type=1400 audit(1788364991.164:230): avc: denied { bind } for pid=741 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.698599][ T743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.173'. [ 42.726975][ T30] audit: type=1400 audit(1788364991.204:231): avc: denied { create } for pid=744 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.841762][ T30] audit: type=1400 audit(1788364991.204:232): avc: denied { setopt } for pid=741 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.924358][ T30] audit: type=1400 audit(1788364991.424:233): avc: denied { ioctl } for pid=751 comm="syz.3.177" path="socket:[16215]" dev="sockfs" ino=16215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.027680][ T30] audit: type=1400 audit(1788364991.534:234): avc: denied { name_bind } for pid=755 comm="syz.3.179" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.112571][ T30] audit: type=1400 audit(1788364991.554:235): avc: denied { node_bind } for pid=755 comm="syz.3.179" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.227695][ T30] audit: type=1400 audit(1788364991.614:236): avc: denied { mount } for pid=759 comm="syz.3.181" name="/" dev="configfs" ino=14545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.494642][ T768] loop3: detected capacity change from 0 to 8192 [ 43.674762][ T785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 43.968837][ T798] loop4: detected capacity change from 0 to 8192 [ 43.982978][ T802] capability: warning: `syz.3.200' uses 32-bit capabilities (legacy support in use) [ 44.600476][ T813] loop3: detected capacity change from 0 to 8192 [ 44.672841][ T820] loop1: detected capacity change from 0 to 256 [ 44.692838][ T813] loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 44.703876][ T813] loop3: p2 size 83886080 extends beyond EOD, truncated [ 44.866738][ T813] loop3: p5 size 83886080 extends beyond EOD, truncated [ 44.877794][ T813] loop3: p6 size 83886080 extends beyond EOD, truncated [ 44.890177][ T813] loop3: p7 size 83886080 extends beyond EOD, truncated [ 44.901125][ T813] loop3: p8 size 83886080 extends beyond EOD, truncated [ 44.912338][ T813] loop3: p9 size 83886080 extends beyond EOD, truncated [ 44.947448][ T813] loop3: p10 size 83886080 extends beyond EOD, truncated [ 45.026758][ T813] loop3: p11 size 83886080 extends beyond EOD, truncated [ 45.047084][ T813] loop3: p12 size 83886080 extends beyond EOD, truncated [ 45.067109][ T813] loop3: p13 size 83886080 extends beyond EOD, truncated [ 45.086194][ T820] FAT-fs (loop1): Directory bread(block 64) failed [ 45.093467][ T820] FAT-fs (loop1): Directory bread(block 65) failed [ 45.123563][ T820] FAT-fs (loop1): Directory bread(block 66) failed [ 45.138898][ T813] loop3: p14 size 83886080 extends beyond EOD, truncated [ 45.150699][ T820] FAT-fs (loop1): Directory bread(block 67) failed [ 45.158197][ T820] FAT-fs (loop1): Directory bread(block 68) failed [ 45.165355][ T820] FAT-fs (loop1): Directory bread(block 69) failed [ 45.172611][ T813] loop3: p15 size 83886080 extends beyond EOD, truncated [ 45.183318][ T820] FAT-fs (loop1): Directory bread(block 70) failed [ 45.190071][ T813] loop3: p16 size 83886080 extends beyond EOD, truncated [ 45.203192][ T820] FAT-fs (loop1): Directory bread(block 71) failed [ 45.213942][ T820] FAT-fs (loop1): Directory bread(block 72) failed [ 45.217840][ T813] loop3: p17 size 83886080 extends beyond EOD, truncated [ 45.223275][ T820] FAT-fs (loop1): Directory bread(block 73) failed [ 45.261493][ T813] loop3: p18 size 83886080 extends beyond EOD, truncated [ 45.299778][ T820] attempt to access beyond end of device [ 45.299778][ T820] loop1: rw=1, want=1804, limit=256 [ 45.346298][ T813] loop3: p19 size 83886080 extends beyond EOD, truncated [ 45.388357][ T813] loop3: p20 size 83886080 extends beyond EOD, truncated [ 45.426404][ T813] loop3: p21 size 83886080 extends beyond EOD, truncated [ 45.446119][ T813] loop3: p22 size 83886080 extends beyond EOD, truncated [ 45.453271][ T832] loop1: detected capacity change from 0 to 8192 [ 45.474491][ T813] loop3: p23 size 83886080 extends beyond EOD, truncated [ 45.505202][ T813] loop3: p24 size 83886080 extends beyond EOD, truncated [ 45.535537][ T813] loop3: p25 size 83886080 extends beyond EOD, truncated [ 45.576374][ T813] loop3: p26 size 83886080 extends beyond EOD, truncated [ 45.596900][ T813] loop3: p27 size 83886080 extends beyond EOD, truncated [ 45.636166][ T813] loop3: p28 size 83886080 extends beyond EOD, truncated [ 45.656453][ T813] loop3: p29 size 83886080 extends beyond EOD, truncated [ 45.665169][ T813] loop3: p30 size 83886080 extends beyond EOD, truncated [ 45.673633][ T813] loop3: p31 size 83886080 extends beyond EOD, truncated [ 45.696654][ T813] loop3: p32 size 83886080 extends beyond EOD, truncated [ 45.736421][ T813] loop3: p33 size 83886080 extends beyond EOD, truncated [ 45.756673][ T813] loop3: p34 size 83886080 extends beyond EOD, truncated [ 45.776428][ T813] loop3: p35 size 83886080 extends beyond EOD, truncated [ 45.816635][ T813] loop3: p36 size 83886080 extends beyond EOD, truncated [ 45.875613][ T813] loop3: p37 size 83886080 extends beyond EOD, truncated [ 45.931936][ T813] loop3: p38 size 83886080 extends beyond EOD, truncated [ 45.960970][ T813] loop3: p39 size 83886080 extends beyond EOD, truncated [ 45.984407][ T813] loop3: p40 size 83886080 extends beyond EOD, truncated [ 46.050508][ T813] loop3: p41 size 83886080 extends beyond EOD, truncated [ 46.062391][ T850] loop1: detected capacity change from 0 to 1024 [ 46.086503][ T813] loop3: p42 size 83886080 extends beyond EOD, truncated [ 46.116056][ T850] EXT4-fs (loop1): Ignoring removed nobh option [ 46.116301][ T813] loop3: p43 size 83886080 extends beyond EOD, truncated [ 46.131048][ T850] EXT4-fs (loop1): Ignoring removed bh option [ 46.166538][ T813] loop3: p44 size 83886080 extends beyond EOD, truncated [ 46.186397][ T850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 46.196806][ T813] loop3: p45 size 83886080 extends beyond EOD, truncated [ 46.202253][ T850] System zones: 0-1, 3-12 [ 46.219163][ T813] loop3: p46 size 83886080 extends beyond EOD, truncated [ 46.236294][ T813] loop3: p47 size 83886080 extends beyond EOD, truncated [ 46.253534][ T850] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nojournal_checksum,max_dir_size_kb=0x00000000000000a7,max_dir_size_kb=0x00000000000057a4,journal_dev=0x0000000000000007,stripe=0x0000000000000011,bh,debug,dioread_lock,,errors=continue. Quota mode: none. [ 46.289533][ T813] loop3: p48 size 83886080 extends beyond EOD, truncated [ 46.314522][ T813] loop3: p49 size 83886080 extends beyond EOD, truncated [ 46.343989][ T813] loop3: p50 size 83886080 extends beyond EOD, truncated [ 46.371973][ T813] loop3: p51 size 83886080 extends beyond EOD, truncated [ 46.396534][ T813] loop3: p52 size 83886080 extends beyond EOD, truncated [ 46.414837][ T813] loop3: p53 size 83886080 extends beyond EOD, truncated [ 46.425500][ T850] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.220: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 46.456977][ T813] loop3: p54 size 83886080 extends beyond EOD, truncated [ 46.483145][ T813] loop3: p55 size 83886080 extends beyond EOD, truncated [ 46.493161][ T855] loop4: detected capacity change from 0 to 512 [ 46.514304][ T813] loop3: p56 size 83886080 extends beyond EOD, truncated [ 46.528913][ T813] loop3: p57 size 83886080 extends beyond EOD, truncated [ 46.546944][ T813] loop3: p58 size 83886080 extends beyond EOD, truncated [ 46.571504][ T813] loop3: p59 size 83886080 extends beyond EOD, truncated [ 46.580179][ T813] loop3: p60 size 83886080 extends beyond EOD, truncated [ 46.582315][ T855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.589909][ T813] loop3: p61 size 83886080 extends beyond EOD, truncated [ 46.626452][ T855] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.640700][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 46.640716][ T30] audit: type=1400 audit(1788364995.197:259): avc: denied { read } for pid=854 comm="syz.4.221" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.683975][ T813] loop3: p62 size 83886080 extends beyond EOD, truncated [ 46.694239][ T813] loop3: p63 size 83886080 extends beyond EOD, truncated [ 46.702465][ T813] loop3: p64 size 83886080 extends beyond EOD, truncated [ 46.712615][ T813] loop3: p65 size 83886080 extends beyond EOD, truncated [ 46.723389][ T813] loop3: p66 size 83886080 extends beyond EOD, truncated [ 46.738115][ T813] loop3: p67 size 83886080 extends beyond EOD, truncated [ 46.747384][ T813] loop3: p68 size 83886080 extends beyond EOD, truncated [ 46.756638][ T813] loop3: p69 size 83886080 extends beyond EOD, truncated [ 46.792025][ T813] loop3: p70 size 83886080 extends beyond EOD, truncated [ 46.798619][ T867] capability: warning: `syz.1.226' uses deprecated v2 capabilities in a way that may be insecure [ 46.819879][ T813] loop3: p71 size 83886080 extends beyond EOD, truncated [ 46.828986][ T30] audit: type=1400 audit(1788364995.387:260): avc: denied { create } for pid=866 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.876159][ T813] loop3: p72 size 83886080 extends beyond EOD, truncated [ 46.893395][ T30] audit: type=1400 audit(1788364995.387:261): avc: denied { append } for pid=868 comm="syz.4.227" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.906636][ T813] loop3: p73 size 83886080 extends beyond EOD, truncated [ 46.954337][ T30] audit: type=1400 audit(1788364995.407:262): avc: denied { ioctl } for pid=868 comm="syz.4.227" path="/dev/usbmon1" dev="devtmpfs" ino=156 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.002037][ T813] loop3: p74 size 83886080 extends beyond EOD, truncated [ 47.032120][ T813] loop3: p75 size 83886080 extends beyond EOD, truncated [ 47.039712][ T877] loop1: detected capacity change from 0 to 2048 [ 47.046949][ T30] audit: type=1400 audit(1788364995.597:263): avc: denied { mounton } for pid=878 comm="syz.4.231" path="/syzcgroup/unified/syz4/trace" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.072673][ T813] loop3: p76 size 83886080 extends beyond EOD, truncated [ 47.087592][ T813] loop3: p77 size 83886080 extends beyond EOD, truncated [ 47.112105][ T813] loop3: p78 size 83886080 extends beyond EOD, truncated [ 47.120565][ T813] loop3: p79 size 83886080 extends beyond EOD, truncated [ 47.131653][ T813] loop3: p80 size 83886080 extends beyond EOD, truncated [ 47.147379][ T813] loop3: p81 size 83886080 extends beyond EOD, truncated [ 47.168335][ T877] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 47.173067][ T813] loop3: p82 size 83886080 extends beyond EOD, truncated [ 47.190262][ T813] loop3: p83 size 83886080 extends beyond EOD, truncated [ 47.198067][ T813] loop3: p84 size 83886080 extends beyond EOD, truncated [ 47.211896][ T813] loop3: p85 size 83886080 extends beyond EOD, truncated [ 47.240671][ T813] loop3: p86 size 83886080 extends beyond EOD, truncated [ 47.275099][ T813] loop3: p87 size 83886080 extends beyond EOD, truncated [ 47.296430][ T813] loop3: p87 could not be added: -ENOMEM [ 47.302982][ T813] loop3: p88 size 83886080 extends beyond EOD, truncated [ 47.314286][ T813] loop3: p89 size 83886080 extends beyond EOD, truncated [ 47.334668][ T813] loop3: p90 size 83886080 extends beyond EOD, truncated [ 47.349549][ T813] loop3: p91 size 83886080 extends beyond EOD, truncated [ 47.374627][ T813] loop3: p92 size 83886080 extends beyond EOD, truncated [ 47.397220][ T813] loop3: p93 size 83886080 extends beyond EOD, truncated [ 47.423721][ T813] loop3: p94 size 83886080 extends beyond EOD, truncated [ 47.458399][ T813] loop3: p95 size 83886080 extends beyond EOD, truncated [ 47.478909][ T813] loop3: p96 size 83886080 extends beyond EOD, truncated [ 47.504421][ T895] hub 8-0:1.0: USB hub found [ 47.507307][ T813] loop3: p97 size 83886080 extends beyond EOD, truncated [ 47.532344][ T895] hub 8-0:1.0: 1 port detected [ 47.576429][ T813] loop3: p98 size 83886080 extends beyond EOD, truncated [ 47.598881][ T813] loop3: p99 size 83886080 extends beyond EOD, truncated [ 47.622551][ T813] loop3: p100 size 83886080 extends beyond EOD, truncated [ 47.645220][ T813] loop3: p101 size 83886080 extends beyond EOD, truncated [ 47.664405][ T813] loop3: p102 size 83886080 extends beyond EOD, truncated [ 47.676482][ T813] loop3: p103 size 83886080 extends beyond EOD, truncated [ 47.724569][ T813] loop3: p104 size 83886080 extends beyond EOD, truncated [ 47.754621][ T813] loop3: p105 size 83886080 extends beyond EOD, truncated [ 47.775162][ T813] loop3: p106 size 83886080 extends beyond EOD, truncated [ 47.795584][ T813] loop3: p107 size 83886080 extends beyond EOD, truncated [ 47.815627][ T813] loop3: p108 size 83886080 extends beyond EOD, truncated [ 47.823635][ T813] loop3: p109 size 83886080 extends beyond EOD, truncated [ 47.866474][ T813] loop3: p110 size 83886080 extends beyond EOD, truncated [ 47.880368][ T906] loop4: detected capacity change from 0 to 512 [ 47.887606][ T813] loop3: p111 size 83886080 extends beyond EOD, truncated [ 47.916202][ T813] loop3: p112 size 83886080 extends beyond EOD, truncated [ 47.943989][ T813] loop3: p113 size 83886080 extends beyond EOD, truncated [ 47.976790][ T813] loop3: p114 size 83886080 extends beyond EOD, truncated [ 47.989378][ T906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.002629][ T813] loop3: p115 size 83886080 extends beyond EOD, truncated [ 48.032618][ T813] loop3: p116 size 83886080 extends beyond EOD, truncated [ 48.041769][ T906] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.076186][ T906] EXT4-fs (loop4): 1 truncate cleaned up [ 48.082815][ T906] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 48.086438][ T813] loop3: p117 size 83886080 extends beyond EOD, [ 48.121263][ T912] device syzkaller0 entered promiscuous mode [ 48.148556][ T813] truncated [ 48.154831][ T813] loop3: p118 size 83886080 extends beyond EOD, truncated [ 48.183775][ T813] loop3: p119 size 83886080 extends beyond EOD, truncated [ 48.197811][ T813] loop3: p120 size 83886080 extends beyond EOD, truncated [ 48.213009][ T813] loop3: p121 size 83886080 extends beyond EOD, truncated [ 48.246095][ T813] loop3: p122 size 83886080 extends beyond EOD, truncated [ 48.270049][ T30] audit: type=1400 audit(1788364996.827:264): avc: denied { sys_module } for pid=914 comm="syz.1.246" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.272651][ T813] loop3: p123 size 83886080 extends beyond EOD, [ 48.296467][ T917] FAULT_INJECTION: forcing a failure. [ 48.296467][ T917] name failslab, interval 1, probability 0, space 0, times 0 [ 48.322630][ T813] truncated [ 48.329428][ T917] CPU: 0 PID: 917 Comm: syz.4.245 Tainted: G W syzkaller #0 [ 48.338339][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.348785][ T917] Call Trace: [ 48.352237][ T917] [ 48.352802][ T30] audit: type=1400 audit(1788364996.857:265): avc: denied { mounton } for pid=916 comm="syz.4.245" path="/82/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 48.355224][ T917] __dump_stack+0x21/0x30 [ 48.355259][ T917] dump_stack_lvl+0x110/0x170 [ 48.386969][ T917] ? show_regs_print_info+0x20/0x20 [ 48.392917][ T917] dump_stack+0x15/0x20 [ 48.397227][ T917] should_fail+0x3ab/0x500 [ 48.401695][ T917] __should_failslab+0xa4/0xe0 [ 48.406902][ T917] should_failslab+0x9/0x20 [ 48.411832][ T917] slab_pre_alloc_hook+0x39/0xd0 [ 48.417098][ T917] __kmalloc+0x6d/0x2c0 [ 48.421354][ T917] ? security_sb_alloc+0x40/0x120 [ 48.426635][ T917] security_sb_alloc+0x40/0x120 [ 48.431635][ T917] alloc_super+0x17e/0x840 [ 48.436921][ T917] sget_fc+0x2c9/0x700 [ 48.441372][ T917] ? kill_litter_super+0xa0/0xa0 [ 48.446783][ T917] ? proc_reconfigure+0x3c0/0x3c0 [ 48.451885][ T917] get_tree_nodev+0x2a/0x160 [ 48.457222][ T917] ? proc_get_tree+0xd/0x20 [ 48.462039][ T917] proc_get_tree+0x1c/0x20 [ 48.467180][ T917] vfs_get_tree+0x89/0x260 [ 48.472024][ T917] do_new_mount+0x251/0xb40 [ 48.477502][ T917] ? security_capable+0x87/0xb0 [ 48.482444][ T917] path_mount+0x640/0xff0 [ 48.487233][ T917] __se_sys_mount+0x320/0x390 [ 48.492320][ T917] ? __x64_sys_mount+0xd0/0xd0 [ 48.497229][ T917] ? __kasan_check_write+0x14/0x20 [ 48.502941][ T917] __x64_sys_mount+0xbf/0xd0 [ 48.507989][ T917] x64_sys_call+0x6bf/0x9a0 [ 48.512813][ T917] do_syscall_64+0x4c/0xa0 [ 48.519122][ T917] ? clear_bhb_loop+0x50/0xa0 [ 48.524116][ T917] ? clear_bhb_loop+0x50/0xa0 [ 48.530154][ T917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.530158][ T30] audit: type=1400 audit(1788364997.067:266): avc: denied { mounton } for pid=919 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.560911][ T917] RIP: 0033:0x7fdc994b9159 [ 48.565464][ T917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.585880][ T917] RSP: 002b:00007fdc97f12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.595982][ T917] RAX: ffffffffffffffda RBX: 00007fdc99740fa0 RCX: 00007fdc994b9159 [ 48.605151][ T917] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 48.616108][ T917] RBP: 00007fdc99550024 R08: 0000000000000000 R09: 0000000000000000 [ 48.624428][ T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.632566][ T917] R13: 00007fdc99741038 R14: 00007fdc99740fa0 R15: 00007ffedf5522b8 [ 48.641694][ T917] [ 48.662974][ T813] loop3: p124 size 83886080 extends beyond EOD, truncated [ 48.686648][ T813] loop3: p125 size 83886080 extends beyond EOD, truncated [ 48.707722][ T813] loop3: p126 size 83886080 extends beyond EOD, truncated [ 48.724179][ T30] audit: type=1400 audit(1788364997.277:267): avc: denied { write } for pid=921 comm="syz.4.249" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.737871][ T813] loop3: p127 size 83886080 extends beyond EOD, [ 48.775998][ T30] audit: type=1400 audit(1788364997.307:268): avc: denied { open } for pid=921 comm="syz.4.249" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.803580][ T813] truncated [ 48.839971][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 48.860392][ T813] loop3: p128 size 83886080 extends beyond EOD, truncated [ 48.884524][ T813] loop3: p129 size 83886080 extends beyond EOD, truncated [ 48.910343][ T813] loop3: p130 size 83886080 extends beyond EOD, truncated [ 48.925073][ T936] FAULT_INJECTION: forcing a failure. [ 48.925073][ T936] name failslab, interval 1, probability 0, space 0, times 0 [ 48.941951][ T813] loop3: p131 size 83886080 extends beyond EOD, truncated [ 48.949358][ T936] CPU: 0 PID: 936 Comm: syz.1.254 Tainted: G W syzkaller #0 [ 48.959210][ T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.969536][ T936] Call Trace: [ 48.972962][ T936] [ 48.975931][ T936] __dump_stack+0x21/0x30 [ 48.980307][ T936] dump_stack_lvl+0x110/0x170 [ 48.986065][ T936] ? show_regs_print_info+0x20/0x20 [ 48.992212][ T936] dump_stack+0x15/0x20 [ 48.993433][ T813] loop3: p132 size 83886080 extends beyond EOD, [ 48.997052][ T936] should_fail+0x3ab/0x500 [ 48.997090][ T936] __should_failslab+0xa4/0xe0 [ 48.997117][ T936] should_failslab+0x9/0x20 [ 48.997142][ T936] slab_pre_alloc_hook+0x39/0xd0 [ 48.997171][ T936] kmem_cache_alloc_trace+0x48/0x270 [ 49.027295][ T813] truncated [ 49.029975][ T936] ? selinux_key_alloc+0x56/0x190 [ 49.045826][ T936] selinux_key_alloc+0x56/0x190 [ 49.050737][ T936] security_key_alloc+0x74/0xa0 [ 49.056248][ T939] hub 8-0:1.0: USB hub found [ 49.056560][ T936] key_alloc+0x72c/0xef0 [ 49.065520][ T936] keyring_alloc+0x47/0xb0 [ 49.069999][ T936] install_process_keyring_to_cred+0x9c/0x120 [ 49.073891][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.076795][ T936] __se_sys_keyctl+0xbb8/0xdb0 [ 49.076826][ T936] ? __x64_sys_keyctl+0xd0/0xd0 [ 49.087932][ T813] loop3: p133 size 83886080 extends beyond EOD, [ 49.090041][ T936] ? file_end_write+0x1b0/0x1b0 [ 49.095521][ T813] truncated [ 49.110914][ T936] ? __kasan_check_write+0x14/0x20 [ 49.116091][ T936] ? mutex_unlock+0x8f/0x230 [ 49.118019][ T813] loop3: p134 size 83886080 extends beyond EOD, truncated [ 49.120813][ T936] ? __se_sys_futex+0x135/0x330 [ 49.132894][ T939] hub 8-0:1.0: 1 port detected [ 49.135812][ T936] ? __kasan_check_write+0x14/0x20 [ 49.146304][ T919] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.146485][ T936] ? __x64_sys_futex+0x100/0x100 [ 49.160018][ T936] ? ksys_write+0x1fa/0x260 [ 49.165266][ T936] ? __kasan_check_write+0x14/0x20 [ 49.170789][ T936] __x64_sys_keyctl+0xbf/0xd0 [ 49.176363][ T936] x64_sys_call+0x648/0x9a0 [ 49.178370][ T813] loop3: p135 size 83886080 extends beyond EOD, truncated [ 49.180939][ T936] do_syscall_64+0x4c/0xa0 [ 49.190691][ T919] device bridge_slave_0 entered promiscuous mode [ 49.193760][ T936] ? clear_bhb_loop+0x50/0xa0 [ 49.206156][ T936] ? clear_bhb_loop+0x50/0xa0 [ 49.211050][ T936] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.218051][ T936] RIP: 0033:0x7f284be47159 [ 49.223163][ T936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.244492][ T936] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 49.252953][ T936] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 49.263972][ T936] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 49.272863][ T936] RBP: 00007f284bede024 R08: 0000000000000000 R09: 0000000000000000 [ 49.281453][ T936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.290040][ T936] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 49.299431][ T936] [ 49.307592][ T813] loop3: p136 size 83886080 extends beyond EOD, truncated [ 49.318123][ T813] loop3: p137 size 83886080 extends beyond EOD, truncated [ 49.326264][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.334717][ T919] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.345725][ T813] loop3: p138 size 83886080 extends beyond EOD, truncated [ 49.354156][ T813] loop3: p139 size 83886080 extends beyond EOD, truncated [ 49.366697][ T919] device bridge_slave_1 entered promiscuous mode [ 49.374460][ T813] loop3: p140 size 83886080 extends beyond EOD, truncated [ 49.394693][ T813] loop3: p141 size 83886080 extends beyond EOD, truncated [ 49.426503][ T813] loop3: p142 size 83886080 extends beyond EOD, truncated [ 49.434733][ T813] loop3: p142 could not be added: -ENOMEM [ 49.445703][ T813] loop3: p143 size 83886080 extends beyond EOD, truncated [ 49.477133][ T944] FAULT_INJECTION: forcing a failure. [ 49.477133][ T944] name failslab, interval 1, probability 0, space 0, times 0 [ 49.492425][ T944] CPU: 0 PID: 944 Comm: syz.1.256 Tainted: G W syzkaller #0 [ 49.501071][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.515677][ T944] Call Trace: [ 49.519822][ T944] [ 49.523187][ T944] __dump_stack+0x21/0x30 [ 49.528885][ T944] dump_stack_lvl+0x110/0x170 [ 49.534340][ T944] ? show_regs_print_info+0x20/0x20 [ 49.540350][ T944] dump_stack+0x15/0x20 [ 49.544943][ T944] should_fail+0x3ab/0x500 [ 49.549844][ T944] __should_failslab+0xa4/0xe0 [ 49.554771][ T944] should_failslab+0x9/0x20 [ 49.559588][ T944] slab_pre_alloc_hook+0x39/0xd0 [ 49.564752][ T944] ? security_inode_alloc+0x33/0x110 [ 49.570177][ T944] kmem_cache_alloc+0x44/0x260 [ 49.575088][ T944] security_inode_alloc+0x33/0x110 [ 49.580425][ T944] inode_init_always+0x72c/0x9b0 [ 49.585510][ T944] new_inode_pseudo+0x91/0x210 [ 49.591082][ T944] new_inode+0x28/0x1e0 [ 49.595399][ T944] proc_get_inode+0x24/0x710 [ 49.601426][ T944] proc_fill_super+0x4e3/0x760 [ 49.606486][ T944] get_tree_nodev+0xb3/0x160 [ 49.611842][ T944] ? proc_reconfigure+0x3c0/0x3c0 [ 49.616999][ T944] proc_get_tree+0x1c/0x20 [ 49.621593][ T944] vfs_get_tree+0x89/0x260 [ 49.626065][ T944] do_new_mount+0x251/0xb40 [ 49.630981][ T944] ? security_capable+0x87/0xb0 [ 49.636511][ T944] path_mount+0x640/0xff0 [ 49.641501][ T944] __se_sys_mount+0x320/0x390 [ 49.646225][ T944] ? __x64_sys_mount+0xd0/0xd0 [ 49.651052][ T944] ? __kasan_check_write+0x14/0x20 [ 49.656216][ T944] __x64_sys_mount+0xbf/0xd0 [ 49.661160][ T944] x64_sys_call+0x6bf/0x9a0 [ 49.665982][ T944] do_syscall_64+0x4c/0xa0 [ 49.670568][ T944] ? clear_bhb_loop+0x50/0xa0 [ 49.675299][ T944] ? clear_bhb_loop+0x50/0xa0 [ 49.680368][ T944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.687183][ T944] RIP: 0033:0x7f284be47159 [ 49.691858][ T944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.712472][ T944] RSP: 002b:00007f284a8a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.721259][ T944] RAX: ffffffffffffffda RBX: 00007f284c0cefa0 RCX: 00007f284be47159 [ 49.729483][ T944] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 49.737717][ T944] RBP: 00007f284bede024 R08: 0000000000000000 R09: 0000000000000000 [ 49.746088][ T944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.754771][ T944] R13: 00007f284c0cf038 R14: 00007f284c0cefa0 R15: 00007ffe443a6d58 [ 49.762888][ T944] [ 49.771028][ T944] proc_fill_super: get root inode failed [ 49.776930][ T813] loop3: p144 size 83886080 extends beyond EOD, truncated [ 49.785556][ T946] FAULT_INJECTION: forcing a failure. [ 49.785556][ T946] name failslab, interval 1, probability 0, space 0, times 0 [ 49.799613][ T946] CPU: 0 PID: 946 Comm: syz.1.256 Tainted: G W syzkaller #0 [ 49.808620][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.819051][ T946] Call Trace: [ 49.822395][ T946] [ 49.825380][ T946] __dump_stack+0x21/0x30 [ 49.829911][ T946] dump_stack_lvl+0x110/0x170 [ 49.834766][ T946] ? show_regs_print_info+0x20/0x20 [ 49.840019][ T946] dump_stack+0x15/0x20 [ 49.844343][ T946] should_fail+0x3ab/0x500 [ 49.849624][ T946] __should_failslab+0xa4/0xe0 [ 49.854526][ T946] should_failslab+0x9/0x20 [ 49.859069][ T946] slab_pre_alloc_hook+0x39/0xd0 [ 49.864169][ T946] kmem_cache_alloc_trace+0x48/0x270 [ 49.869498][ T946] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 49.875259][ T946] selinux_sk_alloc_security+0x7e/0x1a0 [ 49.880933][ T946] security_sk_alloc+0x72/0xa0 [ 49.886142][ T946] sk_prot_alloc+0x108/0x320 [ 49.891791][ T946] sk_alloc+0x38/0x430 [ 49.896006][ T946] __vsock_create+0x3e/0x940 [ 49.900934][ T946] vsock_create+0x13b/0x3f0 [ 49.905660][ T946] __sock_create+0x38d/0x7a0 [ 49.910690][ T946] __sys_socket+0xec/0x190 [ 49.915162][ T946] __x64_sys_socket+0x7a/0x90 [ 49.920901][ T946] x64_sys_call+0x8c5/0x9a0 [ 49.925687][ T946] do_syscall_64+0x4c/0xa0 [ 49.930332][ T946] ? clear_bhb_loop+0x50/0xa0 [ 49.935130][ T946] ? clear_bhb_loop+0x50/0xa0 [ 49.939922][ T946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.945835][ T946] RIP: 0033:0x7f284be47159 [ 49.951264][ T946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.972200][ T946] RSP: 002b:00007f284a87f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 49.981111][ T946] RAX: ffffffffffffffda RBX: 00007f284c0cf090 RCX: 00007f284be47159 [ 49.989397][ T946] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 49.998246][ T946] RBP: 00007f284bede024 R08: 0000000000000000 R09: 0000000000000000 [ 50.006511][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.015520][ T946] R13: 00007f284c0cf128 R14: 00007f284c0cf090 R15: 00007ffe443a6d58 [ 50.023990][ T946] [ 50.037802][ T813] loop3: p145 size 83886080 extends beyond EOD, truncated [ 50.054402][ T813] loop3: p146 size 83886080 extends beyond EOD, truncated [ 50.070473][ T813] loop3: p147 size 83886080 extends beyond EOD, truncated [ 50.086810][ T813] loop3: p148 size 83886080 extends beyond EOD, truncated [ 50.094838][ T813] loop3: p149 size 83886080 extends beyond EOD, truncated [ 50.106413][ T813] loop3: p150 size 83886080 extends beyond EOD, truncated [ 50.114774][ T813] loop3: p151 size 83886080 extends beyond EOD, truncated [ 50.123118][ T813] loop3: p152 size 83886080 extends beyond EOD, truncated [ 50.132140][ T813] loop3: p153 size 83886080 extends beyond EOD, truncated [ 50.153435][ T813] loop3: p154 size 83886080 extends beyond EOD, truncated [ 50.167019][ T813] loop3: p155 size 83886080 extends beyond EOD, truncated syzkaller syzkaller login: [ 50.181592][ T813] loop3: p156 size 83886080 extends beyond EOD, truncated [ 50.189776][ T813] loop3: p157 size 83886080 extends beyond EOD, truncated [ 50.198633][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.207090][ T813] loop3: p158 size 83886080 extends beyond EOD, truncated [ 50.216321][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.229902][ T813] loop3: p159 size 83886080 extends beyond EOD, truncated [ 50.245198][ T813] loop3: p160 size 83886080 extends beyond EOD, truncated [ 50.255160][ T813] loop3: p161 size 83886080 extends beyond EOD, truncated [ 50.263694][ T813] loop3: p162 size 83886080 extends beyond EOD, truncated [ 50.273001][ T813] loop3: p163 size 83886080 extends beyond EOD, truncated [ 50.280991][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.293418][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.295820][ T813] loop3: p164 size 83886080 extends beyond EOD, [ 50.303210][ T952] hub 8-0:1.0: USB hub found [ 50.314734][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.314790][ T952] hub 8-0:1.0: 1 port detected [ 50.322586][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.324017][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.349044][ T813] truncated [ 50.353134][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.361817][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.367297][ T813] loop3: p165 size 83886080 extends beyond EOD, truncated [ 50.368968][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.395092][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.396584][ T813] loop3: p166 size 83886080 extends beyond EOD, truncated [ 50.408162][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.430810][ T813] loop3: p167 size 83886080 extends beyond EOD, truncated [ 50.439257][ T10] device bridge_slave_1 left promiscuous mode [ 50.445666][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.447220][ T813] loop3: p168 size 83886080 extends beyond EOD, truncated [ 50.465277][ T813] loop3: p169 size 83886080 extends beyond EOD, truncated [ 50.481820][ T813] loop3: p170 size 83886080 extends beyond EOD, truncated [ 50.492590][ T10] device bridge_slave_0 left promiscuous mode [ 50.495313][ T813] loop3: p171 size 83886080 extends beyond EOD, truncated [ 50.504319][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.511117][ T813] loop3: p172 size 83886080 extends beyond EOD, truncated [ 50.522413][ T813] loop3: p173 size 83886080 extends beyond EOD, truncated [ 50.530389][ T10] device veth1_macvtap left promiscuous mode [ 50.531120][ T813] loop3: p174 size 83886080 extends beyond EOD, truncated [ 50.544788][ T10] device veth0_vlan left promiscuous mode [ 50.558430][ T813] loop3: p175 size 83886080 extends beyond EOD, truncated [ 50.575045][ T813] loop3: p176 size 83886080 extends beyond EOD, truncated [ 50.594449][ T813] loop3: p177 size 83886080 extends beyond EOD, truncated [ 50.616177][ T813] loop3: p178 size 83886080 extends beyond EOD, truncated [ 50.626486][ T813] loop3: p179 size 83886080 extends beyond EOD, truncated [ 50.639527][ T813] loop3: p180 size 83886080 extends beyond EOD, truncated [ 50.654440][ T813] loop3: p181 size 83886080 extends beyond EOD, truncated [ 50.670330][ T813] loop3: p182 size 83886080 extends beyond EOD, truncated [ 50.684786][ T964] ------------[ cut here ]------------ [ 50.690766][ T964] WARNING: CPU: 0 PID: 964 at crypto/rsa-pkcs1pad.c:538 pkcs1pad_verify+0x50c/0x680 [ 50.691385][ T813] loop3: p183 size 83886080 extends beyond EOD, [ 50.701467][ T964] Modules linked in: [ 50.713348][ T964] CPU: 0 PID: 964 Comm: syz.4.264 Tainted: G W syzkaller #0 [ 50.716159][ T813] truncated [ 50.722730][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.736226][ T964] RIP: 0010:pkcs1pad_verify+0x50c/0x680 [ 50.741934][ T964] Code: 44 89 f6 e8 96 0e 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 82 eb 39 ff 0f 0b b8 ea ff ff ff eb e3 e8 74 eb 39 ff <0f> 0b b8 ea ff ff ff eb d5 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c [ 50.742478][ T813] loop3: p184 size 83886080 extends beyond EOD, [ 50.762168][ T964] RSP: 0018:ffffc90000a87728 EFLAGS: 00010283 [ 50.762194][ T964] RAX: ffffffff822fd00c RBX: ffff888110350400 RCX: 0000000000080000 [ 50.762213][ T964] RDX: ffffc90003343000 RSI: 000000000000045a RDI: 000000000000045b [ 50.762229][ T964] RBP: ffffc90000a87770 R08: ffffc90000a878af R09: ffffc90000a87898 [ 50.762331][ T964] R10: dffffc0000000000 R11: fffff52000150f16 R12: 0000000000000000 [ 50.762349][ T964] R13: ffff88812aae5700 R14: ffff888110350444 R15: dffffc0000000000 [ 50.769583][ T813] truncated [ 50.800862][ T964] FS: 00007fdc97f126c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.811038][ T813] loop3: p185 size 83886080 extends beyond EOD, [ 50.822025][ T964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.836370][ T813] truncated [ 50.844010][ T964] CR2: 00007fdc99506840 CR3: 0000000131a4d000 CR4: 00000000003506b0 [ 50.855165][ T813] loop3: p186 size 83886080 extends beyond EOD, truncated [ 50.855797][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.864351][ T813] loop3: p187 size 83886080 extends beyond EOD, truncated [ 50.873252][ T964] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.882954][ T813] loop3: p188 size 83886080 extends beyond EOD, truncated [ 50.889608][ T964] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.899157][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.905376][ T964] Call Trace: [ 50.914948][ T813] loop3: p189 size 83886080 extends beyond EOD, truncated [ 50.917086][ T964] [ 50.928877][ T813] loop3: p190 size 83886080 extends beyond EOD, truncated [ 50.940681][ T813] loop3: p191 size 83886080 extends beyond EOD, truncated [ 50.949868][ T813] loop3: p192 size 83886080 extends beyond EOD, truncated [ 50.951770][ T964] ? sg_init_one+0x93/0x140 [ 50.960407][ T813] loop3: p193 size 83886080 extends beyond EOD, truncated [ 50.974017][ T813] loop3: p194 size 83886080 extends beyond EOD, truncated [ 50.983552][ T813] loop3: p195 size 83886080 extends beyond EOD, truncated [ 50.989123][ T964] public_key_verify_signature+0x992/0xec0 [ 50.994328][ T813] loop3: p196 size 83886080 extends beyond EOD, truncated [ 51.013654][ T964] ? public_key_free+0x80/0x80 [ 51.019577][ T964] ? __kasan_kmalloc+0xe6/0x100 [ 51.024867][ T964] ? __kasan_kmalloc+0xd4/0x100 [ 51.030886][ T813] loop3: p197 size 83886080 extends beyond EOD, truncated [ 51.034363][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.038244][ T964] ? __kmalloc_track_caller+0x13c/0x2c0 [ 51.049759][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.054022][ T813] loop3: p198 size 83886080 extends beyond EOD, [ 51.060509][ T964] ? x64_sys_call+0x648/0x9a0 [ 51.074305][ T813] truncated [ 51.082699][ T964] ? do_syscall_64+0x4c/0xa0 [ 51.089225][ T964] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.097693][ T813] loop3: p199 size 83886080 extends beyond EOD, truncated [ 51.101079][ T964] ? software_key_eds_op+0xb40/0xb40 [ 51.112363][ T964] public_key_verify_signature_2+0x43/0x50 [ 51.122345][ T813] loop3: p200 size 83886080 extends beyond EOD, truncated [ 51.130861][ T813] loop3: p201 size 83886080 extends beyond EOD, truncated [ 51.142522][ T813] loop3: p202 size 83886080 extends beyond EOD, truncated [ 51.145406][ T919] device veth0_vlan entered promiscuous mode [ 51.154323][ T813] loop3: p203 size 83886080 extends beyond EOD, truncated [ 51.166092][ T964] verify_signature+0xd6/0x100 [ 51.171374][ T964] asymmetric_key_verify_signature+0x171/0x210 [ 51.178280][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.181747][ T964] ? asymmetric_lookup_restriction+0x4f0/0x4f0 [ 51.195061][ T813] loop3: p204 size 83886080 extends beyond EOD, truncated [ 51.195327][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.204969][ T813] loop3: p205 size 83886080 extends beyond EOD, truncated [ 51.221410][ T964] ? __kasan_check_write+0x14/0x20 [ 51.227586][ T964] ? _copy_from_user+0x95/0xd0 [ 51.246474][ T813] loop3: p206 size 83886080 extends beyond EOD, truncated [ 51.258217][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.268979][ T964] keyctl_pkey_verify+0x40e/0x430 [ 51.269518][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.275326][ T964] ? keyctl_pkey_params_get_2+0x490/0x490 [ 51.275364][ T964] ? kasan_quarantine_put+0x34/0x190 [ 51.296752][ T813] loop3: p207 size 83886080 extends beyond EOD, truncated [ 51.304486][ T964] ? kfree+0xc4/0x270 [ 51.305016][ T813] loop3: p208 size 83886080 extends beyond EOD, truncated [ 51.319866][ T964] ? __kasan_slab_free+0x11/0x20 [ 51.325077][ T964] ? slab_free_freelist_hook+0xc2/0x190 [ 51.331069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.337887][ T813] loop3: p209 size 83886080 extends beyond EOD, truncated [ 51.347042][ T813] loop3: p210 size 83886080 extends beyond EOD, truncated [ 51.355687][ T964] __se_sys_keyctl+0x764/0xdb0 [ 51.355724][ T813] loop3: p211 size 83886080 extends beyond EOD, [ 51.361512][ T964] ? __x64_sys_keyctl+0xd0/0xd0 [ 51.363033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.369957][ T964] ? btf_new_fd+0x5c7/0x930 [ 51.375106][ T813] truncated [ 51.384306][ T964] ? __se_sys_futex+0x135/0x330 [ 51.401702][ T964] ? __x64_sys_futex+0x100/0x100 [ 51.407280][ T964] ? __kasan_check_write+0x14/0x20 [ 51.409110][ T813] loop3: p212 size 83886080 extends beyond EOD, truncated [ 51.413392][ T964] __x64_sys_keyctl+0xbf/0xd0 [ 51.422241][ T813] loop3: p213 size 83886080 extends beyond EOD, truncated [ 51.427408][ T964] x64_sys_call+0x648/0x9a0 [ 51.435590][ T813] loop3: p214 size 83886080 extends beyond EOD, truncated [ 51.439748][ T964] do_syscall_64+0x4c/0xa0 [ 51.447460][ T813] loop3: p215 size 83886080 extends beyond EOD, truncated [ 51.452187][ T964] ? clear_bhb_loop+0x50/0xa0 [ 51.461366][ T813] loop3: p216 size 83886080 extends beyond EOD, truncated [ 51.466490][ T964] ? clear_bhb_loop+0x50/0xa0 [ 51.474708][ T813] loop3: p217 size 83886080 extends beyond EOD, truncated [ 51.479620][ T964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.491680][ T813] loop3: p218 size 83886080 extends beyond EOD, truncated [ 51.498691][ T964] RIP: 0033:0x7fdc994b9159 [ 51.511201][ T813] loop3: p219 size 83886080 extends beyond EOD, truncated [ 51.514980][ T964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.525530][ T813] loop3: p220 size 83886080 extends beyond EOD, [ 51.554334][ T964] RSP: 002b:00007fdc97f12028 EFLAGS: 00000246 [ 51.560130][ T813] truncated [ 51.564342][ T964] ORIG_RAX: 00000000000000fa [ 51.580184][ T813] loop3: p221 size 83886080 extends beyond EOD, truncated [ 51.581841][ T964] RAX: ffffffffffffffda RBX: 00007fdc99740fa0 RCX: 00007fdc994b9159 [ 51.595440][ T813] loop3: p222 size 83886080 extends beyond EOD, truncated [ 51.600171][ T919] device veth1_macvtap entered promiscuous mode [ 51.615450][ T813] loop3: p223 size 83886080 extends beyond EOD, truncated [ 51.624892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.633769][ T964] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 51.642721][ T813] loop3: p224 size 83886080 extends beyond EOD, [ 51.644514][ T964] RBP: 00007fdc99550024 R08: 0000200000000440 R09: 0000000000000000 [ 51.646834][ T813] truncated [ 51.662067][ T964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.679190][ T964] R13: 00007fdc99741038 R14: 00007fdc99740fa0 R15: 00007ffedf5522b8 [ 51.689389][ T964] [ 51.693377][ T964] ---[ end trace bd39ae3f3f60eaf3 ]--- [ 51.700034][ T813] loop3: p225 size 83886080 extends beyond EOD, truncated [ 51.723515][ T813] loop3: p226 size 83886080 extends beyond EOD, truncated [ 51.732441][ T813] loop3: p227 size 83886080 extends beyond EOD, truncated [ 51.741714][ T813] loop3: p228 size 83886080 extends beyond EOD, truncated [ 51.755771][ T813] loop3: p229 size 83886080 extends beyond EOD, truncated [ 51.766966][ T813] loop3: p230 size 83886080 extends beyond EOD, truncated [ 51.775351][ T813] loop3: p231 size 83886080 extends beyond EOD, truncated [ 51.784990][ T813] loop3: p232 size 83886080 extends beyond EOD, truncated [ 51.794231][ T813] loop3: p233 size 83886080 extends beyond EOD, truncated [ 51.803832][ T813] loop3: p234 size 83886080 extends beyond EOD, truncated [ 51.811324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.820017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.829327][ T813] loop3: p235 size 83886080 extends beyond EOD, truncated [ 51.846387][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 51.846403][ T30] audit: type=1400 audit(1788365000.407:279): avc: denied { create } for pid=976 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 51.848089][ T813] loop3: p236 size 83886080 extends beyond EOD, truncated [ 51.887242][ T813] loop3: p236 could not be added: -ENOMEM [ 51.894402][ T813] loop3: p237 size 83886080 extends beyond EOD, truncated [ 51.907611][ T813] loop3: p238 size 83886080 extends beyond EOD, truncated [ 51.920017][ T813] loop3: p239 size 83886080 extends beyond EOD, truncated [ 51.928091][ T813] loop3: p240 size 83886080 extends beyond EOD, truncated [ 51.937819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.938477][ T813] loop3: p241 size 83886080 extends beyond EOD, truncated [ 51.961025][ T813] loop3: p242 size 83886080 extends beyond EOD, truncated [ 51.961832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.974875][ T813] loop3: p243 size 83886080 extends beyond EOD, truncated [ 51.996457][ T813] loop3: p244 size 83886080 extends beyond EOD, truncated [ 52.003545][ T979] fuse: Unknown parameter 'grou00000000000000000000' [ 52.009482][ T813] loop3: p245 size 83886080 extends beyond EOD, truncated [ 52.028763][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.040108][ T813] loop3: p246 size 83886080 extends beyond EOD, truncated [ 52.055872][ T813] loop3: p247 size 83886080 extends beyond EOD, truncated [ 52.062679][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.074767][ T813] loop3: p248 size 83886080 extends beyond EOD, truncated [ 52.085522][ T953] device bridge_slave_0 entered promiscuous mode [ 52.092352][ T30] audit: type=1400 audit(1788365000.637:280): avc: denied { create } for pid=982 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 52.097960][ T813] loop3: p249 size 83886080 extends beyond EOD, [ 52.127620][ T30] audit: type=1400 audit(1788365000.637:281): avc: denied { write } for pid=982 comm="syz.1.272" path="socket:[17668]" dev="sockfs" ino=17668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 52.137986][ T813] truncated [ 52.176838][ T813] loop3: p250 size 83886080 extends beyond EOD, truncated [ 52.185314][ T813] loop3: p251 size 83886080 extends beyond EOD, truncated [ 52.201877][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.208256][ T813] loop3: p252 size 83886080 extends beyond EOD, truncated [ 52.219474][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.223806][ T813] loop3: p253 size 83886080 extends beyond EOD, truncated [ 52.241333][ T813] loop3: p254 size 83886080 extends beyond EOD, truncated [ 52.257801][ T953] device bridge_slave_1 entered promiscuous mode [ 52.270119][ T813] loop3: p255 size 83886080 extends beyond EOD, truncated [ 52.298729][ T30] audit: type=1400 audit(1788365000.857:282): avc: denied { mounton } for pid=919 comm="syz-executor" path="/root/syzkaller.3v8pny/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.396206][ T30] audit: type=1400 audit(1788365000.957:283): avc: denied { bind } for pid=995 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.422176][ T996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 52.448146][ T997] using random self ethernet address [ 52.464464][ T30] audit: type=1400 audit(1788365000.957:284): avc: denied { setopt } for pid=995 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.511791][ T997] using random host ethernet address [ 52.543178][ T1002] Config c/1 of g1 needs at least one function. [ 52.558526][ T30] audit: type=1400 audit(1788365000.987:285): avc: denied { search } for pid=991 comm="syz.3.276" name="/" dev="configfs" ino=14545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.618291][ T1002] udc dummy_udc.0: failed to start g1: -22 [ 52.656772][ T30] audit: type=1400 audit(1788365000.987:286): avc: denied { write } for pid=991 comm="syz.3.276" name="usb_gadget" dev="configfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.675199][ T1009] fuse: Unknown parameter 'grou00000000000000000000' [ 52.726010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.727754][ T30] audit: type=1400 audit(1788365000.987:287): avc: denied { add_name } for pid=991 comm="syz.3.276" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.760735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.778720][ T10] device bridge_slave_1 left promiscuous mode [ 52.786135][ T30] audit: type=1400 audit(1788365000.997:288): avc: denied { create } for pid=991 comm="syz.3.276" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 52.791128][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.832662][ T10] device bridge_slave_0 left promiscuous mode [ 52.849800][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.874554][ T10] device veth1_macvtap left promiscuous mode [ 52.902650][ T10] device veth0_vlan left promiscuous mode [ 52.990002][ T331] udevd[331]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.995583][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.013172][ T332] udevd[332]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 53.031173][ T389] udevd[389]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.100780][ T331] udevd[331]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 53.100784][ T332] udevd[332]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 53.172440][ T1027] udevd[1027]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 53.184426][ T1029] loop4: detected capacity change from 0 to 256 [ 53.195682][ T1021] udevd[1021]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 53.214387][ T1025] udevd[1025]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 53.227898][ T1023] udevd[1023]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 53.340217][ T1035] ------------[ cut here ]------------ [ 53.346122][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/trace.c:2447 trace_find_cmdline+0x2e3/0x350 [ 53.356546][ T1035] Modules linked in: [ 53.360581][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G W syzkaller #0 [ 53.369785][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.380020][ T1035] RIP: 0010:trace_find_cmdline+0x2e3/0x350 [ 53.386488][ T1035] Code: 44 89 7c 24 40 48 c7 c7 80 65 0f 87 44 89 fe e8 a3 fa 00 00 e9 0d fe ff ff e8 69 47 fd ff e8 18 05 94 ff eb a5 e8 5d 47 fd ff <0f> 0b ba 06 00 00 00 48 8b 7c 24 10 48 c7 c6 80 32 46 85 e9 26 ff [ 53.406875][ T1035] RSP: 0018:ffffc90000ca7980 EFLAGS: 00010283 [ 53.413215][ T1035] RAX: ffffffff816c7423 RBX: dffffc0000000000 RCX: 0000000000080000 [ 53.422222][ T1035] RDX: ffffc90002740000 RSI: 00000000000008a1 RDI: 00000000000008a2 [ 53.431402][ T1035] RBP: ffffc90000ca7a30 R08: 0000000000000003 R09: 0000000000000004 [ 53.440548][ T1035] R10: dffffc0000000000 R11: fffff52000194f38 R12: dffffc0000000000 [ 53.449630][ T1035] R13: 1ffff92000194f34 R14: 00000000c0000000 R15: 0000000000000000 [ 53.458402][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.467577][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.475772][ T1035] CR2: 0000001b2ed21ff8 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 53.484860][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.493975][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.502280][ T1035] Call Trace: [ 53.505597][ T1035] [ 53.509109][ T1035] ? memcpy+0x56/0x70 [ 53.515103][ T1035] ? tracing_stop_tr+0x240/0x240 [ 53.523893][ T1035] ? seq_buf_putmem+0x118/0x170 [ 53.531351][ T1035] trace_ctxwake_print+0x192/0x420 [ 53.540153][ T1035] ? trace_ctxwake_bin+0xd0/0xd0 [ 53.546942][ T1035] ? __find_next_entry+0x5ab/0x6b0 [ 53.553107][ T1035] ? rb_advance_reader+0x39c/0x6b0 [ 53.559187][ T1035] trace_ctx_print+0x1c/0x20 [ 53.566899][ T1035] print_trace_fmt+0x4ed/0x710 [ 53.573252][ T1035] print_trace_line+0x385/0x690 [ 53.578743][ T1035] tracing_read_pipe+0x4fd/0xab0 [ 53.584185][ T1035] ? s_show+0x320/0x320 [ 53.588836][ T1035] vfs_read+0x28c/0xc20 [ 53.593452][ T1035] ? kernel_read+0x1f0/0x1f0 [ 53.598278][ T1035] ? __kasan_check_write+0x14/0x20 [ 53.607259][ T1035] ? mutex_lock+0x9b/0x1c0 [ 53.611797][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 53.619628][ T1035] ? __fget_files+0x2e1/0x340 [ 53.624595][ T1035] ? __fdget_pos+0x2d2/0x380 [ 53.629596][ T1035] ? ksys_read+0x70/0x260 [ 53.634195][ T1035] ksys_read+0x14a/0x260 [ 53.639357][ T1035] ? vfs_write+0xfd0/0xfd0 [ 53.645460][ T1035] ? __kasan_check_write+0x14/0x20 [ 53.651703][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 53.657390][ T1035] __x64_sys_read+0x7b/0x90 [ 53.661969][ T1035] x64_sys_call+0x96d/0x9a0 [ 53.667473][ T1035] do_syscall_64+0x4c/0xa0 [ 53.671948][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 53.676794][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 53.681531][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.687479][ T1035] RIP: 0033:0x7f0f683ef159 [ 53.692014][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.712628][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.721237][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 53.729622][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 53.737749][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 53.746262][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.754593][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 53.763555][ T1035] [ 53.767526][ T1035] ---[ end trace bd39ae3f3f60eaf4 ]--- [ 53.787110][ T1035] ------------[ cut here ]------------ [ 53.792962][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 53.803630][ T1035] Modules linked in: [ 53.807685][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G W syzkaller #0 [ 53.816409][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.828089][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 53.834305][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 53.855108][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010002 [ 53.861622][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 53.870344][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 53.879164][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 53.888150][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000061 [ 53.900432][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 53.909256][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.920415][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.927734][ T1035] CR2: 000055cd21d34ca8 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 53.935767][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.943817][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.952559][ T1035] Call Trace: [ 53.955877][ T1035] [ 53.959506][ T1035] ? vsnprintf+0x189d/0x1990 [ 53.964324][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 53.970023][ T1035] ? __kasan_check_write+0x14/0x20 [ 53.975176][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 53.979922][ T1035] rb_buffer_peek+0x60/0x7a0 [ 53.985000][ T1035] ring_buffer_peek+0x184/0x3b0 [ 53.990004][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 53.995773][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.000976][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 54.006103][ T1035] __find_next_entry+0x34d/0x6b0 [ 54.012627][ T1035] ? rb_advance_reader+0x39c/0x6b0 [ 54.017886][ T1035] ? trace_find_next_entry+0x370/0x370 [ 54.023407][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 54.029111][ T1035] ? print_trace_line+0x385/0x690 [ 54.034199][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 54.039871][ T1035] ? s_show+0x320/0x320 [ 54.044441][ T1035] vfs_read+0x28c/0xc20 [ 54.049242][ T1035] ? kernel_read+0x1f0/0x1f0 [ 54.054721][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.061354][ T1035] ? mutex_lock+0x9b/0x1c0 [ 54.065325][ T1045] loop4: detected capacity change from 0 to 512 [ 54.066700][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 54.066732][ T1035] ? __fget_files+0x2e1/0x340 [ 54.066754][ T1035] ? __fdget_pos+0x2d2/0x380 [ 54.093350][ T1035] ? ksys_read+0x70/0x260 [ 54.099348][ T1035] ksys_read+0x14a/0x260 [ 54.103646][ T1035] ? vfs_write+0xfd0/0xfd0 [ 54.108399][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.113639][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 54.118803][ T1035] __x64_sys_read+0x7b/0x90 [ 54.123684][ T1035] x64_sys_call+0x96d/0x9a0 [ 54.128232][ T1035] do_syscall_64+0x4c/0xa0 [ 54.132870][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 54.137570][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 54.142729][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.148640][ T1035] RIP: 0033:0x7f0f683ef159 [ 54.153911][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.180633][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.190543][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 54.199144][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 54.208102][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 54.216924][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.226316][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 54.234858][ T1035] [ 54.238507][ T1035] ---[ end trace bd39ae3f3f60eaf5 ]--- [ 54.244372][ T1035] ================================================================== [ 54.252808][ T1035] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0 [ 54.260058][ T1035] Read of size 4 at addr ffff8881ca06b071 by task syz.3.291/1035 [ 54.268727][ T1035] [ 54.271093][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G W syzkaller #0 [ 54.281621][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.291788][ T1035] Call Trace: [ 54.296188][ T1035] [ 54.299971][ T1035] __dump_stack+0x21/0x30 [ 54.304827][ T1035] dump_stack_lvl+0x110/0x170 [ 54.309717][ T1035] ? show_regs_print_info+0x20/0x20 [ 54.315052][ T1035] ? load_image+0x3f0/0x3f0 [ 54.319606][ T1035] print_address_description+0x7f/0x2c0 [ 54.325190][ T1035] ? rb_buffer_peek+0x71a/0x7a0 [ 54.330337][ T1035] kasan_report+0x10f/0x150 [ 54.335246][ T1035] ? rb_buffer_peek+0x71a/0x7a0 [ 54.340142][ T1035] __asan_report_load4_noabort+0x14/0x20 [ 54.346171][ T1035] rb_buffer_peek+0x71a/0x7a0 [ 54.351026][ T1035] ring_buffer_peek+0x184/0x3b0 [ 54.356192][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 54.363507][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.368747][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 54.373508][ T1035] __find_next_entry+0x34d/0x6b0 [ 54.378967][ T1035] ? rb_advance_reader+0x39c/0x6b0 [ 54.384192][ T1035] ? trace_find_next_entry+0x370/0x370 [ 54.389761][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 54.397519][ T1035] ? print_trace_line+0x385/0x690 [ 54.403584][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 54.409525][ T1035] ? s_show+0x320/0x320 [ 54.414013][ T1035] vfs_read+0x28c/0xc20 [ 54.418301][ T1035] ? kernel_read+0x1f0/0x1f0 [ 54.422935][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.428497][ T1035] ? mutex_lock+0x9b/0x1c0 [ 54.433415][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 54.440227][ T1035] ? __fget_files+0x2e1/0x340 [ 54.445897][ T1035] ? __fdget_pos+0x2d2/0x380 [ 54.450507][ T1035] ? ksys_read+0x70/0x260 [ 54.455408][ T1035] ksys_read+0x14a/0x260 [ 54.459783][ T1035] ? vfs_write+0xfd0/0xfd0 [ 54.464601][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.469760][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 54.474987][ T1035] __x64_sys_read+0x7b/0x90 [ 54.479510][ T1035] x64_sys_call+0x96d/0x9a0 [ 54.484594][ T1035] do_syscall_64+0x4c/0xa0 [ 54.489202][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 54.494096][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 54.498891][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.505098][ T1035] RIP: 0033:0x7f0f683ef159 [ 54.509687][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.531157][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.540327][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 54.551097][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 54.560146][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 54.570007][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.578105][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 54.586817][ T1035] [ 54.590285][ T1035] [ 54.592640][ T1035] The buggy address belongs to the page: [ 54.598470][ T1035] page:ffffea0007281ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ca06b [ 54.609086][ T1035] flags: 0x4000000000000000(zone=1) [ 54.614536][ T1035] raw: 4000000000000000 ffffea0007281ac8 ffffea0007281ac8 0000000000000000 [ 54.623355][ T1035] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 54.631962][ T1035] page dumped because: kasan: bad access detected [ 54.639056][ T1035] page_owner info is not present (never set?) [ 54.645397][ T1035] [ 54.647826][ T1035] Memory state around the buggy address: [ 54.655006][ T1035] ffff8881ca06af00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.664752][ T1035] ffff8881ca06af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.674625][ T1035] >ffff8881ca06b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.685717][ T1035] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 54.695532][ T1035] ffff8881ca06b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.704402][ T1035] ffff8881ca06b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.713481][ T1035] ================================================================== [ 54.723803][ T1035] Disabling lock debugging due to kernel taint [ 54.739316][ T1035] ------------[ cut here ]------------ [ 54.746608][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 54.758598][ T1035] Modules linked in: [ 54.763448][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 54.774497][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.785202][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 54.791099][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 54.812122][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010002 [ 54.818609][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 54.826817][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 54.835111][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 54.843771][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000061 [ 54.852987][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 54.861010][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.870090][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.876718][ T1035] CR2: 00007f284cbfe6c8 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 54.885948][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.894530][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.902983][ T1035] Call Trace: [ 54.906752][ T1035] [ 54.910937][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 54.917053][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.922322][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 54.927952][ T1035] rb_buffer_peek+0x60/0x7a0 [ 54.933180][ T1035] ring_buffer_consume+0x1aa/0x370 [ 54.939764][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 54.946937][ T1035] ? print_trace_line+0x385/0x690 [ 54.952726][ T1035] tracing_read_pipe+0x599/0xab0 [ 54.957835][ T1035] ? s_show+0x320/0x320 [ 54.962304][ T1035] vfs_read+0x28c/0xc20 [ 54.966691][ T1035] ? kernel_read+0x1f0/0x1f0 [ 54.972150][ T1035] ? __kasan_check_write+0x14/0x20 [ 54.977299][ T1035] ? mutex_lock+0x9b/0x1c0 [ 54.981824][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 54.989253][ T1035] ? __fget_files+0x2e1/0x340 [ 54.994153][ T1035] ? __fdget_pos+0x2d2/0x380 [ 54.999070][ T1035] ? ksys_read+0x70/0x260 [ 55.003453][ T1035] ksys_read+0x14a/0x260 [ 55.007736][ T1035] ? vfs_write+0xfd0/0xfd0 [ 55.012181][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.017412][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 55.022757][ T1035] __x64_sys_read+0x7b/0x90 [ 55.027464][ T1035] x64_sys_call+0x96d/0x9a0 [ 55.032187][ T1035] do_syscall_64+0x4c/0xa0 [ 55.036848][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 55.041756][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 55.046475][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.052390][ T1035] RIP: 0033:0x7f0f683ef159 [ 55.057119][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.078086][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.087295][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 55.095415][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 55.103674][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 55.112211][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.120473][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 55.128740][ T1035] [ 55.131788][ T1035] ---[ end trace bd39ae3f3f60eaf6 ]--- [ 55.138017][ T1035] ------------[ cut here ]------------ [ 55.143726][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 55.154676][ T1035] Modules linked in: [ 55.160118][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 55.169202][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.179462][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 55.185348][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 55.205775][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 55.212299][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 55.220899][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.229465][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.238208][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000061 [ 55.246494][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 55.255490][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.265909][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.272968][ T1035] CR2: 00007f284cbfe6c8 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 55.281620][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.289647][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.298081][ T1035] Call Trace: [ 55.301589][ T1035] [ 55.305957][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 55.312287][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.318514][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 55.323325][ T1035] rb_advance_reader+0x2b/0x6b0 [ 55.330156][ T1035] ring_buffer_consume+0x1e7/0x370 [ 55.335817][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 55.342295][ T1035] ? print_trace_line+0x385/0x690 [ 55.347374][ T1035] tracing_read_pipe+0x599/0xab0 [ 55.352777][ T1035] ? s_show+0x320/0x320 [ 55.357129][ T1035] vfs_read+0x28c/0xc20 [ 55.361752][ T1035] ? kernel_read+0x1f0/0x1f0 [ 55.366619][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.372116][ T1035] ? mutex_lock+0x9b/0x1c0 [ 55.377660][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 55.386564][ T1035] ? __fget_files+0x2e1/0x340 [ 55.391480][ T1035] ? __fdget_pos+0x2d2/0x380 [ 55.396959][ T1035] ? ksys_read+0x70/0x260 [ 55.401610][ T1035] ksys_read+0x14a/0x260 [ 55.406065][ T1035] ? vfs_write+0xfd0/0xfd0 [ 55.410506][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.416982][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 55.422204][ T1035] __x64_sys_read+0x7b/0x90 [ 55.427010][ T1035] x64_sys_call+0x96d/0x9a0 [ 55.431818][ T1035] do_syscall_64+0x4c/0xa0 [ 55.436937][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 55.442262][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 55.447159][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.453087][ T1035] RIP: 0033:0x7f0f683ef159 [ 55.457815][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.477764][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.486418][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 55.494595][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 55.502598][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 55.510997][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.519093][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 55.527522][ T1035] [ 55.530556][ T1035] ---[ end trace bd39ae3f3f60eaf7 ]--- [ 55.552260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.602558][ T1035] ------------[ cut here ]------------ [ 55.608330][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 55.618729][ T1035] Modules linked in: [ 55.622836][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 55.631749][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.642367][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 55.648332][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 55.668598][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010002 [ 55.669801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.674883][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 55.674909][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.674921][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.674936][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000065 [ 55.720220][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 55.729432][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.741800][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.749158][ T1035] CR2: 00007f284249f000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 55.760400][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.770057][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.782006][ T1035] Call Trace: [ 55.785581][ T1035] [ 55.789770][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 55.796420][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.799031][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.802932][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 55.810876][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.816841][ T1035] rb_buffer_peek+0x60/0x7a0 [ 55.816877][ T1035] ring_buffer_peek+0x184/0x3b0 [ 55.816898][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 55.849603][ T1035] ? preempt_schedule+0xbc/0xd0 [ 55.856045][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 55.863440][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 55.872352][ T1035] __find_next_entry+0x34d/0x6b0 [ 55.878618][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 55.886534][ T1035] ? trace_find_next_entry+0x370/0x370 [ 55.893607][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 55.899215][ T1035] ? print_trace_line+0x385/0x690 [ 55.904472][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 55.911779][ T1035] ? s_show+0x320/0x320 [ 55.916436][ T1035] vfs_read+0x28c/0xc20 [ 55.921298][ T1035] ? kernel_read+0x1f0/0x1f0 [ 55.926599][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.932365][ T1035] ? mutex_lock+0x9b/0x1c0 [ 55.937512][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 55.945173][ T1035] ? __fget_files+0x2e1/0x340 [ 55.951134][ T1035] ? __fdget_pos+0x2d2/0x380 [ 55.955965][ T1035] ? ksys_read+0x70/0x260 [ 55.961414][ T1035] ksys_read+0x14a/0x260 [ 55.966036][ T1035] ? vfs_write+0xfd0/0xfd0 [ 55.971146][ T1035] ? __kasan_check_write+0x14/0x20 [ 55.977077][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 55.982802][ T1035] __x64_sys_read+0x7b/0x90 [ 55.988211][ T1035] x64_sys_call+0x96d/0x9a0 [ 55.993794][ T1035] do_syscall_64+0x4c/0xa0 [ 55.999273][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.004253][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.009205][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.015796][ T1035] RIP: 0033:0x7f0f683ef159 [ 56.022396][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.044738][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.053195][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 56.061783][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 56.070692][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 56.078702][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.086957][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 56.096201][ T1035] [ 56.099345][ T1035] ---[ end trace bd39ae3f3f60eaf8 ]--- [ 56.142208][ T1045] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 56.174825][ T1054] loop1: detected capacity change from 0 to 256 [ 56.200148][ T1035] ------------[ cut here ]------------ [ 56.205950][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 56.218271][ T1035] Modules linked in: [ 56.222303][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 56.231841][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.242683][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 56.249071][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 56.270792][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010006 [ 56.277436][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 56.287287][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.292493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.295915][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.295939][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000065 [ 56.295953][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 56.295986][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.329554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.329957][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.359673][ T1035] CR2: 000055cd21be2260 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 56.367789][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.376220][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.384233][ T1035] Call Trace: [ 56.388351][ T1035] [ 56.391329][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 56.397607][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.402868][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 56.407790][ T1035] rb_buffer_peek+0x60/0x7a0 [ 56.412916][ T1035] ring_buffer_consume+0x1aa/0x370 [ 56.418287][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 56.424050][ T1035] ? print_trace_line+0x385/0x690 [ 56.429144][ T1035] tracing_read_pipe+0x599/0xab0 [ 56.434134][ T1035] ? s_show+0x320/0x320 [ 56.438526][ T1035] vfs_read+0x28c/0xc20 [ 56.444064][ T1035] ? kernel_read+0x1f0/0x1f0 [ 56.447061][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.449375][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.457423][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.462830][ T1035] ? mutex_lock+0x9b/0x1c0 [ 56.475855][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 56.482716][ T1035] ? __fget_files+0x2e1/0x340 [ 56.488959][ T1035] ? __fdget_pos+0x2d2/0x380 [ 56.494357][ T1035] ? ksys_read+0x70/0x260 [ 56.498943][ T1035] ksys_read+0x14a/0x260 [ 56.504033][ T1035] ? vfs_write+0xfd0/0xfd0 [ 56.508824][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.514650][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 56.520272][ T1035] __x64_sys_read+0x7b/0x90 [ 56.525399][ T1035] x64_sys_call+0x96d/0x9a0 [ 56.530321][ T1035] do_syscall_64+0x4c/0xa0 [ 56.535344][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.540075][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.545535][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.552495][ T1035] RIP: 0033:0x7f0f683ef159 [ 56.558072][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.581105][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.596451][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 56.606928][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 56.619105][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 56.629485][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.642835][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 56.653820][ T1035] [ 56.659092][ T1035] ---[ end trace bd39ae3f3f60eaf9 ]--- [ 56.665467][ T1035] ------------[ cut here ]------------ [ 56.671485][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 56.684187][ T1035] Modules linked in: [ 56.688515][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 56.697459][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.708092][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 56.713947][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 56.721276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.734189][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 56.734214][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 56.734231][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.734243][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.774773][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000065 [ 56.783061][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 56.791703][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.801362][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.808009][ T1035] CR2: 000055cd21be2260 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 56.816133][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.824325][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.832428][ T1035] Call Trace: [ 56.835929][ T1035] [ 56.839019][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 56.845302][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.852303][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 56.857403][ T1035] rb_advance_reader+0x2b/0x6b0 [ 56.862514][ T1035] ring_buffer_consume+0x1e7/0x370 [ 56.867760][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 56.874650][ T1035] ? print_trace_line+0x385/0x690 [ 56.879901][ T1035] tracing_read_pipe+0x599/0xab0 [ 56.885618][ T1035] ? s_show+0x320/0x320 [ 56.891863][ T1035] vfs_read+0x28c/0xc20 [ 56.897502][ T1035] ? kernel_read+0x1f0/0x1f0 [ 56.902570][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.910897][ T1035] ? mutex_lock+0x9b/0x1c0 [ 56.916443][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 56.923867][ T1035] ? __fget_files+0x2e1/0x340 [ 56.929826][ T1035] ? __fdget_pos+0x2d2/0x380 [ 56.936657][ T1035] ? ksys_read+0x70/0x260 [ 56.941416][ T1035] ksys_read+0x14a/0x260 [ 56.946343][ T1035] ? vfs_write+0xfd0/0xfd0 [ 56.950926][ T1035] ? __kasan_check_write+0x14/0x20 [ 56.957745][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 56.962981][ T1035] __x64_sys_read+0x7b/0x90 [ 56.968009][ T1035] x64_sys_call+0x96d/0x9a0 [ 56.972728][ T1035] do_syscall_64+0x4c/0xa0 [ 56.978049][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.984876][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 56.989972][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.996496][ T1035] RIP: 0033:0x7f0f683ef159 [ 57.001473][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.003229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.022447][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.022486][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 57.022501][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 57.022514][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 57.022525][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.022536][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 57.022553][ T1035] [ 57.022559][ T1035] ---[ end trace bd39ae3f3f60eafa ]--- [ 57.144271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.155848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.171531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.182096][ T1035] ------------[ cut here ]------------ [ 57.188566][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 57.200308][ T1035] Modules linked in: [ 57.204248][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 57.213782][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.226078][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 57.232111][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 57.252812][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010002 [ 57.259558][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 57.268187][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.276798][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.285035][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000069 [ 57.293232][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 57.301378][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 57.311158][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.317896][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 57.325907][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.334519][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.342796][ T1035] Call Trace: [ 57.346379][ T1035] [ 57.349458][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 57.355854][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.361596][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 57.366774][ T1035] rb_buffer_peek+0x60/0x7a0 [ 57.372500][ T1035] ring_buffer_peek+0x184/0x3b0 [ 57.378521][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 57.384399][ T1035] ? preempt_schedule+0xbc/0xd0 [ 57.390477][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 57.396234][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 57.402727][ T1035] __find_next_entry+0x34d/0x6b0 [ 57.408972][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 57.414668][ T1035] ? trace_find_next_entry+0x370/0x370 [ 57.420151][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 57.427133][ T1035] ? print_trace_line+0x385/0x690 [ 57.432285][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 57.437508][ T1035] ? s_show+0x320/0x320 [ 57.441683][ T1035] vfs_read+0x28c/0xc20 [ 57.446270][ T1035] ? kernel_read+0x1f0/0x1f0 [ 57.451025][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.456612][ T1035] ? mutex_lock+0x9b/0x1c0 [ 57.461520][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 57.469030][ T1035] ? __fget_files+0x2e1/0x340 [ 57.473754][ T1035] ? __fdget_pos+0x2d2/0x380 [ 57.478408][ T1035] ? ksys_read+0x70/0x260 [ 57.482826][ T1035] ksys_read+0x14a/0x260 [ 57.487808][ T1035] ? vfs_write+0xfd0/0xfd0 [ 57.492451][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.497834][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 57.502979][ T1035] __x64_sys_read+0x7b/0x90 [ 57.507501][ T1035] x64_sys_call+0x96d/0x9a0 [ 57.512961][ T1035] do_syscall_64+0x4c/0xa0 [ 57.517965][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 57.522788][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 57.527591][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.533530][ T1035] RIP: 0033:0x7f0f683ef159 [ 57.538245][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.558650][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.570621][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 57.579181][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 57.588975][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 57.597287][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.606189][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 57.614281][ T1035] [ 57.617317][ T1035] ---[ end trace bd39ae3f3f60eafb ]--- [ 57.633547][ T1035] ------------[ cut here ]------------ [ 57.639592][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 57.650260][ T1035] Modules linked in: [ 57.654284][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 57.663282][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.673671][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 57.679651][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 57.699632][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010002 [ 57.706147][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 57.714479][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.723575][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.732613][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000069 [ 57.742218][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 57.751955][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 57.763075][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.770491][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 57.782749][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.792995][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.803436][ T1035] Call Trace: [ 57.807070][ T1035] [ 57.810492][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 57.816531][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.822150][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 57.827182][ T1035] rb_buffer_peek+0x60/0x7a0 [ 57.832359][ T1035] ring_buffer_consume+0x1aa/0x370 [ 57.839301][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 57.845220][ T1035] ? print_trace_line+0x385/0x690 [ 57.853131][ T1035] tracing_read_pipe+0x599/0xab0 [ 57.858125][ T1035] ? s_show+0x320/0x320 [ 57.862682][ T1035] vfs_read+0x28c/0xc20 [ 57.866899][ T1035] ? kernel_read+0x1f0/0x1f0 [ 57.871770][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.877118][ T1035] ? mutex_lock+0x9b/0x1c0 [ 57.881593][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 57.888816][ T1035] ? __fget_files+0x2e1/0x340 [ 57.893723][ T1035] ? __fdget_pos+0x2d2/0x380 [ 57.899432][ T1035] ? ksys_read+0x70/0x260 [ 57.905805][ T1035] ksys_read+0x14a/0x260 [ 57.910285][ T1035] ? vfs_write+0xfd0/0xfd0 [ 57.914926][ T1035] ? __kasan_check_write+0x14/0x20 [ 57.920321][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 57.926112][ T1035] __x64_sys_read+0x7b/0x90 [ 57.930763][ T1035] x64_sys_call+0x96d/0x9a0 [ 57.935316][ T1035] do_syscall_64+0x4c/0xa0 [ 57.939958][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 57.944902][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 57.950076][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.957802][ T1035] RIP: 0033:0x7f0f683ef159 [ 57.962621][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.992402][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.003050][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 58.011679][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 58.019946][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 58.028128][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.036136][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 58.044134][ T1035] [ 58.047252][ T1035] ---[ end trace bd39ae3f3f60eafc ]--- [ 58.053296][ T1035] ------------[ cut here ]------------ [ 58.059184][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 58.069757][ T1035] Modules linked in: [ 58.074082][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 58.083205][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.093814][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 58.099784][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 58.122561][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 58.128769][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 58.137132][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 58.145358][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 58.153518][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000069 [ 58.161529][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 58.170097][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.180373][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.189413][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 58.198739][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.207908][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.216215][ T1035] Call Trace: [ 58.219539][ T1035] [ 58.222683][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 58.228570][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.233842][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 58.238560][ T1035] rb_advance_reader+0x2b/0x6b0 [ 58.243620][ T1035] ring_buffer_consume+0x1e7/0x370 [ 58.248934][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 58.254777][ T1035] ? print_trace_line+0x385/0x690 [ 58.259987][ T1035] tracing_read_pipe+0x599/0xab0 [ 58.265871][ T1035] ? s_show+0x320/0x320 [ 58.270432][ T1035] vfs_read+0x28c/0xc20 [ 58.276451][ T1035] ? kernel_read+0x1f0/0x1f0 [ 58.281725][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.286947][ T1035] ? mutex_lock+0x9b/0x1c0 [ 58.292463][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 58.300344][ T1035] ? __fget_files+0x2e1/0x340 [ 58.305675][ T1035] ? __fdget_pos+0x2d2/0x380 [ 58.310284][ T1035] ? ksys_read+0x70/0x260 [ 58.314637][ T1035] ksys_read+0x14a/0x260 [ 58.319237][ T1035] ? vfs_write+0xfd0/0xfd0 [ 58.324885][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.330141][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 58.335297][ T1035] __x64_sys_read+0x7b/0x90 [ 58.339906][ T1035] x64_sys_call+0x96d/0x9a0 [ 58.347821][ T1035] do_syscall_64+0x4c/0xa0 [ 58.355424][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 58.361406][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 58.366492][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.373312][ T1035] RIP: 0033:0x7f0f683ef159 [ 58.378644][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.400388][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.409535][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 58.420109][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 58.430178][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 58.438188][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.446187][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 58.454791][ T1035] [ 58.457852][ T1035] ---[ end trace bd39ae3f3f60eafd ]--- [ 58.521429][ T1035] ------------[ cut here ]------------ [ 58.529642][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 58.541040][ T1035] Modules linked in: [ 58.547990][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 58.563670][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.576555][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 58.585500][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 58.613749][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010006 [ 58.620195][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 58.628298][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 58.638634][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 58.648470][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca00006d [ 58.659465][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 58.670292][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.681466][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.689129][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 58.698392][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.707380][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.717888][ T1035] Call Trace: [ 58.721384][ T1035] [ 58.726402][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 58.732772][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.739938][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 58.744863][ T1035] rb_buffer_peek+0x60/0x7a0 [ 58.749957][ T1035] ring_buffer_peek+0x184/0x3b0 [ 58.755311][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 58.761457][ T1035] ? preempt_schedule+0xbc/0xd0 [ 58.768596][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 58.777231][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 58.787602][ T1035] __find_next_entry+0x34d/0x6b0 [ 58.794837][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 58.802144][ T1035] ? trace_find_next_entry+0x370/0x370 [ 58.810704][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 58.820647][ T1035] ? print_trace_line+0x385/0x690 [ 58.828630][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 58.836172][ T1035] ? s_show+0x320/0x320 [ 58.843105][ T1035] vfs_read+0x28c/0xc20 [ 58.848887][ T1035] ? kernel_read+0x1f0/0x1f0 [ 58.853842][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.859517][ T1035] ? mutex_lock+0x9b/0x1c0 [ 58.865041][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 58.873708][ T1035] ? __fget_files+0x2e1/0x340 [ 58.880275][ T1035] ? __fdget_pos+0x2d2/0x380 [ 58.885672][ T1035] ? ksys_read+0x70/0x260 [ 58.891397][ T1035] ksys_read+0x14a/0x260 [ 58.897160][ T1035] ? vfs_write+0xfd0/0xfd0 [ 58.902688][ T1035] ? __kasan_check_write+0x14/0x20 [ 58.910917][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 58.916668][ T1035] __x64_sys_read+0x7b/0x90 [ 58.924948][ T1035] x64_sys_call+0x96d/0x9a0 [ 58.931204][ T1035] do_syscall_64+0x4c/0xa0 [ 58.936021][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 58.941067][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 58.946114][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.953769][ T1035] RIP: 0033:0x7f0f683ef159 [ 58.958726][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.982182][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.993549][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 59.002116][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.011052][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 59.019868][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.029549][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 59.038724][ T1035] [ 59.042785][ T1035] ---[ end trace bd39ae3f3f60eafe ]--- [ 59.058014][ T1035] ------------[ cut here ]------------ [ 59.063812][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 59.075201][ T1035] Modules linked in: [ 59.079199][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 59.088833][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.100659][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 59.107176][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 59.131302][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010002 [ 59.139070][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 59.147455][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.157218][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.166357][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca00006d [ 59.176315][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 59.185289][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 59.197157][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.205369][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 59.215486][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.227122][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.237101][ T1035] Call Trace: [ 59.240850][ T1035] [ 59.243840][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 59.250061][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.256167][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 59.262665][ T1035] rb_buffer_peek+0x60/0x7a0 [ 59.267767][ T1035] ring_buffer_consume+0x1aa/0x370 [ 59.275209][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 59.282483][ T1035] ? print_trace_line+0x385/0x690 [ 59.289024][ T1035] tracing_read_pipe+0x599/0xab0 [ 59.295030][ T1035] ? s_show+0x320/0x320 [ 59.301106][ T1035] vfs_read+0x28c/0xc20 [ 59.307467][ T1035] ? kernel_read+0x1f0/0x1f0 [ 59.313924][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.319151][ T1035] ? mutex_lock+0x9b/0x1c0 [ 59.325111][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 59.335252][ T1035] ? __fget_files+0x2e1/0x340 [ 59.340708][ T1035] ? __fdget_pos+0x2d2/0x380 [ 59.346336][ T1035] ? ksys_read+0x70/0x260 [ 59.351310][ T1035] ksys_read+0x14a/0x260 [ 59.357068][ T1035] ? vfs_write+0xfd0/0xfd0 [ 59.363547][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.370356][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 59.377250][ T1035] __x64_sys_read+0x7b/0x90 [ 59.383136][ T1035] x64_sys_call+0x96d/0x9a0 [ 59.390386][ T1035] do_syscall_64+0x4c/0xa0 [ 59.397509][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 59.404348][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 59.411407][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.420623][ T1035] RIP: 0033:0x7f0f683ef159 [ 59.428173][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.452288][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.469028][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 59.483282][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.495341][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 59.504849][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.514453][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 59.531942][ T1035] [ 59.536482][ T1035] ---[ end trace bd39ae3f3f60eaff ]--- [ 59.548952][ T1035] ------------[ cut here ]------------ [ 59.557663][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 59.573186][ T1035] Modules linked in: [ 59.578189][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 59.589863][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.605123][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 59.612304][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 59.638567][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 59.645552][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 59.655682][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.668718][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.677448][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca00006d [ 59.689898][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 59.702929][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 59.716878][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.724315][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 59.734698][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.743883][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.755001][ T1035] Call Trace: [ 59.759464][ T1035] [ 59.763059][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 59.768881][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.775225][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 59.782072][ T1035] rb_advance_reader+0x2b/0x6b0 [ 59.788448][ T1035] ring_buffer_consume+0x1e7/0x370 [ 59.795689][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 59.803775][ T1035] ? print_trace_line+0x385/0x690 [ 59.809536][ T1035] tracing_read_pipe+0x599/0xab0 [ 59.815002][ T1035] ? s_show+0x320/0x320 [ 59.820446][ T1035] vfs_read+0x28c/0xc20 [ 59.825991][ T1035] ? kernel_read+0x1f0/0x1f0 [ 59.830772][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.836717][ T1035] ? mutex_lock+0x9b/0x1c0 [ 59.841938][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 59.849562][ T1035] ? __fget_files+0x2e1/0x340 [ 59.854745][ T1035] ? __fdget_pos+0x2d2/0x380 [ 59.861048][ T1035] ? ksys_read+0x70/0x260 [ 59.868501][ T1035] ksys_read+0x14a/0x260 [ 59.873131][ T1035] ? vfs_write+0xfd0/0xfd0 [ 59.880724][ T1035] ? __kasan_check_write+0x14/0x20 [ 59.889748][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 59.899434][ T1035] __x64_sys_read+0x7b/0x90 [ 59.907137][ T1035] x64_sys_call+0x96d/0x9a0 [ 59.917280][ T1035] do_syscall_64+0x4c/0xa0 [ 59.924546][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 59.937485][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 59.946603][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.956063][ T1035] RIP: 0033:0x7f0f683ef159 [ 59.964032][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.994153][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.007338][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 60.016977][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 60.027058][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 60.038147][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.046872][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 60.057209][ T1035] [ 60.060958][ T1035] ---[ end trace bd39ae3f3f60eb00 ]--- [ 60.069092][ T1035] ------------[ cut here ]------------ [ 60.074649][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 60.085547][ T1035] Modules linked in: [ 60.091204][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 60.100761][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.112154][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 60.118455][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 60.141836][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010002 [ 60.149332][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 60.158760][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.167538][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.175871][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000071 [ 60.184433][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 60.193686][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 60.203460][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.211546][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 60.219829][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.228836][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.238277][ T1035] Call Trace: [ 60.243237][ T1035] [ 60.246944][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 60.253475][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.259914][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 60.268334][ T1035] rb_buffer_peek+0x60/0x7a0 [ 60.273184][ T1035] ring_buffer_peek+0x184/0x3b0 [ 60.278178][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 60.284369][ T1035] ? preempt_schedule+0xbc/0xd0 [ 60.289341][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 60.295917][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 60.302237][ T1035] __find_next_entry+0x34d/0x6b0 [ 60.308071][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 60.315242][ T1035] ? trace_find_next_entry+0x370/0x370 [ 60.321007][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 60.327146][ T1035] ? print_trace_line+0x385/0x690 [ 60.332649][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 60.339528][ T1035] ? s_show+0x320/0x320 [ 60.343797][ T1035] vfs_read+0x28c/0xc20 [ 60.349136][ T1035] ? kernel_read+0x1f0/0x1f0 [ 60.353860][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.358991][ T1035] ? mutex_lock+0x9b/0x1c0 [ 60.363551][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 60.370181][ T1035] ? __fget_files+0x2e1/0x340 [ 60.375138][ T1035] ? __fdget_pos+0x2d2/0x380 [ 60.379734][ T1035] ? ksys_read+0x70/0x260 [ 60.384217][ T1035] ksys_read+0x14a/0x260 [ 60.390930][ T1035] ? vfs_write+0xfd0/0xfd0 [ 60.395949][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.401507][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 60.407351][ T1035] __x64_sys_read+0x7b/0x90 [ 60.412850][ T1035] x64_sys_call+0x96d/0x9a0 [ 60.417567][ T1035] do_syscall_64+0x4c/0xa0 [ 60.423099][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 60.428056][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 60.433184][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.440237][ T1035] RIP: 0033:0x7f0f683ef159 [ 60.446430][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.469051][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.479102][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 60.490485][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 60.499715][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 60.509065][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.525357][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 60.545324][ T1035] [ 60.550030][ T1035] ---[ end trace bd39ae3f3f60eb01 ]--- [ 60.563216][ T1035] ------------[ cut here ]------------ [ 60.570794][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 60.583019][ T1035] Modules linked in: [ 60.588708][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 60.599378][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.610614][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 60.616687][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 60.638294][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010002 [ 60.644846][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 60.654726][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.663900][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.675161][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000071 [ 60.683925][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 60.693194][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 60.702437][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.709428][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 60.718158][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.726166][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.734158][ T1035] Call Trace: [ 60.738026][ T1035] [ 60.741168][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 60.746961][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.752486][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 60.757779][ T1035] rb_buffer_peek+0x60/0x7a0 [ 60.762753][ T1035] ring_buffer_consume+0x1aa/0x370 [ 60.767984][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 60.773551][ T1035] ? print_trace_line+0x385/0x690 [ 60.778621][ T1035] tracing_read_pipe+0x599/0xab0 [ 60.784380][ T1035] ? s_show+0x320/0x320 [ 60.788776][ T1035] vfs_read+0x28c/0xc20 [ 60.795294][ T1035] ? kernel_read+0x1f0/0x1f0 [ 60.803580][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.809051][ T1035] ? mutex_lock+0x9b/0x1c0 [ 60.814116][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 60.820818][ T1035] ? __fget_files+0x2e1/0x340 [ 60.826157][ T1035] ? __fdget_pos+0x2d2/0x380 [ 60.830877][ T1035] ? ksys_read+0x70/0x260 [ 60.835734][ T1035] ksys_read+0x14a/0x260 [ 60.840072][ T1035] ? vfs_write+0xfd0/0xfd0 [ 60.844555][ T1035] ? __kasan_check_write+0x14/0x20 [ 60.850075][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 60.855988][ T1035] __x64_sys_read+0x7b/0x90 [ 60.860585][ T1035] x64_sys_call+0x96d/0x9a0 [ 60.865378][ T1035] do_syscall_64+0x4c/0xa0 [ 60.870204][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 60.875311][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 60.880020][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.886037][ T1035] RIP: 0033:0x7f0f683ef159 [ 60.891075][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.912772][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.922711][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 60.930809][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 60.939157][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 60.947370][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.957016][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 60.967762][ T1035] [ 60.973627][ T1035] ---[ end trace bd39ae3f3f60eb02 ]--- [ 60.981685][ T1035] ------------[ cut here ]------------ [ 60.994661][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 61.013290][ T1035] Modules linked in: [ 61.019835][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 61.033717][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.047789][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 61.054331][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 61.075372][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 61.082356][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 61.092126][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.100732][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.111072][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000071 [ 61.121953][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 61.131262][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 61.141210][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.148838][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 61.158517][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.167490][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.179674][ T1035] Call Trace: [ 61.183103][ T1035] [ 61.186252][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 61.197434][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.206322][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 61.211957][ T1035] rb_advance_reader+0x2b/0x6b0 [ 61.217508][ T1035] ring_buffer_consume+0x1e7/0x370 [ 61.224062][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 61.230336][ T1035] ? print_trace_line+0x385/0x690 [ 61.235758][ T1035] tracing_read_pipe+0x599/0xab0 [ 61.241603][ T1035] ? s_show+0x320/0x320 [ 61.246233][ T1035] vfs_read+0x28c/0xc20 [ 61.250782][ T1035] ? kernel_read+0x1f0/0x1f0 [ 61.256805][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.264389][ T1035] ? mutex_lock+0x9b/0x1c0 [ 61.269148][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 61.278470][ T1035] ? __fget_files+0x2e1/0x340 [ 61.283633][ T1035] ? __fdget_pos+0x2d2/0x380 [ 61.288621][ T1035] ? ksys_read+0x70/0x260 [ 61.294391][ T1035] ksys_read+0x14a/0x260 [ 61.298674][ T1035] ? vfs_write+0xfd0/0xfd0 [ 61.303290][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.308636][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 61.314479][ T1035] __x64_sys_read+0x7b/0x90 [ 61.322499][ T1035] x64_sys_call+0x96d/0x9a0 [ 61.328215][ T1035] do_syscall_64+0x4c/0xa0 [ 61.334186][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 61.340921][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 61.348322][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.356205][ T1035] RIP: 0033:0x7f0f683ef159 [ 61.360907][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.383486][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.392495][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 61.400757][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 61.409476][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 61.417920][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.427772][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 61.437463][ T1035] [ 61.440593][ T1035] ---[ end trace bd39ae3f3f60eb03 ]--- [ 61.448388][ T1035] ------------[ cut here ]------------ [ 61.454038][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 61.467550][ T1035] Modules linked in: [ 61.474785][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 61.487726][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.502126][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 61.509888][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 61.535313][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010012 [ 61.541947][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 61.555237][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.566645][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.576503][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000075 [ 61.588373][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 61.605133][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 61.623535][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.633426][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 61.644790][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.654671][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.665070][ T1035] Call Trace: [ 61.668802][ T1035] [ 61.672119][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 61.679570][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.685205][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 61.690356][ T1035] rb_buffer_peek+0x60/0x7a0 [ 61.696277][ T1035] ring_buffer_peek+0x184/0x3b0 [ 61.704454][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 61.711739][ T1035] ? preempt_schedule+0xbc/0xd0 [ 61.717540][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 61.725394][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 61.732887][ T1035] __find_next_entry+0x34d/0x6b0 [ 61.739071][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 61.745986][ T1035] ? trace_find_next_entry+0x370/0x370 [ 61.752019][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 61.758855][ T1035] ? print_trace_line+0x385/0x690 [ 61.766390][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 61.772958][ T1035] ? s_show+0x320/0x320 [ 61.779094][ T1035] vfs_read+0x28c/0xc20 [ 61.783740][ T1035] ? kernel_read+0x1f0/0x1f0 [ 61.788468][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.794233][ T1035] ? mutex_lock+0x9b/0x1c0 [ 61.800228][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 61.807809][ T1035] ? __fget_files+0x2e1/0x340 [ 61.813060][ T1035] ? __fdget_pos+0x2d2/0x380 [ 61.818269][ T1035] ? ksys_read+0x70/0x260 [ 61.822623][ T1035] ksys_read+0x14a/0x260 [ 61.827080][ T1035] ? vfs_write+0xfd0/0xfd0 [ 61.832172][ T1035] ? __kasan_check_write+0x14/0x20 [ 61.837608][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 61.842844][ T1035] __x64_sys_read+0x7b/0x90 [ 61.847390][ T1035] x64_sys_call+0x96d/0x9a0 [ 61.851908][ T1035] do_syscall_64+0x4c/0xa0 [ 61.857350][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 61.863247][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 61.870324][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.879175][ T1035] RIP: 0033:0x7f0f683ef159 [ 61.883743][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.912692][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.926235][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 61.940908][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 61.953899][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 61.965580][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.979873][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 61.991198][ T1035] [ 61.995864][ T1035] ---[ end trace bd39ae3f3f60eb04 ]--- [ 62.002835][ T1035] ------------[ cut here ]------------ [ 62.008510][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 62.022501][ T1035] Modules linked in: [ 62.026688][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 62.035753][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.046978][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 62.054049][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 62.074770][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010006 [ 62.080965][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 62.089320][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.097610][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.105935][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000075 [ 62.115016][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 62.124978][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 62.134292][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.142596][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 62.153012][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.164071][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.173371][ T1035] Call Trace: [ 62.177432][ T1035] [ 62.181583][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 62.188098][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.197688][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 62.204228][ T1035] rb_buffer_peek+0x60/0x7a0 [ 62.210046][ T1035] ring_buffer_consume+0x1aa/0x370 [ 62.215711][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 62.228523][ T1035] ? print_trace_line+0x385/0x690 [ 62.237046][ T1035] tracing_read_pipe+0x599/0xab0 [ 62.244830][ T1035] ? s_show+0x320/0x320 [ 62.252907][ T1035] vfs_read+0x28c/0xc20 [ 62.261752][ T1035] ? kernel_read+0x1f0/0x1f0 [ 62.268075][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.274226][ T1035] ? mutex_lock+0x9b/0x1c0 [ 62.280820][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 62.290232][ T1035] ? __fget_files+0x2e1/0x340 [ 62.299755][ T1035] ? __fdget_pos+0x2d2/0x380 [ 62.306531][ T1035] ? ksys_read+0x70/0x260 [ 62.312661][ T1035] ksys_read+0x14a/0x260 [ 62.318940][ T1035] ? vfs_write+0xfd0/0xfd0 [ 62.326209][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.333677][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 62.341082][ T1035] __x64_sys_read+0x7b/0x90 [ 62.349997][ T1035] x64_sys_call+0x96d/0x9a0 [ 62.355872][ T1035] do_syscall_64+0x4c/0xa0 [ 62.361657][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 62.367718][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 62.373404][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.379681][ T1035] RIP: 0033:0x7f0f683ef159 [ 62.384305][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.408449][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.422889][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 62.434201][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 62.443603][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 62.454106][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.470271][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 62.481234][ T1035] [ 62.489165][ T1035] ---[ end trace bd39ae3f3f60eb05 ]--- [ 62.496830][ T1035] ------------[ cut here ]------------ [ 62.504600][ T1035] WARNING: CPU: 1 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 62.527744][ T1035] Modules linked in: [ 62.536015][ T1035] CPU: 1 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 62.549427][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.567357][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 62.577570][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 62.601128][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010006 [ 62.609090][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 62.626158][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.638898][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.648748][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000075 [ 62.659962][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 62.669188][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 62.679614][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.687414][ T1035] CR2: 00007febcb82b000 CR3: 0000000124df7000 CR4: 00000000003506a0 [ 62.701621][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.714809][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.724723][ T1035] Call Trace: [ 62.730065][ T1035] [ 62.736975][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 62.743916][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.753455][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 62.760669][ T1035] rb_advance_reader+0x2b/0x6b0 [ 62.767368][ T1035] ring_buffer_consume+0x1e7/0x370 [ 62.777982][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 62.797694][ T1035] ? print_trace_line+0x385/0x690 [ 62.835216][ T1035] tracing_read_pipe+0x599/0xab0 [ 62.858569][ T1035] ? s_show+0x320/0x320 [ 62.863216][ T1035] vfs_read+0x28c/0xc20 [ 62.874846][ T1035] ? kernel_read+0x1f0/0x1f0 [ 62.894541][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.904149][ T1035] ? mutex_lock+0x9b/0x1c0 [ 62.910429][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 62.921232][ T1035] ? __fget_files+0x2e1/0x340 [ 62.929325][ T1035] ? __fdget_pos+0x2d2/0x380 [ 62.936450][ T1035] ? ksys_read+0x70/0x260 [ 62.944659][ T1035] ksys_read+0x14a/0x260 [ 62.950947][ T1035] ? vfs_write+0xfd0/0xfd0 [ 62.958721][ T1035] ? __kasan_check_write+0x14/0x20 [ 62.965784][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 62.972827][ T1035] __x64_sys_read+0x7b/0x90 [ 62.978880][ T1035] x64_sys_call+0x96d/0x9a0 [ 62.985104][ T1035] do_syscall_64+0x4c/0xa0 [ 62.990285][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 62.998776][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 63.003746][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.011461][ T1035] RIP: 0033:0x7f0f683ef159 [ 63.017494][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.042207][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.052948][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 63.062597][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 63.071702][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 63.081122][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.092279][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 63.101822][ T1035] [ 63.104879][ T1035] ---[ end trace bd39ae3f3f60eb06 ]--- [ 63.113305][ T1035] ------------[ cut here ]------------ [ 63.118992][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 63.129955][ T1035] Modules linked in: [ 63.133878][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 63.145102][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.156009][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 63.162536][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 63.184169][ T1035] RSP: 0018:ffffc90000ca77e0 EFLAGS: 00010002 [ 63.190777][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 63.200249][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.210390][ T1035] RBP: ffffc90000ca7958 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.220969][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000079 [ 63.234228][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 63.243197][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.254938][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.263673][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 63.272673][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.283331][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.294437][ T1035] Call Trace: [ 63.298058][ T1035] [ 63.304168][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 63.310568][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.315955][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 63.321227][ T1035] rb_buffer_peek+0x60/0x7a0 [ 63.327694][ T1035] ring_buffer_peek+0x184/0x3b0 [ 63.333052][ T1035] ? ring_buffer_iter_empty+0x370/0x370 [ 63.340052][ T1035] ? preempt_schedule+0xbc/0xd0 [ 63.346000][ T1035] ? schedule_preempt_disabled+0x20/0x20 [ 63.351958][ T1035] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 63.358615][ T1035] __find_next_entry+0x34d/0x6b0 [ 63.364906][ T1035] ? preempt_schedule_thunk+0x16/0x18 [ 63.370519][ T1035] ? trace_find_next_entry+0x370/0x370 [ 63.376319][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 63.383312][ T1035] ? print_trace_line+0x385/0x690 [ 63.389240][ T1035] tracing_read_pipe+0x3b8/0xab0 [ 63.394406][ T1035] ? s_show+0x320/0x320 [ 63.398806][ T1035] vfs_read+0x28c/0xc20 [ 63.403538][ T1035] ? kernel_read+0x1f0/0x1f0 [ 63.408268][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.413890][ T1035] ? mutex_lock+0x9b/0x1c0 [ 63.418440][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 63.427648][ T1035] ? __fget_files+0x2e1/0x340 [ 63.432478][ T1035] ? __fdget_pos+0x2d2/0x380 [ 63.437697][ T1035] ? ksys_read+0x70/0x260 [ 63.442714][ T1035] ksys_read+0x14a/0x260 [ 63.448229][ T1035] ? vfs_write+0xfd0/0xfd0 [ 63.453157][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.458941][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 63.464318][ T1035] __x64_sys_read+0x7b/0x90 [ 63.469077][ T1035] x64_sys_call+0x96d/0x9a0 [ 63.474781][ T1035] do_syscall_64+0x4c/0xa0 [ 63.479819][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 63.488067][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 63.493093][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.500176][ T1035] RIP: 0033:0x7f0f683ef159 [ 63.504979][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.527889][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.540219][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 63.552156][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 63.568353][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 63.581706][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.591207][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 63.601336][ T1035] [ 63.606488][ T1035] ---[ end trace bd39ae3f3f60eb07 ]--- [ 63.617605][ T1035] ------------[ cut here ]------------ [ 63.626507][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 63.642634][ T1035] Modules linked in: [ 63.648036][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 63.659762][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.676942][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 63.683774][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 63.709511][ T1035] RSP: 0018:ffffc90000ca7920 EFLAGS: 00010006 [ 63.718666][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 63.730014][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.739008][ T1035] RBP: ffffc90000ca7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.748979][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000079 [ 63.757565][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 63.768613][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 63.778246][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.786113][ T1035] CR2: 00007febcb824000 CR3: 0000000124df7000 CR4: 00000000003506b0 [ 63.795191][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.805421][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.815218][ T1035] Call Trace: [ 63.819076][ T1035] [ 63.822168][ T1035] ? ring_buffer_read_page+0x1210/0x1210 [ 63.828868][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.834522][ T1035] ? _raw_spin_lock+0x94/0xf0 [ 63.842448][ T1035] rb_buffer_peek+0x60/0x7a0 [ 63.850584][ T1035] ring_buffer_consume+0x1aa/0x370 [ 63.857936][ T1035] ? ring_buffer_iter_dropped+0x60/0x60 [ 63.864247][ T1035] ? print_trace_line+0x385/0x690 [ 63.870532][ T1035] tracing_read_pipe+0x599/0xab0 [ 63.876193][ T1035] ? s_show+0x320/0x320 [ 63.881263][ T1035] vfs_read+0x28c/0xc20 [ 63.886161][ T1035] ? kernel_read+0x1f0/0x1f0 [ 63.891245][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.896641][ T1035] ? mutex_lock+0x9b/0x1c0 [ 63.901702][ T1035] ? wait_for_completion_killable_timeout+0x10/0x10 [ 63.909147][ T1035] ? __fget_files+0x2e1/0x340 [ 63.914215][ T1035] ? __fdget_pos+0x2d2/0x380 [ 63.919712][ T1035] ? ksys_read+0x70/0x260 [ 63.925312][ T1035] ksys_read+0x14a/0x260 [ 63.930274][ T1035] ? vfs_write+0xfd0/0xfd0 [ 63.934735][ T1035] ? __kasan_check_write+0x14/0x20 [ 63.940974][ T1035] ? switch_fpu_return+0x15d/0x2c0 [ 63.947324][ T1035] __x64_sys_read+0x7b/0x90 [ 63.953012][ T1035] x64_sys_call+0x96d/0x9a0 [ 63.960166][ T1035] do_syscall_64+0x4c/0xa0 [ 63.967981][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 63.974112][ T1035] ? clear_bhb_loop+0x50/0xa0 [ 63.980626][ T1035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.986828][ T1035] RIP: 0033:0x7f0f683ef159 [ 63.992197][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.014111][ T1035] RSP: 002b:00007f0f66e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.025924][ T1035] RAX: ffffffffffffffda RBX: 00007f0f68676fa0 RCX: 00007f0f683ef159 [ 64.039460][ T1035] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 64.048574][ T1035] RBP: 00007f0f68486024 R08: 0000000000000000 R09: 0000000000000000 [ 64.060676][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.071594][ T1035] R13: 00007f0f68677038 R14: 00007f0f68676fa0 R15: 00007ffd28a7d728 [ 64.081431][ T1035] [ 64.086417][ T1035] ---[ end trace bd39ae3f3f60eb08 ]--- [ 64.092246][ T1035] ------------[ cut here ]------------ [ 64.100539][ T1035] WARNING: CPU: 0 PID: 1035 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00 [ 64.112969][ T1035] Modules linked in: [ 64.118125][ T1035] CPU: 0 PID: 1035 Comm: syz.3.291 Tainted: G B W syzkaller #0 [ 64.128051][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.140855][ T1035] RIP: 0010:rb_get_reader_page+0xa68/0xc00 [ 64.148570][ T1035] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 3d 32 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 2c 34 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85 [ 64.172976][ T1035] RSP: 0018:ffffc90000ca7940 EFLAGS: 00010002 [ 64.181324][ T1035] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bfc24 [ 64.192806][ T1035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 64.202542][ T1035] RBP: ffffc90000ca7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 64.214870][ T1035] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000ca000079 [ 64.227953][ T1035] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000 [ 64.239482][ T1035] FS: 00007f0f66e486c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 64.252748][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033