last executing test programs: 3.000248512s ago: executing program 3 (id=1518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.328444597s ago: executing program 4 (id=1573): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.164003941s ago: executing program 3 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='((ev))', 0x6) 2.086602232s ago: executing program 3 (id=1586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404f045ab6000000000001090224000100000010090400080203000000092100000001221800090581030004000000b2867b981720d8bdbe5f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x3, "92dd0439"}, @global=@item_012={0x1, 0x1, 0x9, '2'}, @main=@item_4={0x3, 0x0, 0x8, "d1f78a2c"}, @main=@item_4={0x3, 0x0, 0xb, "9c5e69ed"}, @local=@item_012={0x1, 0x2, 0x8, "11"}, @global=@item_4={0x3, 0x1, 0x4, "141c5aaa"}]}}, 0x0}, 0x0) 679.235024ms ago: executing program 4 (id=1607): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 672.449604ms ago: executing program 2 (id=1608): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={&(0x7f0000000040)=""/32, 0x20}) 627.805416ms ago: executing program 2 (id=1609): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 621.028056ms ago: executing program 4 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 599.140996ms ago: executing program 2 (id=1611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)="25ae84d5f4b8b24f39e3752aa3da23391c5db94676b616ac917535d26895bbc335d98fe2a8ab7403901607cbb1442e3bb54bf9e81ce3b18df758c807a94f60aa40b7a34929addf14bacac45621fa2f58f477dac518c67731f677b3bef4fd2c8f779ac6c5a5dafb1487bedb12779a27732bb93d04ae84d3f6f9923f514a7ee7be", 0x80) 582.738787ms ago: executing program 4 (id=1613): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x1, 0x4) 558.154197ms ago: executing program 4 (id=1615): r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 532.720178ms ago: executing program 2 (id=1616): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 519.244448ms ago: executing program 2 (id=1618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, &(0x7f0000000680), 0x0}, 0x20) 488.958679ms ago: executing program 4 (id=1620): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f00000000c0), 0xdd) 473.778209ms ago: executing program 0 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000a40)='0fc5:1227:qd', 0xc) 455.482189ms ago: executing program 0 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) 406.411511ms ago: executing program 3 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001000000050019"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) 406.336081ms ago: executing program 1 (id=1625): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 406.085381ms ago: executing program 2 (id=1626): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x8, 0x105dc, &(0x7f00000105c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145042, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) 340.955782ms ago: executing program 32 (id=1626): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x8, 0x105dc, &(0x7f00000105c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145042, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) 339.035792ms ago: executing program 3 (id=1628): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ftruncate(r0, 0x3) 309.930373ms ago: executing program 0 (id=1629): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c, 0x0}}], 0x80000da, 0xc040) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 217.872815ms ago: executing program 0 (id=1630): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 163.003096ms ago: executing program 0 (id=1631): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r2}, 0xa0) 146.292927ms ago: executing program 1 (id=1632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000d1000000b7000000000000009500000000000000b7000000100000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 120.686137ms ago: executing program 0 (id=1633): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f00000001c0)={[{@shortname_win95}, {@shortname_winnt}, {@numtail}, {@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@gid}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8no}, {@numtail}]}, 0x1, 0x371, &(0x7f0000002980)="$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") 96.806468ms ago: executing program 1 (id=1634): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') lseek(r0, 0x4, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) 42.654189ms ago: executing program 1 (id=1635): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 42.488809ms ago: executing program 1 (id=1636): r0 = inotify_init() r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x924) close_range(r0, 0xffffffffffffffff, 0x0) 31.862739ms ago: executing program 1 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 3 (id=1638): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYBLOB="f5c33a229f58e3c883815dd2ef8c44420e679cbdfd8f114bae9005bc2e65a3ed4cc21ca65c77a0fe84195446c44b5962be4aebe099d3f25731c857fe6311b2d0e7354e46bfce688beb7759d9a15f1063e6c38e92e492669c583b54c2ab191ba4b5c645bce614e5", @ANYRESDEC], 0x1, 0x153e, &(0x7f0000000240)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): : veth0_to_hsr: link becomes ready [ 23.876724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.884710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.892755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.900579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.908857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.917119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.925318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.944746][ T289] device veth0_vlan entered promiscuous mode [ 23.955481][ T286] device veth0_vlan entered promiscuous mode [ 23.962846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.970917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.978866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.987001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.994971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.003396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.011627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.019484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.027402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.035294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.043231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.050626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.058077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.065554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.081049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.088402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.095849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.104238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.112424][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.119431][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.133982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.142226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.150560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.159003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.167242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.177693][ T289] device veth1_macvtap entered promiscuous mode [ 24.187881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.196206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.204581][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.211601][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.219075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.227423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.240871][ T288] device veth0_vlan entered promiscuous mode [ 24.248763][ T287] device veth0_vlan entered promiscuous mode [ 24.255192][ T286] device veth1_macvtap entered promiscuous mode [ 24.262902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.270765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.278929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.287034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.295034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.302884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.310730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.318211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.325612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.333078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.354564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.354568][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 24.369912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.379353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.387651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.396045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.404118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.411924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.420046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.428552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.436868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.449811][ T288] device veth1_macvtap entered promiscuous mode [ 24.457997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.466333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.489891][ T287] device veth1_macvtap entered promiscuous mode [ 24.498020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.506794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.511681][ T311] input: syz1 as /devices/virtual/input/input4 [ 24.520111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.529999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.538925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.547291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.574845][ T290] device veth0_vlan entered promiscuous mode [ 24.585805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.593957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.601412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.616994][ T290] device veth1_macvtap entered promiscuous mode [ 24.637476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.646526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.656067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.673444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.682694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.703850][ T322] netem: change failed [ 24.723879][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.742481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.773227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.792430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.851873][ T346] loop3: detected capacity change from 0 to 256 [ 24.859982][ T348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.871332][ T346] ======================================================= [ 24.871332][ T346] WARNING: The mand mount option has been deprecated and [ 24.871332][ T346] and is ignored by this kernel. Remove the mand [ 24.871332][ T346] option from the mount to silence this warning. [ 24.871332][ T346] ======================================================= [ 24.973570][ T358] loop2: detected capacity change from 0 to 512 [ 25.007533][ T346] FAT-fs (loop3): Directory bread(block 64) failed [ 25.029796][ T346] FAT-fs (loop3): Directory bread(block 65) failed [ 25.039851][ T346] FAT-fs (loop3): Directory bread(block 66) failed [ 25.047317][ T358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.056364][ T346] FAT-fs (loop3): Directory bread(block 67) failed [ 25.063210][ T346] FAT-fs (loop3): Directory bread(block 68) failed [ 25.084683][ T358] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.096488][ T346] FAT-fs (loop3): Directory bread(block 69) failed [ 25.115282][ T346] FAT-fs (loop3): Directory bread(block 70) failed [ 25.121802][ T346] FAT-fs (loop3): Directory bread(block 71) failed [ 25.142259][ T346] FAT-fs (loop3): Directory bread(block 72) failed [ 25.152157][ T346] FAT-fs (loop3): Directory bread(block 73) failed [ 25.172556][ T290] EXT4-fs (loop2): unmounting filesystem. [ 25.204643][ T374] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use) [ 25.282184][ T378] syz.1.30 (378) used greatest stack depth: 20984 bytes left [ 25.283790][ T317] loop0: detected capacity change from 0 to 131072 [ 25.316368][ T317] F2FS-fs (loop0): invalid crc value [ 25.364195][ T317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.401052][ T391] loop1: detected capacity change from 0 to 16 [ 25.433332][ T391] erofs: (device loop1): mounted with root inode @ nid 36. [ 25.453315][ T391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 25.482184][ T317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 25.502140][ T391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 25.521716][ T391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 25.714758][ T398] mmap: syz.4.37 (398) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.809035][ T423] tmpfs: Too small a size for current use [ 25.844575][ T431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.50'. [ 25.921445][ T442] loop2: detected capacity change from 0 to 4096 [ 25.937623][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 25.952323][ T442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 25.959316][ T449] loop3: detected capacity change from 0 to 4096 [ 25.966017][ T442] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.984401][ T442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.004842][ T449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.023387][ T449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.047506][ T442] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 26.058302][ T289] EXT4-fs (loop3): unmounting filesystem. [ 26.104056][ T462] loop3: detected capacity change from 0 to 256 [ 26.144106][ T462] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 26.169355][ T463] SELinux: failed to load policy [ 26.227881][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.235786][ T467] capability: warning: `syz.3.66' uses deprecated v2 capabilities in a way that may be insecure [ 26.248712][ T465] ip_tables: iptables: counters copy to user failed while replacing table [ 26.410503][ T483] loop2: detected capacity change from 0 to 8192 [ 26.476808][ T486] loop1: detected capacity change from 0 to 512 [ 26.504451][ T486] FAT-fs (loop1): Unrecognized mount option "erzors=continue" or missing value [ 26.603970][ T495] kvm [494]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 26.644149][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 26.644160][ T28] audit: type=1400 audit(1791479556.329:176): avc: denied { watch } for pid=503 comm="syz.1.81" path="/18" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.673481][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.701052][ T512] loop3: detected capacity change from 0 to 256 [ 26.844427][ T28] audit: type=1400 audit(1791479556.529:177): avc: denied { create } for pid=525 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.874932][ T28] audit: type=1400 audit(1791479556.549:178): avc: denied { setopt } for pid=525 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.894154][ T28] audit: type=1400 audit(1791479556.549:179): avc: denied { write } for pid=525 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.162528][ T28] audit: type=1400 audit(1791479556.849:180): avc: denied { read write } for pid=560 comm="syz.4.107" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.188850][ T6] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0001/input/input5 [ 27.193928][ T28] audit: type=1400 audit(1791479556.849:181): avc: denied { open } for pid=560 comm="syz.4.107" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.209254][ T6] hid-generic 0005:0009:0040.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 27.221183][ T28] audit: type=1400 audit(1791479556.879:182): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.312099][ T28] audit: type=1400 audit(1791479556.879:183): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.340362][ T567] serio: Serial port ttyS3 [ 27.360386][ T28] audit: type=1400 audit(1791479556.879:184): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.387045][ T28] audit: type=1400 audit(1791479556.969:185): avc: denied { create } for pid=564 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.482901][ T588] netlink: 204 bytes leftover after parsing attributes in process `syz.3.118'. [ 27.483885][ T585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.511462][ T585] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.547024][ T599] input: syz0 as /devices/virtual/input/input6 [ 27.576106][ T585] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 27.586007][ T585] EXT4-fs: Cannot change journaled quota options when quota turned on [ 27.602948][ T287] EXT4-fs (loop4): unmounting filesystem. [ 27.702245][ T613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.710911][ T613] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.722362][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.732648][ T289] EXT4-fs (loop3): unmounting filesystem. [ 27.912097][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 27.919877][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.939425][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.965218][ T24] usb 1-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 27.974405][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.985199][ T24] usb 1-1: config 0 descriptor?? [ 28.394297][ T24] input: HID 047d:2041 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:047D:2041.0002/input/input7 [ 28.409398][ T24] kensington 0003:047D:2041.0002: input,hidraw0: USB HID v0.00 Joystick [HID 047d:2041] on usb-dummy_hcd.0-1/input0 [ 28.504086][ T665] usbcore.quirks: string doesn't fit in 127 chars. [ 28.549054][ T667] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.558206][ T667] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 28.567748][ T667] EXT4-fs (loop2): orphan cleanup on readonly fs [ 28.574395][ T667] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.151: bad orphan inode 15 [ 28.591869][ T667] EXT4-fs (loop2): Remounting filesystem read-only [ 28.609251][ T606] usb 1-1: USB disconnect, device number 2 [ 28.615859][ T667] ext4_test_bit(bit=14, block=18) = 1 [ 28.622193][ T667] is_bad_inode(inode)=0 [ 28.626360][ T667] NEXT_ORPHAN(inode)=1023 [ 28.630710][ T667] max_ino=32 [ 28.645571][ T667] i_nlink=0 [ 28.650704][ T667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.151: bg 0: block 440: padding at end of block bitmap is not set [ 28.686119][ T667] EXT4-fs (loop2): Remounting filesystem read-only [ 28.693091][ T667] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 28.701892][ T667] EXT4-fs (loop2): Remounting filesystem read-only [ 28.715999][ T667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.770882][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.752050][ C1] sched: RT throttling activated [ 30.795633][ T721] set_capacity_and_notify: 5 callbacks suppressed [ 30.795649][ T721] loop0: detected capacity change from 0 to 512 [ 30.827465][ T721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.855788][ T721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.878569][ T721] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.173: invalid indirect mapped block 32768 (level 2) [ 30.901592][ T721] EXT4-fs (loop0): 1 orphan inode deleted [ 30.907388][ T721] EXT4-fs (loop0): 1 truncate cleaned up [ 30.914219][ T721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.957863][ T286] EXT4-fs (loop0): unmounting filesystem. [ 31.192095][ T296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.198835][ T748] loop3: detected capacity change from 0 to 40427 [ 31.222740][ T748] F2FS-fs (loop3): invalid crc value [ 31.233064][ T750] loop0: detected capacity change from 0 to 40427 [ 31.240965][ T748] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.257196][ T750] F2FS-fs (loop0): invalid crc value [ 31.313380][ T750] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.331776][ T748] F2FS-fs (loop3): Start checkpoint disabled! [ 31.343726][ T748] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 31.367154][ T748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 31.392102][ T750] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.402532][ T296] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.419413][ T296] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.437167][ T296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 31.448596][ T296] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 31.462214][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.470628][ T318] kworker/u4:3: attempt to access beyond end of device [ 31.470628][ T318] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 31.473057][ T296] usb 5-1: config 0 descriptor?? [ 31.489738][ T750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 31.728025][ T784] loop0: detected capacity change from 0 to 2048 [ 31.771029][ T784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.797280][ T784] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.893491][ T296] hid (null): unknown global tag 0xfd [ 31.913508][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 31.913522][ T28] audit: type=1400 audit(1791479561.599:211): avc: denied { create } for pid=782 comm="syz.0.198" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.939604][ T784] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 31.944115][ T296] waltop 0003:172F:0034.0003: unexpected long global item [ 31.951192][ T784] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 31.966537][ T784] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 31.966656][ T296] waltop: probe of 0003:172F:0034.0003 failed with error -22 [ 31.976099][ T28] audit: type=1400 audit(1791479561.619:212): avc: denied { mounton } for pid=782 comm="syz.0.198" path="/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.028386][ T28] audit: type=1400 audit(1791479561.619:213): avc: denied { write } for pid=782 comm="syz.0.198" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.031813][ T794] loop3: detected capacity change from 0 to 1024 [ 32.055065][ T28] audit: type=1400 audit(1791479561.619:214): avc: denied { add_name } for pid=782 comm="syz.0.198" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.076251][ T28] audit: type=1400 audit(1791479561.619:215): avc: denied { setattr } for pid=782 comm="syz.0.198" name="work" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.080279][ T794] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.202: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.105336][ T28] audit: type=1400 audit(1791479561.619:216): avc: denied { write } for pid=782 comm="syz.0.198" path=2F202864656C6574656429 dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.112218][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.141680][ T794] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 32.142029][ T286] EXT4-fs (loop0): unmounting filesystem. [ 32.157515][ T794] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.202: Invalid inode table block 1 in block_group 0 [ 32.170150][ T28] audit: type=1400 audit(1791479561.619:217): avc: denied { remove_name } for pid=782 comm="syz.0.198" name="#1" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.170170][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.188198][ T294] usb 5-1: USB disconnect, device number 2 [ 32.198509][ T794] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 32.204822][ T28] audit: type=1400 audit(1791479561.619:218): avc: denied { rename } for pid=782 comm="syz.0.198" name="#1" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.234956][ T28] audit: type=1400 audit(1791479561.619:219): avc: denied { unlink } for pid=782 comm="syz.0.198" name="#1" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.248247][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.271922][ T800] Illegal XDP return value 4294967274 on prog (id 21) dev N/A, expect packet loss! [ 32.272447][ T794] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.202: mark_inode_dirty error [ 32.293100][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.302081][ T794] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.202: Failed to acquire dquot type 0 [ 32.308988][ T804] loop0: detected capacity change from 0 to 2048 [ 32.313609][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.326870][ T794] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 32.336059][ T804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.336482][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.348806][ T804] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 32.351479][ T794] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.202: mark_inode_dirty error [ 32.366133][ T804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 32.377139][ T794] EXT4-fs (loop3): Remounting filesystem read-only [ 32.388784][ T804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.388784][ T804] [ 32.395522][ T794] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 32.405590][ T804] EXT4-fs (loop0): Total free blocks count 0 [ 32.415503][ T794] EXT4-fs (loop3): 1 orphan inode deleted [ 32.421112][ T804] EXT4-fs (loop0): Free/Dirty block details [ 32.427022][ T794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.432735][ T804] EXT4-fs (loop0): free_blocks=4096 [ 32.441384][ T726] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.446357][ T804] EXT4-fs (loop0): dirty_blocks=48 [ 32.465922][ T726] EXT4-fs (loop3): Remounting filesystem read-only [ 32.466001][ T804] EXT4-fs (loop0): Block reservation details [ 32.478448][ T804] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 32.479111][ T726] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 0 [ 32.495947][ T809] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.508899][ T726] EXT4-fs (loop3): Remounting filesystem read-only [ 32.517545][ T289] EXT4-fs (loop3): unmounting filesystem. [ 32.523569][ T289] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 32.536671][ T289] EXT4-fs (loop3): Remounting filesystem read-only [ 32.543205][ T289] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 32.552873][ T289] EXT4-fs (loop3): Remounting filesystem read-only [ 32.559397][ T289] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 32.571691][ T289] EXT4-fs (loop3): Remounting filesystem read-only [ 32.747331][ T832] loop0: detected capacity change from 0 to 1024 [ 32.754744][ T828] loop3: detected capacity change from 0 to 8192 [ 32.766597][ T832] EXT4-fs: Ignoring removed orlov option [ 32.819429][ T832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.882381][ T286] EXT4-fs (loop0): unmounting filesystem. [ 32.931389][ T864] netem: incorrect gi model size [ 32.942155][ T864] netem: change failed [ 32.964454][ T873] loop4: detected capacity change from 0 to 128 [ 33.142116][ T296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.144476][ T913] loop0: detected capacity change from 0 to 512 [ 33.158474][ T913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.170663][ T913] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.254: inode has both inline data and extents flags [ 33.183940][ T913] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.254: couldn't read orphan inode 15 (err -117) [ 33.196012][ T913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.209494][ T913] EXT4-fs (loop0): shut down requested (1) [ 33.222038][ T286] EXT4-fs (loop0): unmounting filesystem. [ 33.224022][ T919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.236647][ T919] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.271266][ T287] EXT4-fs (loop4): unmounting filesystem. [ 33.300448][ T931] device bridge_slave_0 left promiscuous mode [ 33.309021][ T931] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.317506][ T931] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 33.333808][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 33.340195][ T296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.371904][ T296] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.385072][ T296] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.396497][ T296] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 33.406854][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.432658][ T296] hub 3-1:1.0: bad descriptor, ignoring hub [ 33.438718][ T296] hub: probe of 3-1:1.0 failed with error -5 [ 33.446844][ T296] cdc_wdm 3-1:1.0: skipping garbage [ 33.452281][ T296] cdc_wdm 3-1:1.0: skipping garbage [ 33.457655][ T296] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 33.486189][ T969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 33.738798][ T973] syz.4.282 (973) used greatest stack depth: 19912 bytes left [ 33.755605][ T606] usb 3-1: USB disconnect, device number 2 [ 33.773593][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 34.121012][ T1045] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.133517][ T1045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 34.142481][ T1045] System zones: 1-12 [ 34.146825][ T1045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.167313][ T1045] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.314: Directory hole found for htree leaf block 0 [ 34.188532][ T1045] EXT4-fs (loop4): Remounting filesystem read-only [ 34.209948][ T287] EXT4-fs (loop4): unmounting filesystem. [ 34.220985][ T1061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.238899][ T1061] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.243339][ T1066] overlayfs: missing 'lowerdir' [ 34.252474][ T1061] EXT4-fs error (device loop2): ext4_group_add:1746: inode #7: comm syz.2.320: iget: checksum invalid [ 34.268427][ T1061] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode [ 34.305093][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.321464][ T1074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 34.449003][ T1098] Zero length message leads to an empty skb [ 34.634851][ T1116] TCP: tcp_parse_options: Illegal window scaling value 248 > 14 received [ 36.811068][ T1141] set_capacity_and_notify: 4 callbacks suppressed [ 36.811082][ T1141] loop2: detected capacity change from 0 to 512 [ 36.840267][ T1141] FAT-fs (loop2): Directory bread(block 2080) failed [ 36.857586][ T1141] FAT-fs (loop2): Directory bread(block 2081) failed [ 36.860639][ T1156] loop0: detected capacity change from 0 to 16 [ 36.870764][ T1141] FAT-fs (loop2): Directory bread(block 2082) failed [ 36.878230][ T1156] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.878388][ T1153] loop3: detected capacity change from 0 to 128 [ 36.888146][ T1156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 36.901060][ T1156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 36.910390][ T1156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 36.919299][ T1141] FAT-fs (loop2): Directory bread(block 2083) failed [ 36.933072][ T1153] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.935485][ T1156] overlayfs: failed to get redirect (-117) [ 36.955200][ T1141] FAT-fs (loop2): Directory bread(block 2084) failed [ 36.962006][ T1141] FAT-fs (loop2): Directory bread(block 2085) failed [ 36.978853][ T1141] FAT-fs (loop2): Directory bread(block 2086) failed [ 36.985922][ T1153] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.996681][ T1141] FAT-fs (loop2): Directory bread(block 2087) failed [ 37.016192][ T1141] FAT-fs (loop2): Directory bread(block 2080) failed [ 37.023162][ T1141] FAT-fs (loop2): Directory bread(block 2081) failed [ 37.053969][ T1169] ip_tables: iptables: counters copy to user failed while replacing table [ 37.053999][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.096928][ T1175] ip_tables: iptables: counters copy to user failed while replacing table [ 37.389369][ T1198] loop3: detected capacity change from 0 to 1024 [ 37.405906][ T1186] loop1: detected capacity change from 0 to 40427 [ 37.421569][ T1186] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 37.421726][ T1198] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.433081][ T1186] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 37.443110][ T1186] F2FS-fs (loop1): invalid crc value [ 37.448479][ T1198] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #4: comm syz.3.381: iget: immutable or append flags not allowed on symlinks [ 37.464064][ T1186] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 37.472115][ T1198] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.381: Bad quota inode: 4, type: 1 [ 37.492209][ T1198] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.502540][ T1186] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 37.507025][ T1198] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 37.516106][ T1186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.522418][ T1198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.532197][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 37.532208][ T28] audit: type=1400 audit(1791479567.217:274): avc: denied { append } for pid=1206 comm="syz.4.383" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.578340][ T288] syz-executor: attempt to access beyond end of device [ 37.578340][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.593026][ T289] EXT4-fs (loop3): unmounting filesystem. [ 37.654899][ T1217] loop4: detected capacity change from 0 to 512 [ 37.658050][ T1219] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.385'. [ 37.670635][ T1219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 37.684251][ T1217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 37.696837][ T1217] System zones: 1-12 [ 37.702456][ T1225] netlink: 180 bytes leftover after parsing attributes in process `syz.1.390'. [ 37.704402][ T1222] loop3: detected capacity change from 0 to 4096 [ 37.719112][ T1217] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.388: missing EA_INODE flag [ 37.737930][ T1217] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.388: error while reading EA inode 12 err=-117 [ 37.738235][ T1217] EXT4-fs (loop4): 1 orphan inode deleted [ 37.738254][ T1217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.739944][ T28] audit: type=1400 audit(1791479567.417:275): avc: denied { mount } for pid=1229 comm="syz.0.392" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.749814][ T1222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.752520][ T287] EXT4-fs (loop4): unmounting filesystem. [ 37.760771][ T28] audit: type=1400 audit(1791479567.437:276): avc: denied { ioctl } for pid=1221 comm="syz.3.389" path="/116/file0/file1" dev="loop3" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.804941][ T1239] tipc: Started in network mode [ 37.859720][ T289] EXT4-fs (loop3): unmounting filesystem. [ 37.878316][ T1239] tipc: Node identity 7f000001, cluster identity 4711 [ 37.894377][ T1239] tipc: New replicast peer: 127.0.0.2 [ 37.909195][ T1249] loop1: detected capacity change from 0 to 512 [ 37.909513][ T1239] tipc: Enabled bearer , priority 10 [ 37.945608][ T1249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.981900][ T1249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.991458][ T1249] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.028661][ T1249] overlayfs: invalid origin (0000007900f85392cfef1f117126cdffc351483f4d200beaf57afdb7fac176d5ab7560dfcaa7c7c0b9fc504434caf9fcd050e318fe9f31902f57aab5872f5796) [ 38.050735][ T1245] loop0: detected capacity change from 0 to 40427 [ 38.072974][ T1245] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 38.088211][ T1245] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 38.103186][ T1245] F2FS-fs (loop0): invalid crc value [ 38.120343][ T288] EXT4-fs (loop1): unmounting filesystem. [ 38.140702][ T1245] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.172186][ T28] audit: type=1400 audit(1791479567.857:277): avc: denied { watch_reads } for pid=1277 comm="syz.4.413" path="/99" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.197172][ T1280] loop1: detected capacity change from 0 to 512 [ 38.212286][ T1245] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 38.219364][ T1245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.237499][ T1280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.262970][ T286] syz-executor: attempt to access beyond end of device [ 38.262970][ T286] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.263091][ T1280] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.409: EA inode hash validation failed [ 38.291047][ T1280] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.304168][ T1280] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.409: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 38.319854][ T1280] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.409: ea_inode dec ref err=-117 [ 38.333132][ T1280] EXT4-fs (loop1): 1 orphan inode deleted [ 38.338932][ T1280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.379935][ T1280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.385345][ T1290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.412538][ T1290] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.446487][ T288] EXT4-fs (loop1): unmounting filesystem. [ 38.491032][ T28] audit: type=1400 audit(1791479568.167:278): avc: denied { connect } for pid=1306 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.523139][ T1290] fs-verity: sha512 using implementation "sha512-avx2" [ 38.536797][ T28] audit: type=1400 audit(1791479568.207:279): avc: denied { setopt } for pid=1310 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.571205][ T290] EXT4-fs (loop2): unmounting filesystem. [ 38.623141][ T1299] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 38.650971][ T1299] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 38.664925][ T28] audit: type=1400 audit(1791479568.347:280): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 38.669604][ T1325] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 38.692147][ T1299] F2FS-fs (loop3): invalid crc value [ 38.737900][ T1299] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.750831][ T28] audit: type=1400 audit(1791479568.437:281): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.776951][ T28] audit: type=1400 audit(1791479568.437:282): avc: denied { read } for pid=141 comm="dhcpcd" name="n52" dev="tmpfs" ino=1330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.814031][ T28] audit: type=1400 audit(1791479568.437:283): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=1330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.814815][ T1331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.852265][ T1299] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 38.862134][ T1299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.902094][ T606] tipc: Node number set to 2130706433 [ 38.962480][ T1329] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 39.000513][ T1329] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 39.038988][ T1329] F2FS-fs (loop0): fault_injection options not supported [ 39.063615][ T1329] F2FS-fs (loop0): invalid crc value [ 39.072809][ T1331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 39.089434][ T1331] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 39.092582][ T1329] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.116050][ T1331] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.116050][ T1331] [ 39.126089][ T1331] EXT4-fs (loop4): Total free blocks count 0 [ 39.132768][ T1331] EXT4-fs (loop4): Free/Dirty block details [ 39.147735][ T1331] EXT4-fs (loop4): free_blocks=4096 [ 39.155270][ T1331] EXT4-fs (loop4): dirty_blocks=512 [ 39.163847][ T1331] EXT4-fs (loop4): Block reservation details [ 39.175728][ T1331] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 39.183969][ T1329] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 39.194224][ T1329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.204653][ T1331] EXT4-fs error (device loop4) in ext4_setattr:5697: error 28 [ 39.246776][ T287] EXT4-fs (loop4): unmounting filesystem. [ 39.278591][ T286] syz-executor: attempt to access beyond end of device [ 39.278591][ T286] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.298709][ T1397] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc0abf927, utbl_chksum : 0xe619d30d) [ 39.343729][ T1397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 39.377745][ T1404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.389754][ T1404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.400810][ T1404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 39.409064][ T1404] System zones: 0-1, 3-36 [ 39.419200][ T1404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.445063][ T290] EXT4-fs (loop2): unmounting filesystem. [ 39.655757][ T1431] netlink: 27 bytes leftover after parsing attributes in process `syz.1.464'. [ 39.686834][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 39.753802][ T1441] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 39.767484][ T1439] can0: slcan on ttyS3. [ 39.823637][ T1439] can0 (unregistered): slcan off ttyS3. [ 39.843825][ T1455] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.474: inode has both inline data and extents flags [ 39.885211][ T1455] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.474: couldn't read orphan inode 15 (err -117) [ 39.925944][ T1455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.982091][ T1443] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 40.006098][ T1443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.020594][ T1443] F2FS-fs (loop4): invalid crc value [ 40.044913][ T289] EXT4-fs (loop3): unmounting filesystem. [ 40.067231][ T1443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.087218][ T1483] exfat: Deprecated parameter 'namecase' [ 40.097502][ T1483] exfat: Deprecated parameter 'namecase' [ 40.114280][ T1485] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 40.132277][ T1483] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 40.192120][ T1443] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 40.199164][ T1443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.257433][ T10] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 40.339961][ T1503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.352722][ T1503] ext4 filesystem being mounted at /74/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 40.407175][ T1491] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 40.415048][ T1491] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.423821][ T1491] F2FS-fs (loop3): invalid crc value [ 40.429743][ T288] EXT4-fs (loop1): unmounting filesystem. [ 40.461756][ T1491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.495207][ T1521] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 40.552393][ T1491] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.559503][ T1491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.607687][ T726] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 40.633492][ T726] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 40.722822][ T1545] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 40.737508][ T1545] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0 [ 40.748210][ T1545] flags: 0x4000000000010200(slab|head|zone=1) [ 40.754621][ T1545] raw: 4000000000010200 0000000000000000 dead000000000001 ffff8881001ed080 [ 40.763567][ T1545] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 40.772275][ T1545] page dumped because: unmovable page [ 40.777734][ T1545] page_owner tracks the page as allocated [ 40.783575][ T1545] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, tgid 102 (udevd), ts 4260524038, free_ts 0 [ 40.803300][ T1545] post_alloc_hook+0x1f5/0x210 [ 40.808087][ T1545] prep_new_page+0x1c/0x110 [ 40.812604][ T1545] get_page_from_freelist+0x2ca9/0x2d20 [ 40.818200][ T1545] __alloc_pages+0x1fa/0x610 [ 40.822891][ T1545] alloc_slab_page+0x6e/0xf0 [ 40.827537][ T1545] new_slab+0x98/0x3e0 [ 40.831630][ T1545] ___slab_alloc+0x70f/0xb70 [ 40.836307][ T1545] __slab_alloc+0x5e/0xa0 [ 40.840661][ T1545] kmem_cache_alloc+0x1a8/0x320 [ 40.845649][ T1545] getname_flags+0xba/0x510 [ 40.850179][ T1545] getname+0x19/0x20 [ 40.854110][ T1545] do_sys_openat2+0xeb/0x820 [ 40.858712][ T1545] __x64_sys_openat+0x136/0x160 [ 40.863611][ T1545] x64_sys_call+0x783/0x9a0 [ 40.868114][ T1545] do_syscall_64+0x4c/0xa0 [ 40.872593][ T1545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.878534][ T1545] page_owner free stack trace missing [ 40.931145][ T1562] EXT4-fs: Ignoring removed nobh option [ 40.944208][ T1562] EXT4-fs: Ignoring removed bh option [ 40.962980][ T1562] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 40.971330][ T1562] System zones: 0-1, 3-12 [ 40.977738][ T1562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.991398][ T1562] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.007356][ T1577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.023324][ T1577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.033370][ T1577] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.036478][ T286] EXT4-fs (loop0): unmounting filesystem. [ 41.056504][ T288] EXT4-fs (loop1): unmounting filesystem. [ 41.110273][ T1597] WARNING! power/level is deprecated; use power/control instead [ 41.139845][ T1604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 41.272740][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 41.379635][ T1617] input: syz0 as /devices/virtual/input/input8 [ 41.437468][ T1632] syz.0.534 (1632): attempted to duplicate a private mapping with mremap. This is not supported. [ 41.462638][ T1634] caif0: tun_chr_ioctl cmd 2148553947 [ 41.527816][ T1654] tipc: Disabling bearer [ 41.537506][ T1647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.540: bg 0: block 5: invalid block bitmap [ 41.551314][ T1647] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 41.560817][ T1647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.540: invalid indirect mapped block 393216 (level 0) [ 41.574615][ T1647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.540: invalid indirect mapped block 3 (level 2) [ 41.594321][ T1647] EXT4-fs (loop1): 1 orphan inode deleted [ 41.606548][ T1647] EXT4-fs (loop1): 1 truncate cleaned up [ 41.620936][ T1647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.649268][ T288] EXT4-fs (loop1): unmounting filesystem. [ 41.722112][ T296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.838134][ T1708] set_capacity_and_notify: 21 callbacks suppressed [ 41.838148][ T1708] loop3: detected capacity change from 0 to 512 [ 41.864472][ T1708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.873548][ T1708] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.910313][ T289] EXT4-fs (loop3): unmounting filesystem. [ 41.923169][ T296] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 41.934897][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.954162][ T296] usb-storage 1-1:1.0: USB Mass Storage device detected [ 42.071973][ T1744] loop1: detected capacity change from 0 to 256 [ 42.129882][ T1732] loop3: detected capacity change from 0 to 40427 [ 42.145837][ T1732] F2FS-fs (loop3): invalid crc value [ 42.160897][ T1732] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.223774][ T1732] F2FS-fs (loop3): Start checkpoint disabled! [ 42.240465][ T1732] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 42.262126][ T1732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 42.355737][ T296] scsi host1: usb-storage 1-1:1.0 [ 42.379178][ T726] kworker/u4:5: attempt to access beyond end of device [ 42.379178][ T726] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 42.560721][ T296] usb 1-1: USB disconnect, device number 3 [ 42.671326][ T1796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.701822][ T1774] loop1: detected capacity change from 0 to 40427 [ 42.720806][ T1774] F2FS-fs (loop1): heap/no_heap options were deprecated [ 42.734211][ T1774] F2FS-fs (loop1): fault_injection options not supported [ 42.748361][ T1774] F2FS-fs (loop1): fault_type options not supported [ 42.772395][ T1774] F2FS-fs (loop1): invalid crc value [ 42.772532][ T1787] loop4: detected capacity change from 0 to 40427 [ 42.802615][ T1787] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 42.804373][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 42.804383][ T28] audit: type=1400 audit(1791479572.487:317): avc: denied { mount } for pid=1806 comm="syz.3.609" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 42.815703][ T1787] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.844205][ T1774] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.847133][ T1787] F2FS-fs (loop4): invalid crc value [ 42.888526][ T1787] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.922527][ T1774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.952328][ T1787] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.959361][ T1787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.012321][ T1787] syz.4.602: attempt to access beyond end of device [ 43.012321][ T1787] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.054642][ T1787] syz.4.602: attempt to access beyond end of device [ 43.054642][ T1787] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 43.133675][ T28] audit: type=1400 audit(1791479573.824:318): avc: denied { read write } for pid=1827 comm="syz.1.612" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.163622][ T287] syz-executor: attempt to access beyond end of device [ 43.163622][ T287] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 43.166269][ T28] audit: type=1400 audit(1791479573.844:319): avc: denied { ioctl open } for pid=1827 comm="syz.1.612" path="/110/binderfs2/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.286394][ T1843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.296682][ T28] audit: type=1400 audit(1791479573.984:320): avc: denied { bind } for pid=1842 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.313072][ T1843] ip_tables: iptables: counters copy to user failed while replacing table [ 43.360901][ T28] audit: type=1400 audit(1791479574.034:321): avc: denied { write } for pid=1847 comm="syz.4.618" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.390545][ T1854] loop4: detected capacity change from 0 to 256 [ 43.409388][ T1856] loop2: detected capacity change from 0 to 512 [ 43.468060][ T1856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.477044][ T1856] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.512970][ T290] EXT4-fs (loop2): unmounting filesystem. [ 43.540933][ T1865] xt_hashlimit: size too large, truncated to 1048576 [ 43.574562][ T1814] loop3: detected capacity change from 0 to 131072 [ 43.587130][ T1814] F2FS-fs (loop3): Test dummy encryption mode enabled [ 43.598279][ T1814] F2FS-fs (loop3): invalid crc value [ 43.622111][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.636801][ T1814] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.686647][ T1814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.718750][ T28] audit: type=1400 audit(1791479574.404:322): avc: denied { lock } for pid=1812 comm="syz.3.611" path="/152/file1/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.722214][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 43.788845][ T1881] xt_hashlimit: size too large, truncated to 1048576 [ 43.843688][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.853663][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.876708][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.897518][ T6] usb 1-1: string descriptor 0 read error: -22 [ 43.908195][ T6] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 43.927070][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.945803][ T6] usb 1-1: selecting invalid altsetting 1 [ 43.951800][ T6] usb 1-1: unit 6 not found! [ 43.952835][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 43.973672][ T24] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 43.997544][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.997848][ T1892] 9p: Unknown access argument c: -22 [ 44.013125][ T1894] process 'syz.3.638' launched './file1' with NULL argv: empty string added [ 44.021929][ T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 44.031473][ T28] audit: type=1400 audit(1791479574.724:323): avc: denied { execute_no_trans } for pid=1893 comm="syz.3.638" path="/153/file1" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.037773][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 44.067571][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.079491][ T28] audit: type=1400 audit(1791479574.764:324): avc: denied { read } for pid=1895 comm="syz.3.645" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.109900][ T24] usb 5-1: config 0 descriptor?? [ 44.114620][ T28] audit: type=1400 audit(1791479574.794:325): avc: denied { mount } for pid=1897 comm="syz.3.647" name="/" dev="configfs" ino=13204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.116080][ T1900] loop1: detected capacity change from 0 to 256 [ 44.146139][ T24] uvcvideo 5-1:0.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 44.156221][ T28] audit: type=1400 audit(1791479574.794:326): avc: denied { search } for pid=1897 comm="syz.3.647" name="/" dev="configfs" ino=13204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.162139][ T24] usb 5-1: Found UVC 9.00 device (046d:0825) [ 44.187449][ T24] uvcvideo 5-1:0.1: No supported video formats found. [ 44.194484][ T24] uvcvideo 5-1:0.1: Failed to initialize the device (-22). [ 44.209908][ T1902] loop3: detected capacity change from 0 to 512 [ 44.257042][ T1902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.276086][ T1902] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.319688][ T289] EXT4-fs (loop3): unmounting filesystem. [ 44.460663][ T1918] incfs: Can't find or create .incomplete dir in ./file0 [ 44.468166][ T1918] incfs: mount failed -22 [ 44.612095][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 44.635093][ T1930] EXT4-fs: Ignoring removed bh option [ 44.647826][ T1930] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.659: missing EA_INODE flag [ 44.659355][ T1930] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.659: error while reading EA inode 2 err=-117 [ 44.672214][ T1930] EXT4-fs (loop1): 1 orphan inode deleted [ 44.677953][ T1930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.692816][ T1930] EXT4-fs (loop1): shut down requested (0) [ 44.705445][ T288] EXT4-fs (loop1): unmounting filesystem. [ 44.757672][ T6] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 44.787402][ T6] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 44.787516][ T1942] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 44.803932][ T1942] System zones: 0-2, 18-18, 34-35 [ 44.809130][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 44.820201][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 44.820696][ T1942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.829278][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.838607][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.862484][ T6] usb 1-1: USB disconnect, device number 4 [ 44.874359][ T1942] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.914032][ T290] EXT4-fs (loop2): unmounting filesystem. [ 45.260077][ T24] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 45.328684][ T1981] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.336514][ T1981] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.351212][ T1981] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 45.358046][ T1981] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.680: couldn't read orphan inode 26 (err -116) [ 45.370376][ T1981] EXT4-fs (loop1): Remounting filesystem read-only [ 45.376940][ T1981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.396049][ T288] EXT4-fs (loop1): unmounting filesystem. [ 45.438049][ T1989] netlink: 71 bytes leftover after parsing attributes in process `syz.0.683'. [ 45.458955][ T24] lg-g15 0003:046D:C222.0004: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 45.483676][ T24] usb 4-1: USB disconnect, device number 2 [ 45.518604][ T1993] fido_id[1993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 45.750738][ T2031] EXT4-fs: Ignoring removed orlov option [ 45.774393][ T2031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.792075][ T288] EXT4-fs (loop1): unmounting filesystem. [ 45.861938][ T2044] netem: change failed [ 45.890935][ T2049] netlink: 165 bytes leftover after parsing attributes in process `syz.1.709'. [ 46.118437][ T2077] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 46.134988][ T2077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.149146][ T2077] ext2 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.171232][ T286] EXT4-fs (loop0): unmounting filesystem. [ 46.454609][ T6] usb 5-1: USB disconnect, device number 3 [ 46.883299][ T2153] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 46.903115][ T2153] FAT-fs (loop2): Filesystem has been set read-only [ 46.917535][ T2153] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 46.950604][ T2155] set_capacity_and_notify: 9 callbacks suppressed [ 46.950616][ T2155] loop1: detected capacity change from 0 to 8192 [ 47.336792][ T2186] loop0: detected capacity change from 0 to 256 [ 47.347500][ T2187] loop2: detected capacity change from 0 to 1024 [ 47.360879][ T2186] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0f9fe0e0, utbl_chksum : 0xe619d30d) [ 47.400479][ T2187] EXT4-fs: Ignoring removed bh option [ 47.441431][ T2187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.479800][ T290] EXT4-fs (loop2): unmounting filesystem. [ 47.516707][ T2195] loop0: detected capacity change from 0 to 2048 [ 47.518495][ T2198] loop4: detected capacity change from 0 to 2048 [ 47.535018][ T2198] EXT4-fs: Ignoring removed oldalloc option [ 47.553465][ T2198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.595949][ T2198] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 47.615718][ T2195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.636618][ T2195] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.668906][ T2198] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 47.706514][ T286] EXT4-fs (loop0): unmounting filesystem. [ 47.720591][ T2209] loop3: detected capacity change from 0 to 8192 [ 47.727026][ T2198] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.727026][ T2198] [ 47.745647][ T2198] EXT4-fs (loop4): Total free blocks count 0 [ 47.765293][ T2198] EXT4-fs (loop4): Free/Dirty block details [ 47.782624][ T2198] EXT4-fs (loop4): free_blocks=4096 [ 47.807044][ T2198] EXT4-fs (loop4): dirty_blocks=512 [ 47.822086][ T2198] EXT4-fs (loop4): Block reservation details [ 47.828139][ T2198] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 47.879665][ T287] EXT4-fs (loop4): unmounting filesystem. [ 47.915172][ T2226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.779'. [ 48.165300][ T2237] loop0: detected capacity change from 0 to 512 [ 48.232906][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 48.232928][ T28] audit: type=1400 audit(1791479578.924:339): avc: denied { mount } for pid=2240 comm="syz.4.785" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 48.241499][ T2237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.276249][ T2248] netlink: 136 bytes leftover after parsing attributes in process `syz.3.786'. [ 48.285902][ T2237] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.296634][ T2246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.321135][ T286] EXT4-fs (loop0): unmounting filesystem. [ 48.363492][ T2258] caif0: tun_chr_ioctl cmd 1074025677 [ 48.368908][ T2258] caif0: linktype set to 768 [ 48.416239][ T2261] ip_tables: iptables: counters copy to user failed while replacing table [ 48.446728][ T2265] can0: slcan on ttyS3. [ 48.502650][ T2265] can0 (unregistered): slcan off ttyS3. [ 48.596614][ T2277] loop0: detected capacity change from 0 to 8192 [ 48.655472][ T2301] loop3: detected capacity change from 0 to 512 [ 48.806852][ T2274] loop4: detected capacity change from 0 to 40427 [ 48.848953][ T2274] F2FS-fs (loop4): invalid crc value [ 48.872393][ T2274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.012883][ T2274] F2FS-fs (loop4): Start checkpoint disabled! [ 49.031818][ T2274] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 49.070303][ T2274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 49.165328][ T2341] input: syz0 as /devices/virtual/input/input10 [ 49.219469][ T28] audit: type=1400 audit(1791479579.904:340): avc: denied { read } for pid=2342 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.326216][ T2356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.818'. [ 49.336523][ T2357] input: syz1 as /devices/virtual/input/input11 [ 49.530499][ T2390] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 49.553127][ T2396] exfat: Deprecated parameter 'utf8' [ 49.558547][ T2396] exfat: Deprecated parameter 'namecase' [ 49.570415][ T2396] exfat: Deprecated parameter 'utf8' [ 49.579256][ T2396] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 49.646603][ T28] audit: type=1400 audit(1791479580.334:341): avc: denied { write } for pid=2411 comm="syz.2.848" name="route" dev="proc" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.688223][ T28] audit: type=1400 audit(1791479580.374:342): avc: denied { bind } for pid=2414 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.723932][ T2419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 49.814288][ T2429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.823407][ T2429] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.849096][ T290] EXT4-fs (loop2): unmounting filesystem. [ 49.931318][ T2423] F2FS-fs (loop0): invalid crc value [ 49.959893][ T2423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.991469][ T2449] exfat: Deprecated parameter 'namecase' [ 50.004757][ T2449] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 50.015529][ T2451] syz.3.864 (2451): /proc/2450/oom_adj is deprecated, please use /proc/2450/oom_score_adj instead. [ 50.024721][ T2423] F2FS-fs (loop0): Start checkpoint disabled! [ 50.034191][ T2423] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 50.042154][ T2423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 50.064157][ T2453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.073189][ T2453] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.075617][ T10] kworker/u4:1: attempt to access beyond end of device [ 50.075617][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.108275][ T2458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 50.124108][ T289] EXT4-fs (loop3): unmounting filesystem. [ 50.200169][ T2471] overlayfs: failed to set xattr on upper [ 50.291935][ T2484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.304618][ T2484] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #2: comm syz.3.878: directory missing '..' [ 50.322026][ T289] EXT4-fs (loop3): unmounting filesystem. [ 50.348822][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 50.423576][ T2515] netlink: 72 bytes leftover after parsing attributes in process `syz.3.891'. [ 50.433461][ T2515] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 50.465877][ T2515] netlink: 'syz.3.891': attribute type 2 has an invalid length. [ 50.640407][ T2549] syz.1.907 (2549) used greatest stack depth: 18856 bytes left [ 50.690097][ T2558] ip_tables: iptables: counters copy to user failed while replacing table [ 50.732100][ T294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.880174][ T2577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.920'. [ 50.889658][ T2577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.897958][ T2577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 50.898408][ T2575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.926938][ T2575] EXT4-fs (loop1): Test dummy encryption mode enabled [ 50.933962][ T312] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.952167][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 50.957567][ T2575] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802e1a8, mo2=0003] [ 50.967190][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.983732][ T2575] System zones: 0-5 [ 50.987512][ T294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.002867][ T294] usb 3-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 51.009967][ T2575] fscrypt: AES-256-XTS using blk-crypto-fallback [ 51.019298][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.041960][ T28] audit: type=1326 audit(1791479581.724:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.068970][ T28] audit: type=1326 audit(1791479581.754:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.080762][ T294] usb 3-1: config 0 descriptor?? [ 51.099376][ T28] audit: type=1326 audit(1791479581.754:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.124296][ T28] audit: type=1326 audit(1791479581.754:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.182128][ T28] audit: type=1326 audit(1791479581.754:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.198137][ T2597] futex_wake_op: syz.0.930 tries to shift op by 144; fix this program [ 51.207115][ T28] audit: type=1326 audit(1791479581.754:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.3.924" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062119e1d9 code=0x7ffc0000 [ 51.215446][ T2597] futex_wake_op: syz.0.930 tries to shift op by 144; fix this program [ 51.241795][ T6] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 51.433155][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 51.445360][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.459668][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 51.470276][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.471162][ T2640] input: syz1 as /devices/virtual/input/input12 [ 51.485326][ T2640] input: failed to attach handler leds to device input12, error: -6 [ 51.496928][ T6] usb 5-1: config 0 descriptor?? [ 51.504851][ T2580] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 51.537337][ T2648] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 51.542269][ T294] input: HID 047d:2041 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047D:2041.0005/input/input13 [ 51.572084][ T294] kensington 0003:047D:2041.0005: input,hidraw0: USB HID v0.00 Joystick [HID 047d:2041] on usb-dummy_hcd.2-1/input0 [ 51.789844][ T19] usb 3-1: USB disconnect, device number 3 [ 51.918077][ T6] lenovo 0003:17EF:6062.0006: unknown main item tag 0x2 [ 51.925084][ T6] lenovo 0003:17EF:6062.0006: unknown main item tag 0x3 [ 51.933176][ T6] lenovo 0003:17EF:6062.0006: unknown main item tag 0x1 [ 51.940131][ T6] lenovo 0003:17EF:6062.0006: unknown main item tag 0x2 [ 51.956895][ T6] lenovo 0003:17EF:6062.0006: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 51.980686][ T2698] futex_wake_op: syz.1.974 tries to shift op by -1; fix this program [ 51.998690][ T2700] ip_tables: iptables: counters copy to user failed while replacing table [ 52.008383][ T2700] ip_tables: iptables: counters copy to user failed while replacing table [ 52.119930][ T19] usb 5-1: USB disconnect, device number 4 [ 52.739926][ T2756] set_capacity_and_notify: 11 callbacks suppressed [ 52.739942][ T2756] loop0: detected capacity change from 0 to 256 [ 52.752886][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.771731][ T2762] loop4: detected capacity change from 0 to 128 [ 52.784974][ T2762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1001'. [ 52.812634][ T2768] loop0: detected capacity change from 0 to 16 [ 52.827910][ T2768] erofs: (device loop0): mounted with root inode @ nid 36. [ 52.836398][ T2768] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 2 for nid 36, please upgrade kernel [ 52.848076][ T2768] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 2 for nid 36, please upgrade kernel [ 52.859741][ T2768] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-95] [ 52.890961][ T2782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 52.942083][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 52.948368][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.969012][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.993850][ T6] usb 4-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 53.011619][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.028787][ T6] usb 4-1: config 0 descriptor?? [ 53.423131][ T2850] xt_hashlimit: size too large, truncated to 1048576 [ 53.452387][ T6] input: HID 047d:2041 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047D:2041.0007/input/input14 [ 53.481033][ T2851] xt_connbytes: Forcing CT accounting to be enabled [ 53.488898][ T6] kensington 0003:047D:2041.0007: input,hidraw0: USB HID v0.00 Joystick [HID 047d:2041] on usb-dummy_hcd.3-1/input0 [ 53.534295][ T2787] loop1: detected capacity change from 0 to 131072 [ 53.544910][ T2787] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 53.562088][ T2787] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.579431][ T2787] F2FS-fs (loop1): invalid crc value [ 53.629544][ T2787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.672681][ T6] usb 4-1: USB disconnect, device number 3 [ 53.718480][ T2787] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.735999][ T2787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 53.840159][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 53.840174][ T28] audit: type=1400 audit(1791479584.524:368): avc: denied { load_policy } for pid=2862 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.869250][ T2863] SELinux: ebitmap: truncated map [ 53.881135][ T2863] SELinux: failed to load policy [ 53.883242][ T2869] loop4: detected capacity change from 0 to 1024 [ 53.934696][ T2869] EXT4-fs: Ignoring removed bh option [ 53.964190][ T2869] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.966237][ T2869] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1051: bg 0: block 112: padding at end of block bitmap is not set [ 53.966446][ T2869] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 53.966471][ T2869] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.966471][ T2869] [ 53.966482][ T2869] EXT4-fs (loop4): Total free blocks count 0 [ 53.966494][ T2869] EXT4-fs (loop4): Free/Dirty block details [ 53.966503][ T2869] EXT4-fs (loop4): free_blocks=0 [ 53.966514][ T2869] EXT4-fs (loop4): dirty_blocks=16 [ 53.966525][ T2869] EXT4-fs (loop4): Block reservation details [ 53.966535][ T2869] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 54.073304][ T28] audit: type=1400 audit(1791479584.764:369): avc: denied { getopt } for pid=2896 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.085891][ T2899] loop2: detected capacity change from 0 to 512 [ 54.100691][ T2899] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 54.100715][ T2899] FAT-fs (loop2): Filesystem has been set read-only [ 54.101096][ T28] audit: type=1400 audit(1791479584.784:370): avc: denied { remount } for pid=2898 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.208321][ T2910] loop3: detected capacity change from 0 to 256 [ 54.249680][ T2910] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 54.318954][ T2922] loop0: detected capacity change from 0 to 512 [ 54.343433][ T2922] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.351136][ T2922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.391365][ T2922] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 54.434370][ T2945] loop1: detected capacity change from 0 to 256 [ 54.450103][ T2922] EXT4-fs (loop0): 1 truncate cleaned up [ 54.489587][ T2954] loop1: detected capacity change from 0 to 512 [ 54.534930][ T2966] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.1094'. [ 54.556119][ T2954] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.584771][ T2976] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 54.625228][ T28] audit: type=1400 audit(1791479585.314:371): avc: denied { connect } for pid=2985 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.680855][ T28] audit: type=1400 audit(1791479585.364:372): avc: denied { create } for pid=2975 comm="syz.0.1096" name="0,jqfmt=vfsv1,errors=remount-ro,acl,grpquota.." scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.760968][ T28] audit: type=1400 audit(1791479585.444:373): avc: denied { ioctl } for pid=3001 comm="syz.1.1110" path="socket:[27834]" dev="sockfs" ino=27834 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.829476][ T28] audit: type=1400 audit(1791479585.494:374): avc: denied { watch_reads } for pid=3010 comm="syz.1.1114" path="/247/file0" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.882866][ T28] audit: type=1400 audit(1791479585.514:375): avc: denied { bind } for pid=3015 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.933960][ T3022] EXT4-fs (loop1): 1 orphan inode deleted [ 54.942218][ T3022] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.962163][ T10] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.971928][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 54.992201][ T28] audit: type=1400 audit(1791479585.514:376): avc: denied { name_bind } for pid=3015 comm="syz.1.1117" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.033353][ T3029] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 55.092532][ T3035] input: syz0 as /devices/virtual/input/input15 [ 55.154712][ T3041] xt_hashlimit: size too large, truncated to 1048576 syzkaller syzkaller login: [ 55.425770][ T2989] F2FS-fs (loop3): invalid crc value [ 55.456704][ T2989] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.499365][ T2989] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 55.534380][ T2989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 55.941736][ T3137] ip_tables: iptables: counters copy to user failed while replacing table [ 56.214077][ T3166] SELinux: ebitmap: truncated map [ 56.221928][ T3166] SELinux: failed to load policy [ 56.552104][ T296] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 56.559641][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.752102][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 56.757188][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 56.763319][ T296] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.773449][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.784329][ T296] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.793295][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.806134][ T19] usb 2-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 56.815203][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.824106][ T19] usb 2-1: config 0 descriptor?? [ 56.829267][ T296] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 56.839030][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.847057][ T296] usb 3-1: Product: syz [ 56.851222][ T296] usb 3-1: Manufacturer: syz [ 56.855826][ T296] usb 3-1: SerialNumber: syz [ 57.065409][ T296] usb 3-1: unit 5 not found! [ 57.076378][ T3195] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 57.089756][ T296] usb 3-1: USB disconnect, device number 4 [ 57.129400][ T3208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.148174][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 57.242207][ T19] input: HID 047d:2041 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047D:2041.0008/input/input16 [ 57.262612][ T19] kensington 0003:047D:2041.0008: input,hidraw0: USB HID v0.00 Joystick [HID 047d:2041] on usb-dummy_hcd.1-1/input0 [ 57.277340][ T3232] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.460333][ T19] usb 2-1: USB disconnect, device number 2 [ 57.631209][ T3302] 9pnet_fd: p9_fd_create_unix (3302): problem connecting socket: éq‰Y’3aK: -111 [ 57.821924][ T3328] set_capacity_and_notify: 9 callbacks suppressed [ 57.821940][ T3328] loop0: detected capacity change from 0 to 256 [ 57.847074][ T3328] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 57.984966][ T3335] SELinux: failed to load policy [ 57.985536][ T3337] loop1: detected capacity change from 0 to 512 [ 57.999843][ T3337] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.005307][ T3339] loop2: detected capacity change from 0 to 16 [ 58.011981][ T3337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.017816][ T3339] erofs: (device loop2): mounted with root inode @ nid 36. [ 58.028094][ T3337] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1249: bad orphan inode 131072 [ 58.037244][ T3339] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 58.048127][ T3337] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 58.049778][ T3339] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -50 in[61, 4035] out[1851] [ 58.069041][ T3339] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 58.186726][ T3358] loop2: detected capacity change from 0 to 512 [ 58.201792][ T3358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 58.214867][ T3358] System zones: 1-12 [ 58.219591][ T3358] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1258: missing EA_INODE flag [ 58.231646][ T3358] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1258: error while reading EA inode 12 err=-117 [ 58.245285][ T3358] EXT4-fs (loop2): 1 orphan inode deleted [ 58.256293][ T3358] fscrypt (loop2, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 58.268111][ T3362] loop0: detected capacity change from 0 to 1024 [ 58.284018][ T3362] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1259: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.293028][ T3365] loop2: detected capacity change from 0 to 1024 [ 58.302565][ T3362] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1259: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.307157][ T3365] EXT4-fs: Ignoring removed bh option [ 58.323884][ T3362] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.1259: Failed to acquire dquot type 0 [ 58.336644][ T3362] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 58.346305][ T3362] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1259: mark_inode_dirty error [ 58.370604][ T3362] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 58.381042][ T3362] EXT4-fs (loop0): 1 orphan inode deleted [ 58.392219][ T10] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.413412][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 58.421189][ T3375] input: syz0 as /devices/virtual/input/input17 [ 58.428864][ T8] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.445675][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 58.461590][ T286] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.475094][ T286] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 58.485130][ T286] EXT4-fs error (device loop0): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 58.497416][ T3383] SELinux: Context is not valid (left unmapped). [ 58.517394][ T3386] incfs: Can't find or create .index dir in ./file0 [ 58.527991][ T3386] incfs: mount failed -1 [ 58.534700][ T3386] incfs: Can't find or create .index dir in ./file0 [ 58.542106][ T3388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 58.542594][ T3386] incfs: mount failed -1 [ 58.662374][ T3415] loop0: detected capacity change from 0 to 16 [ 58.686922][ T3415] erofs: (device loop0): mounted with root inode @ nid 36. [ 58.701521][ T3415] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 58.705839][ T3424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1288'. [ 58.720177][ T3415] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 58.731794][ T3415] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 58.743944][ T3426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 58.744019][ T3415] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 58.764556][ T3430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 58.868931][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 58.868945][ T28] audit: type=1400 audit(1791479589.554:407): avc: denied { ioctl } for pid=3457 comm="syz.4.1305" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.927020][ T3465] loop0: detected capacity change from 0 to 256 [ 59.006983][ T28] audit: type=1400 audit(1791479589.694:408): avc: denied { append } for pid=3474 comm="syz.3.1312" name="sda1" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.128151][ T3491] loop0: detected capacity change from 0 to 512 [ 59.155539][ T3491] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 59.170872][ T3491] FAT-fs (loop0): Filesystem has been set read-only [ 59.197698][ T3498] loop0: detected capacity change from 0 to 256 [ 59.242883][ T3498] exFAT-fs (loop0): failed to load upcase table (idx : 0x000120ea, chksum : 0xcff16ea1, utbl_chksum : 0xe619d30d) [ 59.248886][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.266971][ T3502] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.267395][ T3498] exFAT-fs (loop0): failed to load alloc-bitmap [ 59.276468][ T3502] EXT4-fs (loop3): 1 truncate cleaned up [ 59.285512][ T3498] exFAT-fs (loop0): failed to recognize exfat type [ 59.296310][ T28] audit: type=1400 audit(1791479589.984:409): avc: denied { getopt } for pid=3504 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.322104][ T294] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.400637][ T3498] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1321'. [ 59.409787][ T3498] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1321'. [ 59.419156][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 59.450118][ T3521] EXT4-fs: Ignoring removed bh option [ 59.467334][ T28] audit: type=1400 audit(1791479590.154:410): avc: denied { set_context_mgr } for pid=3522 comm="syz.1.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.468023][ T3523] binder: 3522:3523 ioctl c018620c 200000000180 returned -1 [ 59.501470][ T3514] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.509907][ T3514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.523139][ T294] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.528212][ T3521] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.531130][ T294] usb 5-1: config 0 has no interface number 0 [ 59.531157][ T294] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.547555][ T3514] F2FS-fs (loop3): invalid crc value [ 59.552080][ T294] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.566731][ T3521] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1332: bg 0: block 112: padding at end of block bitmap is not set [ 59.576804][ T294] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 59.588254][ T3521] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 59.602510][ T3514] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.609962][ T3521] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.609962][ T3521] [ 59.624449][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.625669][ T3521] EXT4-fs (loop0): Total free blocks count 0 [ 59.639675][ T3521] EXT4-fs (loop0): Free/Dirty block details [ 59.645639][ T3521] EXT4-fs (loop0): free_blocks=0 [ 59.650577][ T3521] EXT4-fs (loop0): dirty_blocks=16 [ 59.655879][ T3521] EXT4-fs (loop0): Block reservation details [ 59.659315][ T294] usb 5-1: config 0 descriptor?? [ 59.666913][ T3521] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.723564][ T3514] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.729993][ T28] audit: type=1400 audit(1791479590.414:411): avc: denied { append } for pid=3541 comm="syz.0.1339" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.745721][ T3514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.051209][ T3570] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 60.058434][ T3570] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 60.066871][ T3570] F2FS-fs (loop3): fault_injection options not supported [ 60.074148][ T3570] F2FS-fs (loop3): fault_type options not supported [ 60.081229][ T3570] F2FS-fs (loop3): invalid crc value [ 60.087789][ T3570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.092140][ T296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.121730][ T3570] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 60.128828][ T606] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.136333][ T3570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.164697][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.171919][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.179352][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.186714][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.194074][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.201283][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.208739][ T294] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 60.216815][ T294] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 60.228557][ T294] hid_prodikeys: hid-prodikeys: failed to find output report [ 60.228557][ T294] [ 60.282092][ T296] usb 1-1: Using ep0 maxpacket: 16 [ 60.332074][ T606] usb 3-1: Using ep0 maxpacket: 8 [ 60.346096][ T606] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.367539][ T606] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 60.402126][ T606] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.410670][ T606] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 60.420100][ T606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.432388][ T294] usb 5-1: USB disconnect, device number 5 [ 60.440121][ T606] usb 3-1: config 0 descriptor?? [ 60.467214][ T296] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.477411][ T296] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 60.485178][ T296] usb 1-1: can't read configurations, error -71 [ 60.811044][ T28] audit: type=1400 audit(1791479591.494:412): avc: denied { execute } for pid=3584 comm="syz.1.1356" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.832177][ T28] audit: type=1400 audit(1791479591.494:413): avc: denied { execute_no_trans } for pid=3584 comm="syz.1.1356" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.866841][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.874307][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.874645][ T3593] xt_hashlimit: max too large, truncated to 1048576 [ 60.881430][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.881454][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.902365][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.909494][ T606] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 60.932121][ T606] petalynx 0003:18B1:0037.000A: unbalanced collection at end of report description [ 60.941599][ T606] petalynx 0003:18B1:0037.000A: parse failed [ 60.957667][ T606] petalynx: probe of 0003:18B1:0037.000A failed with error -22 [ 60.983755][ T3605] device batadv_slave_1 entered promiscuous mode [ 60.990857][ T3603] device batadv_slave_1 left promiscuous mode [ 61.054750][ T28] audit: type=1400 audit(1791479847.745:414): avc: denied { getopt } for pid=3614 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.118334][ T19] usb 3-1: USB disconnect, device number 5 [ 61.139074][ T28] audit: type=1400 audit(1791479847.825:415): avc: denied { rename } for pid=3629 comm="syz.4.1378" name="file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.180324][ T3627] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 127754: comm syz.1.1377: invalid block [ 61.197517][ T28] audit: type=1400 audit(1791479847.825:416): avc: denied { write } for pid=3629 comm="syz.4.1378" name="file0" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.220055][ T3627] EXT4-fs (loop1): get root inode failed [ 61.226460][ T3627] EXT4-fs (loop1): mount failed [ 61.558443][ T3674] SELinux: failed to load policy [ 61.620291][ T3692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 61.732086][ T294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.787277][ T3731] erofs: (device loop0): mounted with root inode @ nid 36. [ 61.913045][ T294] usb 2-1: Using ep0 maxpacket: 16 [ 61.923489][ T294] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.941490][ T294] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.957657][ T606] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.972815][ T294] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 61.973893][ T3758] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.986118][ T294] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.001071][ T294] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 62.010383][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.019341][ T294] usb 2-1: config 0 descriptor?? [ 62.045249][ T3758] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.058502][ T3758] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.1436: Invalid inode table block 0 in block_group 0 [ 62.082158][ T3758] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 62.092689][ T3758] EXT4-fs error (device loop0): ext4_quota_write:7240: inode #3: comm syz.0.1436: mark_inode_dirty error [ 62.104160][ T3758] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.1436: Failed to acquire dquot type 0 [ 62.115698][ T3758] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.1436: Invalid inode table block 0 in block_group 0 [ 62.128582][ T3758] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 62.139342][ T3758] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.1436: mark_inode_dirty error [ 62.151092][ T3758] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.1436: Invalid inode table block 0 in block_group 0 [ 62.166865][ T3758] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 62.172140][ T606] usb 5-1: Using ep0 maxpacket: 16 [ 62.177174][ T3758] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 62.189433][ T606] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.190243][ T3758] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.1436: Invalid inode table block 0 in block_group 0 [ 62.205585][ T606] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 62.210386][ T3758] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 62.225750][ T606] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 62.233226][ T3758] EXT4-fs error (device loop0): ext4_truncate:4327: inode #15: comm syz.0.1436: mark_inode_dirty error [ 62.243712][ T606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.251608][ T3758] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 62.259395][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.274747][ T3758] EXT4-fs (loop0): 1 truncate cleaned up [ 62.275303][ T606] usb 5-1: Product: syz [ 62.280943][ T3669] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.304110][ T606] usb 5-1: Manufacturer: syz [ 62.309045][ T3758] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (60729!=0) [ 62.312283][ T606] usb 5-1: SerialNumber: syz [ 62.426799][ T3795] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 62.439390][ T3795] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1452: Block bitmap for bg 0 marked uninitialized [ 62.487732][ T3800] EXT4-fs: Ignoring removed nobh option [ 62.495596][ T3800] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 62.504198][ T3800] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1454: attempt to clear invalid blocks 1 len 1 [ 62.517283][ T3800] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 62.520164][ T294] hid (null): invalid report_size 52610 [ 62.532342][ T3800] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1454: invalid indirect mapped block 1819239214 (level 0) [ 62.543526][ T606] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 62.551358][ T3800] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1454: invalid indirect mapped block 1819239214 (level 1) [ 62.560847][ T294] hid (null): usage index exceeded [ 62.574709][ T3800] EXT4-fs (loop0): 1 truncate cleaned up [ 62.578361][ T606] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 62.592115][ T294] hid (null): invalid report_size 1569159618 [ 62.598757][ T294] hid (null): invalid report_size 19270 [ 62.607309][ T294] hid (null): report_id 3950234555 is invalid [ 62.613429][ T294] hid (null): invalid report_count -370188653 [ 62.619527][ T294] hid (null): global environment stack underflow [ 62.625908][ T294] hid (null): unknown global tag 0xe [ 62.631222][ T294] hid (null): global environment stack underflow [ 62.728937][ T296] usb 2-1: USB disconnect, device number 3 [ 62.783109][ T3817] EXT4-fs: Ignoring removed i_version option [ 62.794743][ T3817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.803592][ T3817] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.814400][ T3817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.821166][ T3817] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.836069][ T3817] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 62.844821][ T3817] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.859772][ T3817] EXT4-fs (loop0): 1 truncate cleaned up [ 62.960551][ T606] usb 5-1: 2:1 : can't get Cluster Descriptor [ 62.990276][ T3847] set_capacity_and_notify: 15 callbacks suppressed [ 62.990286][ T3847] loop0: detected capacity change from 0 to 128 [ 63.071383][ T3863] loop0: detected capacity change from 0 to 512 [ 63.186564][ T606] usb 5-1: USB disconnect, device number 6 [ 63.577694][ T288] EXT4-fs unmount: 37 callbacks suppressed [ 63.577711][ T288] EXT4-fs (loop1): unmounting filesystem. [ 63.630838][ T3882] loop1: detected capacity change from 0 to 256 [ 63.656754][ T3882] FAT-fs (loop1): Directory bread(block 64) failed [ 63.672301][ T3882] FAT-fs (loop1): Directory bread(block 65) failed [ 63.682181][ T3882] FAT-fs (loop1): Directory bread(block 66) failed [ 63.685178][ T3894] xt_hashlimit: size too large, truncated to 1048576 [ 63.688885][ T3882] FAT-fs (loop1): Directory bread(block 67) failed [ 63.703137][ T3882] FAT-fs (loop1): Directory bread(block 68) failed [ 63.709725][ T3882] FAT-fs (loop1): Directory bread(block 69) failed [ 63.720813][ T3882] FAT-fs (loop1): Directory bread(block 70) failed [ 63.727710][ T3882] FAT-fs (loop1): Directory bread(block 71) failed [ 63.735617][ T3882] FAT-fs (loop1): Directory bread(block 72) failed [ 63.743211][ T3882] FAT-fs (loop1): Directory bread(block 73) failed [ 63.825608][ T3905] loop1: detected capacity change from 0 to 256 [ 63.864299][ T3905] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 63.891267][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 63.891280][ T28] audit: type=1400 audit(1791479850.575:427): avc: denied { write } for pid=3910 comm="syz.0.1505" name="usb_gadget" dev="configfs" ino=13205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.923367][ T28] audit: type=1400 audit(1791479850.585:428): avc: denied { add_name } for pid=3910 comm="syz.0.1505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.955866][ T3916] loop1: detected capacity change from 0 to 1024 [ 63.978444][ T3921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1511'. [ 63.983421][ T28] audit: type=1400 audit(1791479850.585:429): avc: denied { create } for pid=3910 comm="syz.0.1505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 64.007191][ T3916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.018939][ T3927] loop4: detected capacity change from 0 to 256 [ 64.019612][ T28] audit: type=1400 audit(1791479850.615:430): avc: denied { remove_name } for pid=3910 comm="syz.0.1505" name="g1" dev="configfs" ino=29616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.048824][ T28] audit: type=1400 audit(1791479850.615:431): avc: denied { rmdir } for pid=3910 comm="syz.0.1505" name="g1" dev="configfs" ino=29616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.052535][ T3916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.101804][ T3927] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 64.144537][ T288] EXT4-fs (loop1): unmounting filesystem. [ 64.160750][ T3948] loop2: detected capacity change from 0 to 512 [ 64.176566][ T3949] p¿ [ 64.177269][ T3948] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 64.263416][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 64.403661][ T3990] tap0: tun_chr_ioctl cmd 1074025677 [ 64.411955][ T3990] tap0: linktype set to 6 [ 64.505260][ T4007] tap0: tun_chr_ioctl cmd 1074025692 [ 64.604518][ T4006] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 64.655277][ T4036] loop2: detected capacity change from 0 to 256 [ 64.671736][ T4038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 64.681956][ T4036] exfat: Deprecated parameter 'utf8' [ 64.696703][ T4036] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 64.758134][ T28] audit: type=1400 audit(1791479851.445:432): avc: denied { read write } for pid=4055 comm="syz.4.1573" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.782973][ T28] audit: type=1400 audit(1791479851.445:433): avc: denied { open } for pid=4055 comm="syz.4.1573" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.789297][ T4062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1576'. [ 64.807520][ T28] audit: type=1400 audit(1791479851.445:434): avc: denied { ioctl } for pid=4055 comm="syz.4.1573" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.864715][ T4068] loop0: detected capacity change from 0 to 4096 [ 64.889093][ T4068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.907776][ T4068] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.941153][ T4068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.969706][ T286] EXT4-fs (loop0): unmounting filesystem. [ 65.032579][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.044519][ T28] audit: type=1400 audit(1791479851.735:435): avc: denied { append } for pid=4093 comm="syz.0.1589" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.222094][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 65.228243][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.239124][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.248891][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.257933][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.265951][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.276972][ T19] usb 5-1: config 0 descriptor?? [ 65.282937][ T19] hub 5-1:0.0: USB hub found [ 65.463090][ T6] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.474050][ T6] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.488348][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.495059][ T19] hub 5-1:0.0: 1 port detected [ 65.499858][ T6] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 65.508972][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.517775][ T6] usb 4-1: config 0 descriptor?? [ 65.604775][ T4100] loop1: detected capacity change from 0 to 512 [ 65.615025][ T4100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 65.623113][ T4100] System zones: 1-12 [ 65.627474][ T4100] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1591: missing EA_INODE flag [ 65.639250][ T4100] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1591: error while reading EA inode 12 err=-117 [ 65.651817][ T4100] EXT4-fs (loop1): 1 orphan inode deleted [ 65.657736][ T4100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.672732][ T28] audit: type=1400 audit(1791479852.365:436): avc: denied { mounton } for pid=4099 comm="syz.1.1591" path="/327/file0/file0" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 65.717989][ T288] EXT4-fs (loop1): unmounting filesystem. [ 65.816989][ T4105] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 65.823738][ T4105] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.832645][ T4105] F2FS-fs (loop1): invalid crc value [ 65.839505][ T4105] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.863032][ T4105] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.870077][ T4105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.890085][ T4111] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 65.901453][ T19] usb 5-1: USB disconnect, device number 7 [ 65.912695][ T288] syz-executor: attempt to access beyond end of device [ 65.912695][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.928982][ T6] thrustmaster 0003:044F:B65A.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65a] on usb-dummy_hcd.3-1/input0 [ 65.942840][ T6] thrustmaster 0003:044F:B65A.000C: no inputs found [ 66.096273][ T4115] F2FS-fs (loop0): invalid crc value [ 66.108435][ T4115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.129815][ T6] usb 4-1: USB disconnect, device number 4 [ 66.177258][ T4115] F2FS-fs (loop0): Start checkpoint disabled! [ 66.192963][ T4115] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 66.206585][ T4115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 66.264415][ T318] kworker/u4:3: attempt to access beyond end of device [ 66.264415][ T318] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 66.347670][ T4130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.376929][ T4132] xt_hashlimit: size too large, truncated to 1048576 [ 66.418669][ T4142] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.432566][ T4142] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 66.449384][ T4142] syz.0.1606: attempt to access beyond end of device [ 66.449384][ T4142] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 66.471636][ T4142] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 66.480374][ T4142] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 66.650933][ T4173] tap0: tun_chr_ioctl cmd 1074025692 [ 66.656522][ T4177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1624'. [ 66.693840][ T4179] EXT4-fs: Ignoring removed nobh option [ 66.712914][ T4179] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 66.752610][ T4179] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1625: attempt to clear invalid blocks 1 len 1 [ 66.785817][ T4185] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.814828][ T4179] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 66.829681][ T4179] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1625: invalid indirect mapped block 1819239214 (level 0) [ 66.830318][ T4185] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1628: inode has both inline data and extents flags [ 66.857756][ T4179] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1625: invalid indirect mapped block 1819239214 (level 1) [ 66.889025][ T4179] EXT4-fs (loop1): 1 truncate cleaned up [ 66.894888][ T4179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.930640][ T4185] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1628: couldn't read orphan inode 15 (err -117) [ 66.941079][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.949767][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.950392][ T288] EXT4-fs (loop1): unmounting filesystem. [ 66.957214][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.969157][ T4185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.007357][ T4198] FAT-fs (loop0): Directory bread(block 64) failed [ 67.015575][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.025926][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.030828][ T4198] FAT-fs (loop0): Directory bread(block 65) failed [ 67.033690][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.039586][ T4198] FAT-fs (loop0): Directory bread(block 66) failed [ 67.064051][ T4208] ------------[ cut here ]------------ [ 67.069519][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 67.079780][ T4208] Modules linked in: [ 67.083673][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Not tainted syzkaller #0 [ 67.091051][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.092148][ T4198] FAT-fs (loop0): Directory bread(block 67) failed [ 67.101113][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 67.101143][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 67.101160][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 67.101176][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 67.122156][ T4198] FAT-fs (loop0): Directory bread(block 68) failed [ 67.133021][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 67.133043][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 67.133056][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 67.133070][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 67.148714][ T4198] FAT-fs (loop0): Directory bread(block 69) failed [ 67.153548][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 67.153567][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.153580][ T4208] CR2: 0000001b2ec21ff8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 67.165680][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.169480][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.177449][ T4189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.185376][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.185400][ T4208] Call Trace: [ 67.185406][ T4208] [ 67.191939][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.200779][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 67.207364][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.215298][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.222950][ T4198] FAT-fs (loop0): Directory bread(block 70) failed [ 67.230252][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 67.237607][ T4198] FAT-fs (loop0): Directory bread(block 71) failed [ 67.245373][ T4208] rb_buffer_peek+0x5f/0x930 [ 67.245395][ T4208] ring_buffer_peek+0x184/0x3b0 [ 67.248873][ T4198] FAT-fs (loop0): Directory bread(block 72) failed [ 67.251573][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 67.258734][ T4198] FAT-fs (loop0): Directory bread(block 73) failed [ 67.264190][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.264211][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 67.296990][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.298651][ T4208] ? _find_next_bit+0x8a/0x130 [ 67.343354][ T4208] __find_next_entry+0x33c/0x6c0 [ 67.348276][ T4208] ? trace_find_next_entry+0x380/0x380 [ 67.353717][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 67.359326][ T4208] ? print_trace_line+0x393/0x6b0 [ 67.364329][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 67.369246][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 67.374679][ T4208] vfs_read+0x286/0x930 [ 67.378810][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 67.383460][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.388547][ T4208] ? mutex_lock+0x93/0x1b0 [ 67.392940][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 67.397772][ T4208] ? __fdget_pos+0x2cd/0x380 [ 67.402339][ T4208] ? ksys_read+0x70/0x260 [ 67.406644][ T4208] ksys_read+0x14a/0x260 [ 67.410861][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 67.415597][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 67.421207][ T4208] __x64_sys_read+0x7b/0x90 [ 67.425687][ T4208] x64_sys_call+0x2f/0x9a0 [ 67.430079][ T4208] do_syscall_64+0x4c/0xa0 [ 67.434470][ T4208] ? clear_bhb_loop+0x30/0x80 [ 67.439124][ T4208] ? clear_bhb_loop+0x30/0x80 [ 67.443776][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.449646][ T4208] RIP: 0033:0x7f966739e1d9 [ 67.454047][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.473628][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.482028][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 67.490001][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 67.497965][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 67.505914][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.513860][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 67.521809][ T4208] [ 67.524808][ T4208] ---[ end trace 0000000000000000 ]--- [ 67.530252][ T4208] ================================================================== [ 67.538321][ T4208] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 67.545494][ T4208] Read of size 4 at addr ffff8881393b606d by task syz.1.1637/4208 [ 67.553271][ T4208] [ 67.555573][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G W syzkaller #0 [ 67.564390][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.574420][ T4208] Call Trace: [ 67.577680][ T4208] [ 67.580591][ T4208] __dump_stack+0x21/0x24 [ 67.584906][ T4208] dump_stack_lvl+0x110/0x170 [ 67.589565][ T4208] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.594570][ T4208] ? rb_get_reader_page+0x9f6/0xc60 [ 67.599761][ T4208] ? rb_buffer_peek+0x88d/0x930 [ 67.604587][ T4208] print_address_description+0x71/0x200 [ 67.610113][ T4208] print_report+0x4a/0x60 [ 67.614425][ T4208] kasan_report+0x122/0x150 [ 67.618912][ T4208] ? rb_buffer_peek+0x88d/0x930 [ 67.623739][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.628833][ T4208] __asan_report_load4_noabort+0x14/0x20 [ 67.634443][ T4208] rb_buffer_peek+0x88d/0x930 [ 67.639097][ T4208] ring_buffer_peek+0x184/0x3b0 [ 67.643926][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 67.649273][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.654363][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 67.659038][ T4208] ? _find_next_bit+0x8a/0x130 [ 67.663782][ T4208] __find_next_entry+0x33c/0x6c0 [ 67.668704][ T4208] ? trace_find_next_entry+0x380/0x380 [ 67.674143][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 67.679752][ T4208] ? print_trace_line+0x393/0x6b0 [ 67.684753][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 67.689680][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 67.695115][ T4208] vfs_read+0x286/0x930 [ 67.699252][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 67.703906][ T4208] ? __kasan_check_write+0x14/0x20 [ 67.708998][ T4208] ? mutex_lock+0x93/0x1b0 [ 67.713392][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 67.718220][ T4208] ? __fdget_pos+0x2cd/0x380 [ 67.722789][ T4208] ? ksys_read+0x70/0x260 [ 67.727107][ T4208] ksys_read+0x14a/0x260 [ 67.731328][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 67.736069][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 67.741680][ T4208] __x64_sys_read+0x7b/0x90 [ 67.746159][ T4208] x64_sys_call+0x2f/0x9a0 [ 67.750556][ T4208] do_syscall_64+0x4c/0xa0 [ 67.754953][ T4208] ? clear_bhb_loop+0x30/0x80 [ 67.759612][ T4208] ? clear_bhb_loop+0x30/0x80 [ 67.764266][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.770135][ T4208] RIP: 0033:0x7f966739e1d9 [ 67.774544][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.794128][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.802520][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 67.810473][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 67.818426][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 67.826397][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.834346][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 67.842300][ T4208] [ 67.845296][ T4208] [ 67.847598][ T4208] The buggy address belongs to the physical page: [ 67.853987][ T4208] page:ffffea0004e4ed80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1393b6 [ 67.864202][ T4208] flags: 0x4000000000000000(zone=1) [ 67.869393][ T4208] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 67.877951][ T4208] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 67.886507][ T4208] page dumped because: kasan: bad access detected [ 67.892892][ T4208] page_owner tracks the page as freed [ 67.898233][ T4208] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 2841, tgid 2840 (syz.0.1040), ts 53623145033, free_ts 53745132912 [ 67.915739][ T4208] post_alloc_hook+0x1f5/0x210 [ 67.920502][ T4208] prep_new_page+0x1c/0x110 [ 67.924997][ T4208] get_page_from_freelist+0x2ca9/0x2d20 [ 67.930536][ T4208] __alloc_pages+0x1fa/0x610 [ 67.935106][ T4208] __folio_alloc+0x12/0x40 [ 67.939502][ T4208] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 67.945197][ T4208] shmem_get_folio_gfp+0xd6d/0x20f0 [ 67.950373][ T4208] shmem_write_begin+0xea/0x2c0 [ 67.955203][ T4208] generic_perform_write+0x32d/0x740 [ 67.960466][ T4208] __generic_file_write_iter+0x17a/0x230 [ 67.966077][ T4208] generic_file_write_iter+0xae/0x310 [ 67.971426][ T4208] vfs_write+0x5ef/0xd00 [ 67.975645][ T4208] ksys_write+0x14a/0x260 [ 67.979949][ T4208] __x64_sys_write+0x7b/0x90 [ 67.984520][ T4208] x64_sys_call+0x27b/0x9a0 [ 67.989001][ T4208] do_syscall_64+0x4c/0xa0 [ 67.993398][ T4208] page last free stack trace: [ 67.998067][ T4208] free_unref_page_prepare+0x81b/0x820 [ 68.003535][ T4208] free_unref_page_list+0x117/0x8d0 [ 68.008722][ T4208] release_pages+0xc7e/0xce0 [ 68.013292][ T4208] __pagevec_release+0x71/0xe0 [ 68.018045][ T4208] shmem_undo_range+0x564/0x14e0 [ 68.022960][ T4208] shmem_evict_inode+0x21f/0x9c0 [ 68.027880][ T4208] evict+0x4c4/0x8c0 [ 68.031755][ T4208] iput+0x633/0x690 [ 68.035539][ T4208] dentry_unlink_inode+0x346/0x3f0 [ 68.040642][ T4208] __dentry_kill+0x46c/0x680 [ 68.045220][ T4208] dentry_kill+0xc0/0x2a0 [ 68.049564][ T4208] dput+0x42/0x80 [ 68.053175][ T4208] __fput+0x5c0/0x8f0 [ 68.057133][ T4208] ____fput+0x15/0x20 [ 68.061100][ T4208] task_work_run+0x1e1/0x250 [ 68.065669][ T4208] exit_to_user_mode_loop+0x9b/0xb0 [ 68.070845][ T4208] [ 68.073144][ T4208] Memory state around the buggy address: [ 68.078750][ T4208] ffff8881393b5f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.086786][ T4208] ffff8881393b5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.094821][ T4208] >ffff8881393b6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.102857][ T4208] ^ [ 68.110285][ T4208] ffff8881393b6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.118322][ T4208] ffff8881393b6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.126381][ T4208] ================================================================== [ 68.134434][ T4208] Disabling lock debugging due to kernel taint [ 68.142659][ T4208] ------------[ cut here ]------------ [ 68.142853][ T289] EXT4-fs (loop3): unmounting filesystem. [ 68.148137][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 68.164055][ T4208] Modules linked in: [ 68.167946][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 68.176786][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.186823][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 68.192631][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 68.212220][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 68.218268][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 68.226224][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 68.234179][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 68.242132][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 68.250086][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 68.258040][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.266956][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.273523][ T4208] CR2: 00007f96673eb8c0 CR3: 000000010b861000 CR4: 00000000003506a0 [ 68.281478][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.289430][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.297382][ T4208] Call Trace: [ 68.300642][ T4208] [ 68.303557][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 68.309178][ T4208] ? __kasan_check_write+0x14/0x20 [ 68.314272][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 68.318940][ T4208] rb_buffer_peek+0x5f/0x930 [ 68.323520][ T4208] ring_buffer_consume+0x1aa/0x370 [ 68.328613][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 68.334229][ T4208] ? print_trace_line+0x393/0x6b0 [ 68.339233][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 68.344157][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 68.349601][ T4208] vfs_read+0x286/0x930 [ 68.353740][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 68.358397][ T4208] ? __kasan_check_write+0x14/0x20 [ 68.363492][ T4208] ? mutex_lock+0x93/0x1b0 [ 68.367890][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 68.372724][ T4208] ? __fdget_pos+0x2cd/0x380 [ 68.377298][ T4208] ? ksys_read+0x70/0x260 [ 68.381610][ T4208] ksys_read+0x14a/0x260 [ 68.385835][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 68.390580][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 68.396200][ T4208] __x64_sys_read+0x7b/0x90 [ 68.400686][ T4208] x64_sys_call+0x2f/0x9a0 [ 68.405087][ T4208] do_syscall_64+0x4c/0xa0 [ 68.409491][ T4208] ? clear_bhb_loop+0x30/0x80 [ 68.414155][ T4208] ? clear_bhb_loop+0x30/0x80 [ 68.418815][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.424693][ T4208] RIP: 0033:0x7f966739e1d9 [ 68.429090][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.448676][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.457069][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 68.465027][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 68.472979][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 68.480930][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.488885][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 68.496844][ T4208] [ 68.499845][ T4208] ---[ end trace 0000000000000000 ]--- [ 68.505318][ T4208] ------------[ cut here ]------------ [ 68.510754][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 68.520975][ T4208] Modules linked in: [ 68.524850][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 68.533678][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.543712][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 68.549502][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 68.569086][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 68.575132][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 68.583083][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 68.591036][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 68.598987][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 68.606942][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 68.614898][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.623812][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.630377][ T4208] CR2: 00007f96673eb8c0 CR3: 000000010b861000 CR4: 00000000003506a0 [ 68.638333][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.646286][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.654238][ T4208] Call Trace: [ 68.657499][ T4208] [ 68.660416][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 68.666036][ T4208] rb_advance_reader+0x2b/0x770 [ 68.670868][ T4208] ring_buffer_consume+0x1e7/0x370 [ 68.675963][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 68.681575][ T4208] ? print_trace_line+0x393/0x6b0 [ 68.686581][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 68.691518][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 68.696965][ T4208] vfs_read+0x286/0x930 [ 68.701103][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 68.705759][ T4208] ? __kasan_check_write+0x14/0x20 [ 68.710855][ T4208] ? mutex_lock+0x93/0x1b0 [ 68.715256][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 68.720088][ T4208] ? __fdget_pos+0x2cd/0x380 [ 68.724663][ T4208] ? ksys_read+0x70/0x260 [ 68.728973][ T4208] ksys_read+0x14a/0x260 [ 68.733208][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 68.737955][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 68.743573][ T4208] __x64_sys_read+0x7b/0x90 [ 68.748057][ T4208] x64_sys_call+0x2f/0x9a0 [ 68.752459][ T4208] do_syscall_64+0x4c/0xa0 [ 68.756863][ T4208] ? clear_bhb_loop+0x30/0x80 [ 68.761523][ T4208] ? clear_bhb_loop+0x30/0x80 [ 68.766183][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.772060][ T4208] RIP: 0033:0x7f966739e1d9 [ 68.776458][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.796043][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.804437][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 68.812392][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 68.820348][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 68.828300][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.836251][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 68.844206][ T4208] [ 68.847205][ T4208] ---[ end trace 0000000000000000 ]--- [ 68.852982][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.870327][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.906064][ T4210] set_capacity_and_notify: 7 callbacks suppressed [ 68.906079][ T4210] loop3: detected capacity change from 0 to 256 [ 68.921369][ T4210] exfat: Deprecated parameter 'utf8' [ 68.930731][ T4210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 68.931031][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.955040][ T4208] ------------[ cut here ]------------ [ 68.958547][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.960502][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 68.967531][ T726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.977705][ T4208] Modules linked in: [ 68.977716][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 68.986312][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.988762][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.997798][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.005528][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 69.005554][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 69.015595][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.022570][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 69.022588][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 69.038149][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.047939][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 69.047954][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 69.056062][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.061198][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 69.080325][ T4189] device veth0_vlan entered promiscuous mode [ 69.084791][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 69.084807][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 69.093398][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.100450][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.110160][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.114352][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 69.114371][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.114383][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.122763][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.131233][ T4208] Call Trace: [ 69.131240][ T4208] [ 69.139684][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.145829][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 69.160374][ T4189] device veth1_macvtap entered promiscuous mode [ 69.161841][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 69.170466][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.177738][ T4208] ? __schedule+0xcbb/0x1700 [ 69.185778][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.188624][ T4208] ? __kasan_check_write+0x14/0x20 [ 69.191754][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.199137][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 69.199163][ T4208] rb_buffer_peek+0x5f/0x930 [ 69.257564][ T4208] ring_buffer_peek+0x184/0x3b0 [ 69.262399][ T4208] ? __kasan_check_read+0x11/0x20 [ 69.267409][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 69.272766][ T4208] ? _find_next_bit+0x8a/0x130 [ 69.277517][ T4208] __find_next_entry+0x33c/0x6c0 [ 69.282448][ T4208] ? trace_find_next_entry+0x380/0x380 [ 69.287893][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 69.293506][ T4208] ? print_trace_line+0x393/0x6b0 [ 69.298515][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 69.303446][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 69.308891][ T4208] vfs_read+0x286/0x930 [ 69.313041][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 69.317697][ T4208] ? __kasan_check_write+0x14/0x20 [ 69.322789][ T4208] ? mutex_lock+0x93/0x1b0 [ 69.327187][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 69.332022][ T4208] ? __fdget_pos+0x2cd/0x380 [ 69.336599][ T4208] ? ksys_read+0x70/0x260 [ 69.340908][ T4208] ksys_read+0x14a/0x260 [ 69.345131][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 69.349878][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 69.355497][ T4208] __x64_sys_read+0x7b/0x90 [ 69.359982][ T4208] x64_sys_call+0x2f/0x9a0 [ 69.364387][ T4208] do_syscall_64+0x4c/0xa0 [ 69.368790][ T4208] ? clear_bhb_loop+0x30/0x80 [ 69.373452][ T4208] ? clear_bhb_loop+0x30/0x80 [ 69.378120][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.383998][ T4208] RIP: 0033:0x7f966739e1d9 [ 69.388398][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.407985][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.416385][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 69.424340][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 69.432297][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 69.440249][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.448204][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 69.456162][ T4208] [ 69.459166][ T4208] ---[ end trace 0000000000000000 ]--- [ 69.467236][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.475512][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.479981][ T4208] ------------[ cut here ]------------ [ 69.488323][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 69.498570][ T4208] Modules linked in: [ 69.502441][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 69.511264][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.521296][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 69.527082][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 69.546666][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 69.552725][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 69.560674][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 69.568625][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 69.576576][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 69.584526][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 69.592478][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 69.601401][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.607974][ T4208] CR2: 00007f06213f12f8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 69.615938][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.623893][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.631843][ T4208] Call Trace: [ 69.635119][ T4208] [ 69.638040][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 69.643653][ T4208] ? __kasan_check_write+0x14/0x20 [ 69.648745][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 69.653405][ T4208] rb_buffer_peek+0x5f/0x930 [ 69.657978][ T4208] ring_buffer_consume+0x1aa/0x370 [ 69.663070][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 69.668697][ T4208] ? print_trace_line+0x393/0x6b0 [ 69.673699][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 69.678628][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 69.684070][ T4208] vfs_read+0x286/0x930 [ 69.688204][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 69.692859][ T4208] ? __kasan_check_write+0x14/0x20 [ 69.697953][ T4208] ? mutex_lock+0x93/0x1b0 [ 69.702348][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 69.707179][ T4208] ? __fdget_pos+0x2cd/0x380 [ 69.711748][ T4208] ? ksys_read+0x70/0x260 [ 69.716053][ T4208] ksys_read+0x14a/0x260 [ 69.720299][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 69.725066][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 69.730721][ T4208] __x64_sys_read+0x7b/0x90 [ 69.735200][ T4208] x64_sys_call+0x2f/0x9a0 [ 69.739596][ T4208] do_syscall_64+0x4c/0xa0 [ 69.743996][ T4208] ? clear_bhb_loop+0x30/0x80 [ 69.748650][ T4208] ? clear_bhb_loop+0x30/0x80 [ 69.753306][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.759185][ T4208] RIP: 0033:0x7f966739e1d9 [ 69.763577][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.783180][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.791569][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 69.799525][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 69.807482][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 69.815438][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.823388][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 69.831350][ T4208] [ 69.834352][ T4208] ---[ end trace 0000000000000000 ]--- [ 69.839812][ T4208] ------------[ cut here ]------------ [ 69.845242][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 69.855461][ T4208] Modules linked in: [ 69.859331][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 69.868152][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.878183][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 69.883968][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 69.903553][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 69.909599][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 69.917567][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 69.925516][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 69.933467][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 69.941416][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 69.949365][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 69.958274][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.964841][ T4208] CR2: 00007f06213f12f8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 69.972794][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.980744][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.988693][ T4208] Call Trace: [ 69.991956][ T4208] [ 69.994869][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 70.000484][ T4208] rb_advance_reader+0x2b/0x770 [ 70.005315][ T4208] ring_buffer_consume+0x1e7/0x370 [ 70.010422][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 70.016048][ T4208] ? print_trace_line+0x393/0x6b0 [ 70.021051][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 70.025969][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 70.031413][ T4208] vfs_read+0x286/0x930 [ 70.035552][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 70.040209][ T4208] ? __kasan_check_write+0x14/0x20 [ 70.045316][ T4208] ? mutex_lock+0x93/0x1b0 [ 70.049712][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 70.054541][ T4208] ? __fdget_pos+0x2cd/0x380 [ 70.059109][ T4208] ? ksys_read+0x70/0x260 [ 70.063417][ T4208] ksys_read+0x14a/0x260 [ 70.067637][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 70.072380][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 70.077992][ T4208] __x64_sys_read+0x7b/0x90 [ 70.082473][ T4208] x64_sys_call+0x2f/0x9a0 [ 70.086868][ T4208] do_syscall_64+0x4c/0xa0 [ 70.091265][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.095926][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.100580][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.106450][ T4208] RIP: 0033:0x7f966739e1d9 [ 70.110842][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.130443][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.138845][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 70.146793][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 70.154746][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 70.162695][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.170646][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 70.178614][ T4208] [ 70.181612][ T4208] ---[ end trace 0000000000000000 ]--- [ 70.194404][ T4208] ------------[ cut here ]------------ [ 70.199866][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 70.210086][ T4208] Modules linked in: [ 70.213955][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 70.222778][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.232808][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 70.238594][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 70.258178][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 70.264221][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 70.272170][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 70.280118][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 70.288067][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 70.296018][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 70.303972][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 70.312881][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.319438][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 70.327390][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.335352][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.343300][ T4208] Call Trace: [ 70.346561][ T4208] [ 70.349469][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 70.354994][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 70.360605][ T4208] ? __schedule+0xcbb/0x1700 [ 70.365173][ T4208] ? __kasan_check_write+0x14/0x20 [ 70.370258][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 70.374915][ T4208] rb_buffer_peek+0x5f/0x930 [ 70.379498][ T4208] ring_buffer_peek+0x184/0x3b0 [ 70.384322][ T4208] ? __kasan_check_read+0x11/0x20 [ 70.389322][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 70.394670][ T4208] ? _find_next_bit+0x8a/0x130 [ 70.399415][ T4208] __find_next_entry+0x33c/0x6c0 [ 70.404334][ T4208] ? trace_find_next_entry+0x380/0x380 [ 70.409772][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 70.415397][ T4208] ? print_trace_line+0x393/0x6b0 [ 70.420395][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 70.425327][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 70.430761][ T4208] vfs_read+0x286/0x930 [ 70.434892][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 70.439540][ T4208] ? __kasan_check_write+0x14/0x20 [ 70.444626][ T4208] ? mutex_lock+0x93/0x1b0 [ 70.449018][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 70.453845][ T4208] ? __fdget_pos+0x2cd/0x380 [ 70.458410][ T4208] ? ksys_read+0x70/0x260 [ 70.462715][ T4208] ksys_read+0x14a/0x260 [ 70.466939][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 70.471677][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 70.477283][ T4208] __x64_sys_read+0x7b/0x90 [ 70.481764][ T4208] x64_sys_call+0x2f/0x9a0 [ 70.486159][ T4208] do_syscall_64+0x4c/0xa0 [ 70.490554][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.495206][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.499865][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.505730][ T4208] RIP: 0033:0x7f966739e1d9 [ 70.510121][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.529703][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.538090][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 70.546040][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 70.553991][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 70.561939][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.569883][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 70.577834][ T4208] [ 70.580830][ T4208] ---[ end trace 0000000000000000 ]--- [ 70.587582][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.589173][ T4208] ------------[ cut here ]------------ [ 70.595940][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.601002][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 70.609384][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.619249][ T4208] Modules linked in: [ 70.619260][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 70.627621][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.631091][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.657994][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 70.663783][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 70.683372][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 70.689413][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 70.697361][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 70.705320][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 70.713283][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 70.721242][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 70.729195][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.738107][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.744672][ T4208] CR2: 00005555681f74e8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 70.752627][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.760580][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.768537][ T4208] Call Trace: [ 70.771799][ T4208] [ 70.774720][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 70.780345][ T4208] ? __kasan_check_write+0x14/0x20 [ 70.785438][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 70.790103][ T4208] rb_buffer_peek+0x5f/0x930 [ 70.794676][ T4208] ring_buffer_consume+0x1aa/0x370 [ 70.799772][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 70.805389][ T4208] ? print_trace_line+0x393/0x6b0 [ 70.810395][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 70.815322][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 70.820767][ T4208] vfs_read+0x286/0x930 [ 70.824908][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 70.829565][ T4208] ? __kasan_check_write+0x14/0x20 [ 70.834656][ T4208] ? mutex_lock+0x93/0x1b0 [ 70.839055][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 70.843891][ T4208] ? __fdget_pos+0x2cd/0x380 [ 70.848463][ T4208] ? ksys_read+0x70/0x260 [ 70.852779][ T4208] ksys_read+0x14a/0x260 [ 70.857003][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 70.861747][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 70.867368][ T4208] __x64_sys_read+0x7b/0x90 [ 70.871854][ T4208] x64_sys_call+0x2f/0x9a0 [ 70.876262][ T4208] do_syscall_64+0x4c/0xa0 [ 70.880668][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.885332][ T4208] ? clear_bhb_loop+0x30/0x80 [ 70.889992][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.895868][ T4208] RIP: 0033:0x7f966739e1d9 [ 70.900264][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.919856][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.928252][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 70.936213][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 70.944168][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 70.952122][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.960073][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 70.968031][ T4208] [ 70.971033][ T4208] ---[ end trace 0000000000000000 ]--- [ 70.976511][ T4208] ------------[ cut here ]------------ [ 70.981943][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 70.992169][ T4208] Modules linked in: [ 70.996042][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 71.004870][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.014904][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 71.020697][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 71.040288][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 71.046337][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 71.054295][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 71.062249][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 71.070205][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 71.078159][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 71.086117][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.095030][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.101594][ T4208] CR2: 00005555681f74e8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 71.109555][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.117509][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.125461][ T4208] Call Trace: [ 71.128720][ T4208] [ 71.131639][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 71.137258][ T4208] rb_advance_reader+0x2b/0x770 [ 71.142093][ T4208] ring_buffer_consume+0x1e7/0x370 [ 71.147196][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 71.152811][ T4208] ? print_trace_line+0x393/0x6b0 [ 71.157818][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 71.162745][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 71.168193][ T4208] vfs_read+0x286/0x930 [ 71.172330][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 71.176989][ T4208] ? __kasan_check_write+0x14/0x20 [ 71.182082][ T4208] ? mutex_lock+0x93/0x1b0 [ 71.186480][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 71.191313][ T4208] ? __fdget_pos+0x2cd/0x380 [ 71.195886][ T4208] ? ksys_read+0x70/0x260 [ 71.200199][ T4208] ksys_read+0x14a/0x260 [ 71.204426][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 71.209172][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 71.214794][ T4208] __x64_sys_read+0x7b/0x90 [ 71.219280][ T4208] x64_sys_call+0x2f/0x9a0 [ 71.223681][ T4208] do_syscall_64+0x4c/0xa0 [ 71.228084][ T4208] ? clear_bhb_loop+0x30/0x80 [ 71.232752][ T4208] ? clear_bhb_loop+0x30/0x80 [ 71.237413][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.243287][ T4208] RIP: 0033:0x7f966739e1d9 [ 71.247686][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.267271][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.275666][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 71.283622][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 71.291573][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 71.299528][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.307482][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 71.315438][ T4208] [ 71.318439][ T4208] ---[ end trace 0000000000000000 ]--- [ 71.329428][ T4208] ------------[ cut here ]------------ [ 71.334890][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 71.345122][ T4208] Modules linked in: [ 71.348996][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 71.357825][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.367859][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 71.373652][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 71.393243][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010006 [ 71.399294][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 71.407251][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 71.415206][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 71.423160][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 71.431115][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 71.439068][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.447977][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.454542][ T4208] CR2: 00005555681f74e8 CR3: 000000010b861000 CR4: 00000000003506a0 [ 71.462500][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.470452][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.478411][ T4208] Call Trace: [ 71.481677][ T4208] [ 71.484590][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 71.490126][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 71.495743][ T4208] ? __schedule+0xcbb/0x1700 [ 71.500326][ T4208] ? __kasan_check_write+0x14/0x20 [ 71.505421][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 71.510085][ T4208] rb_buffer_peek+0x5f/0x930 [ 71.514658][ T4208] ring_buffer_peek+0x184/0x3b0 [ 71.519508][ T4208] ? __kasan_check_read+0x11/0x20 [ 71.524517][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 71.529873][ T4208] ? _find_next_bit+0x8a/0x130 [ 71.534619][ T4208] __find_next_entry+0x33c/0x6c0 [ 71.539550][ T4208] ? trace_find_next_entry+0x380/0x380 [ 71.544996][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 71.550611][ T4208] ? print_trace_line+0x393/0x6b0 [ 71.555619][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 71.560541][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 71.565987][ T4208] vfs_read+0x286/0x930 [ 71.570127][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 71.574785][ T4208] ? __kasan_check_write+0x14/0x20 [ 71.579878][ T4208] ? mutex_lock+0x93/0x1b0 [ 71.584280][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 71.589115][ T4208] ? __fdget_pos+0x2cd/0x380 [ 71.593690][ T4208] ? ksys_read+0x70/0x260 [ 71.598007][ T4208] ksys_read+0x14a/0x260 [ 71.602232][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 71.606978][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 71.612595][ T4208] __x64_sys_read+0x7b/0x90 [ 71.617083][ T4208] x64_sys_call+0x2f/0x9a0 [ 71.621483][ T4208] do_syscall_64+0x4c/0xa0 [ 71.625885][ T4208] ? clear_bhb_loop+0x30/0x80 [ 71.630546][ T4208] ? clear_bhb_loop+0x30/0x80 [ 71.635204][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.641083][ T4208] RIP: 0033:0x7f966739e1d9 [ 71.645481][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.665067][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.673465][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 71.681420][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 71.689373][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 71.697329][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.705284][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 71.713240][ T4208] [ 71.716242][ T4208] ---[ end trace 0000000000000000 ]--- [ 71.724201][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 71.724212][ T28] audit: type=1400 audit(1791479858.415:445): avc: denied { mount } for pid=4189 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.731642][ T4208] ------------[ cut here ]------------ [ 71.754353][ T28] audit: type=1400 audit(1791479858.415:446): avc: denied { mounton } for pid=4189 comm="syz-executor" path="/root/syzkaller.O8OCBb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.757584][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 71.794357][ T4208] Modules linked in: [ 71.798236][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 71.807066][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.817101][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 71.822894][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 71.842482][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 71.848530][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 71.856486][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 71.864440][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 71.872393][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 71.880347][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 71.888299][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 71.897217][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.903783][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 71.911740][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.919692][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.927647][ T4208] Call Trace: [ 71.930906][ T4208] [ 71.933822][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 71.939439][ T4208] ? __kasan_check_write+0x14/0x20 [ 71.944553][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 71.949220][ T4208] rb_buffer_peek+0x5f/0x930 [ 71.953792][ T4208] ring_buffer_consume+0x1aa/0x370 [ 71.958886][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 71.964502][ T4208] ? print_trace_line+0x393/0x6b0 [ 71.969509][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 71.974434][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 71.979877][ T4208] vfs_read+0x286/0x930 [ 71.984014][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 71.988671][ T4208] ? __kasan_check_write+0x14/0x20 [ 71.993766][ T4208] ? mutex_lock+0x93/0x1b0 [ 71.998165][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 72.003002][ T4208] ? __fdget_pos+0x2cd/0x380 [ 72.007575][ T4208] ? ksys_read+0x70/0x260 [ 72.011889][ T4208] ksys_read+0x14a/0x260 [ 72.016111][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 72.020859][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 72.026476][ T4208] __x64_sys_read+0x7b/0x90 [ 72.030963][ T4208] x64_sys_call+0x2f/0x9a0 [ 72.035364][ T4208] do_syscall_64+0x4c/0xa0 [ 72.039770][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.044430][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.049091][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.054966][ T4208] RIP: 0033:0x7f966739e1d9 [ 72.059360][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.078945][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.087338][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 72.095291][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 72.103246][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 72.111205][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.119158][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 72.127119][ T4208] [ 72.130119][ T4208] ---[ end trace 0000000000000000 ]--- [ 72.135593][ T4208] ------------[ cut here ]------------ [ 72.141023][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 72.151244][ T4208] Modules linked in: [ 72.155119][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 72.163943][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.173978][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 72.179768][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 72.199352][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 72.205398][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 72.213352][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 72.221305][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 72.229260][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 72.237215][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 72.245167][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.254083][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.260646][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 72.268602][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.276554][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.284508][ T4208] Call Trace: [ 72.287770][ T4208] [ 72.290687][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 72.296305][ T4208] rb_advance_reader+0x2b/0x770 [ 72.301139][ T4208] ring_buffer_consume+0x1e7/0x370 [ 72.306236][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 72.311852][ T4208] ? print_trace_line+0x393/0x6b0 [ 72.316856][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 72.321780][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 72.327224][ T4208] vfs_read+0x286/0x930 [ 72.331365][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 72.336021][ T4208] ? __kasan_check_write+0x14/0x20 [ 72.341117][ T4208] ? mutex_lock+0x93/0x1b0 [ 72.345516][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 72.350347][ T4208] ? __fdget_pos+0x2cd/0x380 [ 72.354917][ T4208] ? ksys_read+0x70/0x260 [ 72.359229][ T4208] ksys_read+0x14a/0x260 [ 72.363450][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 72.368199][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 72.373817][ T4208] __x64_sys_read+0x7b/0x90 [ 72.378303][ T4208] x64_sys_call+0x2f/0x9a0 [ 72.382705][ T4208] do_syscall_64+0x4c/0xa0 [ 72.387109][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.391770][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.396433][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.402307][ T4208] RIP: 0033:0x7f966739e1d9 [ 72.406704][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.426290][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.434685][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 72.442638][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 72.450593][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 72.458545][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.466499][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 72.474454][ T4208] [ 72.477455][ T4208] ---[ end trace 0000000000000000 ]--- [ 72.488829][ T4208] ------------[ cut here ]------------ [ 72.494293][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 72.504540][ T4208] Modules linked in: [ 72.508428][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 72.517266][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.527306][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 72.533101][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 72.552696][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 72.558744][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 72.566700][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 72.574652][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 72.582607][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 72.590562][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 72.598517][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.607428][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.613995][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 72.621951][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.629903][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.637856][ T4208] Call Trace: [ 72.641114][ T4208] [ 72.644028][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 72.649562][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 72.655175][ T4208] ? __schedule+0xcbb/0x1700 [ 72.659752][ T4208] ? __kasan_check_write+0x14/0x20 [ 72.664849][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 72.669515][ T4208] rb_buffer_peek+0x5f/0x930 [ 72.674089][ T4208] ring_buffer_peek+0x184/0x3b0 [ 72.678924][ T4208] ? __kasan_check_read+0x11/0x20 [ 72.683929][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 72.689282][ T4208] ? _find_next_bit+0x8a/0x130 [ 72.694030][ T4208] __find_next_entry+0x33c/0x6c0 [ 72.698956][ T4208] ? trace_find_next_entry+0x380/0x380 [ 72.704400][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 72.710015][ T4208] ? print_trace_line+0x393/0x6b0 [ 72.715023][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 72.719949][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 72.725392][ T4208] vfs_read+0x286/0x930 [ 72.729534][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 72.734192][ T4208] ? __kasan_check_write+0x14/0x20 [ 72.739286][ T4208] ? mutex_lock+0x93/0x1b0 [ 72.743684][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 72.748517][ T4208] ? __fdget_pos+0x2cd/0x380 [ 72.753089][ T4208] ? ksys_read+0x70/0x260 [ 72.757410][ T4208] ksys_read+0x14a/0x260 [ 72.761634][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 72.766378][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 72.771997][ T4208] __x64_sys_read+0x7b/0x90 [ 72.776485][ T4208] x64_sys_call+0x2f/0x9a0 [ 72.780885][ T4208] do_syscall_64+0x4c/0xa0 [ 72.785287][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.789948][ T4208] ? clear_bhb_loop+0x30/0x80 [ 72.794607][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.800486][ T4208] RIP: 0033:0x7f966739e1d9 [ 72.804883][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.824470][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.832865][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 72.840817][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 72.848771][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 72.856724][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.864677][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 72.872633][ T4208] [ 72.875636][ T4208] ---[ end trace 0000000000000000 ]--- [ 72.886700][ T4208] ------------[ cut here ]------------ [ 72.892165][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 72.902395][ T4208] Modules linked in: [ 72.906268][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 72.915095][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.925174][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 72.930963][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 72.950558][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 72.956606][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 72.964561][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 72.972518][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 72.980499][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 72.988453][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 72.996406][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 73.005320][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.011884][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 73.019840][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.027792][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.035746][ T4208] Call Trace: [ 73.039005][ T4208] [ 73.041923][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 73.047542][ T4208] ? __kasan_check_write+0x14/0x20 [ 73.052636][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 73.057302][ T4208] rb_buffer_peek+0x5f/0x930 [ 73.061876][ T4208] ring_buffer_consume+0x1aa/0x370 [ 73.066983][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 73.072598][ T4208] ? print_trace_line+0x393/0x6b0 [ 73.077614][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 73.082541][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 73.087983][ T4208] vfs_read+0x286/0x930 [ 73.092126][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 73.096784][ T4208] ? __kasan_check_write+0x14/0x20 [ 73.101884][ T4208] ? mutex_lock+0x93/0x1b0 [ 73.106283][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 73.111124][ T4208] ? __fdget_pos+0x2cd/0x380 [ 73.115699][ T4208] ? ksys_read+0x70/0x260 [ 73.120008][ T4208] ksys_read+0x14a/0x260 [ 73.124233][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 73.128981][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 73.134598][ T4208] __x64_sys_read+0x7b/0x90 [ 73.139083][ T4208] x64_sys_call+0x2f/0x9a0 [ 73.143488][ T4208] do_syscall_64+0x4c/0xa0 [ 73.147890][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.152548][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.157206][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.163081][ T4208] RIP: 0033:0x7f966739e1d9 [ 73.167481][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.187068][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.195462][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 73.203415][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 73.211366][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 73.219317][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.227269][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 73.235223][ T4208] [ 73.238223][ T4208] ---[ end trace 0000000000000000 ]--- [ 73.243694][ T4208] ------------[ cut here ]------------ [ 73.249126][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 73.259356][ T4208] Modules linked in: [ 73.263240][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 73.272068][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.282114][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 73.287910][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 73.307497][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 73.313548][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 73.321504][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 73.329458][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 73.337412][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 73.345364][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 73.353319][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 73.362233][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.368803][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 73.376763][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.384718][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.392673][ T4208] Call Trace: [ 73.395935][ T4208] [ 73.398854][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 73.404476][ T4208] rb_advance_reader+0x2b/0x770 [ 73.409311][ T4208] ring_buffer_consume+0x1e7/0x370 [ 73.414407][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 73.420020][ T4208] ? print_trace_line+0x393/0x6b0 [ 73.425027][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 73.429951][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 73.435392][ T4208] vfs_read+0x286/0x930 [ 73.439532][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 73.444189][ T4208] ? __kasan_check_write+0x14/0x20 [ 73.449283][ T4208] ? mutex_lock+0x93/0x1b0 [ 73.453704][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 73.458540][ T4208] ? __fdget_pos+0x2cd/0x380 [ 73.463114][ T4208] ? ksys_read+0x70/0x260 [ 73.467428][ T4208] ksys_read+0x14a/0x260 [ 73.471656][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 73.476403][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 73.482023][ T4208] __x64_sys_read+0x7b/0x90 [ 73.486515][ T4208] x64_sys_call+0x2f/0x9a0 [ 73.490916][ T4208] do_syscall_64+0x4c/0xa0 [ 73.495321][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.499980][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.504639][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.510518][ T4208] RIP: 0033:0x7f966739e1d9 [ 73.514914][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.534503][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.542897][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 73.550870][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 73.558848][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 73.566802][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.574754][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 73.582711][ T4208] [ 73.585715][ T4208] ---[ end trace 0000000000000000 ]--- [ 73.591562][ T4208] ------------[ cut here ]------------ [ 73.597028][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 73.607245][ T4208] Modules linked in: [ 73.611115][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 73.619935][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.629966][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 73.635770][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 73.655353][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010012 [ 73.661394][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 73.669343][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 73.677288][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 73.685236][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 73.693184][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 73.701133][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 73.710038][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.716600][ T4208] CR2: 00007fa2edbf0000 CR3: 000000010b861000 CR4: 00000000003506a0 [ 73.724551][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.732505][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.740452][ T4208] Call Trace: [ 73.743707][ T4208] [ 73.746617][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 73.752167][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 73.757778][ T4208] ? __schedule+0xcbb/0x1700 [ 73.762348][ T4208] ? __kasan_check_write+0x14/0x20 [ 73.767435][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 73.772092][ T4208] rb_buffer_peek+0x5f/0x930 [ 73.776660][ T4208] ring_buffer_peek+0x184/0x3b0 [ 73.781485][ T4208] ? __kasan_check_read+0x11/0x20 [ 73.786490][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 73.791835][ T4208] ? _find_next_bit+0x8a/0x130 [ 73.796579][ T4208] __find_next_entry+0x33c/0x6c0 [ 73.801497][ T4208] ? trace_find_next_entry+0x380/0x380 [ 73.806935][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 73.812546][ T4208] ? print_trace_line+0x393/0x6b0 [ 73.817550][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 73.822468][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 73.827906][ T4208] vfs_read+0x286/0x930 [ 73.832039][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 73.836703][ T4208] ? __kasan_check_write+0x14/0x20 [ 73.841804][ T4208] ? mutex_lock+0x93/0x1b0 [ 73.846198][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 73.851027][ T4208] ? __fdget_pos+0x2cd/0x380 [ 73.855594][ T4208] ? ksys_read+0x70/0x260 [ 73.859898][ T4208] ksys_read+0x14a/0x260 [ 73.864113][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 73.868851][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 73.874456][ T4208] __x64_sys_read+0x7b/0x90 [ 73.878934][ T4208] x64_sys_call+0x2f/0x9a0 [ 73.883330][ T4208] do_syscall_64+0x4c/0xa0 [ 73.887729][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.892385][ T4208] ? clear_bhb_loop+0x30/0x80 [ 73.897038][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.902906][ T4208] RIP: 0033:0x7f966739e1d9 [ 73.907299][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.926877][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.935262][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 73.943209][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 73.951157][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 73.959103][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.967052][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 73.975003][ T4208] [ 73.977998][ T4208] ---[ end trace 0000000000000000 ]--- [ 73.986080][ T4208] ------------[ cut here ]------------ [ 73.987494][ T722] device bridge_slave_1 left promiscuous mode [ 73.991536][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 73.997719][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.007787][ T4208] Modules linked in: [ 74.007797][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 74.007817][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.037510][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 74.043298][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 74.062882][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 74.068923][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 74.076873][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 74.084821][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 74.092772][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 74.100721][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 74.108687][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 74.117591][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.124152][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 74.132111][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.140060][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.148017][ T4208] Call Trace: [ 74.151275][ T4208] [ 74.154189][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 74.159801][ T4208] ? __kasan_check_write+0x14/0x20 [ 74.164896][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 74.169568][ T4208] rb_buffer_peek+0x5f/0x930 [ 74.174165][ T4208] ring_buffer_consume+0x1aa/0x370 [ 74.179272][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 74.184881][ T4208] ? print_trace_line+0x393/0x6b0 [ 74.189888][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 74.194815][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 74.200253][ T4208] vfs_read+0x286/0x930 [ 74.204386][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 74.209038][ T4208] ? __kasan_check_write+0x14/0x20 [ 74.214147][ T4208] ? mutex_lock+0x93/0x1b0 [ 74.218541][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 74.223372][ T4208] ? __fdget_pos+0x2cd/0x380 [ 74.227946][ T4208] ? ksys_read+0x70/0x260 [ 74.232262][ T4208] ksys_read+0x14a/0x260 [ 74.236493][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 74.241233][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 74.246843][ T4208] __x64_sys_read+0x7b/0x90 [ 74.251325][ T4208] x64_sys_call+0x2f/0x9a0 [ 74.255720][ T4208] do_syscall_64+0x4c/0xa0 [ 74.260114][ T4208] ? clear_bhb_loop+0x30/0x80 [ 74.264767][ T4208] ? clear_bhb_loop+0x30/0x80 [ 74.269422][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.275292][ T4208] RIP: 0033:0x7f966739e1d9 [ 74.279683][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.299283][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.307673][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 74.315624][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 74.323578][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 74.331526][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.339479][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 74.347433][ T4208] [ 74.350442][ T4208] ---[ end trace 0000000000000000 ]--- [ 74.355899][ T4208] ------------[ cut here ]------------ [ 74.361327][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 74.371545][ T4208] Modules linked in: [ 74.375412][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 74.384230][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.394262][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 74.400067][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 74.419650][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 74.425696][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 74.433644][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 74.441594][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 74.449546][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 74.457509][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 74.465457][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 74.474363][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.480922][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 74.488876][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.496823][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.504771][ T4208] Call Trace: [ 74.508032][ T4208] [ 74.510944][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 74.516556][ T4208] rb_advance_reader+0x2b/0x770 [ 74.521387][ T4208] ring_buffer_consume+0x1e7/0x370 [ 74.526474][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 74.532084][ T4208] ? print_trace_line+0x393/0x6b0 [ 74.537083][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 74.542000][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 74.547447][ T4208] vfs_read+0x286/0x930 [ 74.551581][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 74.556232][ T4208] ? __kasan_check_write+0x14/0x20 [ 74.561324][ T4208] ? mutex_lock+0x93/0x1b0 [ 74.565719][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 74.570548][ T4208] ? __fdget_pos+0x2cd/0x380 [ 74.575115][ T4208] ? ksys_read+0x70/0x260 [ 74.579423][ T4208] ksys_read+0x14a/0x260 [ 74.583644][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 74.588385][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 74.593993][ T4208] __x64_sys_read+0x7b/0x90 [ 74.598484][ T4208] x64_sys_call+0x2f/0x9a0 [ 74.602881][ T4208] do_syscall_64+0x4c/0xa0 [ 74.607277][ T4208] ? clear_bhb_loop+0x30/0x80 [ 74.611936][ T4208] ? clear_bhb_loop+0x30/0x80 [ 74.616592][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.622460][ T4208] RIP: 0033:0x7f966739e1d9 [ 74.626853][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.646439][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.654826][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 74.662778][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 74.670724][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 74.678670][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.686616][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 74.694567][ T4208] [ 74.697564][ T4208] ---[ end trace 0000000000000000 ]--- [ 74.703954][ T722] device bridge_slave_0 left promiscuous mode [ 74.710094][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.713243][ T4208] ------------[ cut here ]------------ [ 74.722544][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 74.732764][ T4208] Modules linked in: [ 74.736631][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 74.745451][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.755480][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 74.761270][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 74.780849][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 74.786892][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 74.794843][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 74.802789][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 74.810735][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 74.818683][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 74.826629][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.835536][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.842101][ T4208] CR2: 00007fa2edbf0000 CR3: 000000010b861000 CR4: 00000000003506a0 [ 74.850066][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.858017][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.865965][ T4208] Call Trace: [ 74.869219][ T4208] [ 74.872131][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 74.877658][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 74.883263][ T4208] ? __schedule+0xcbb/0x1700 [ 74.887837][ T4208] ? __kasan_check_write+0x14/0x20 [ 74.892923][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 74.897580][ T4208] rb_buffer_peek+0x5f/0x930 [ 74.902146][ T4208] ring_buffer_peek+0x184/0x3b0 [ 74.906970][ T4208] ? __kasan_check_read+0x11/0x20 [ 74.911967][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 74.917311][ T4208] ? _find_next_bit+0x8a/0x130 [ 74.922059][ T4208] __find_next_entry+0x33c/0x6c0 [ 74.926993][ T4208] ? trace_find_next_entry+0x380/0x380 [ 74.932431][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 74.938035][ T4208] ? print_trace_line+0x393/0x6b0 [ 74.943034][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 74.947966][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 74.953399][ T4208] vfs_read+0x286/0x930 [ 74.957533][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 74.962183][ T4208] ? __kasan_check_write+0x14/0x20 [ 74.967272][ T4208] ? mutex_lock+0x93/0x1b0 [ 74.971660][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 74.976488][ T4208] ? __fdget_pos+0x2cd/0x380 [ 74.981057][ T4208] ? ksys_read+0x70/0x260 [ 74.985361][ T4208] ksys_read+0x14a/0x260 [ 74.989578][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 74.994314][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 74.999923][ T4208] __x64_sys_read+0x7b/0x90 [ 75.004400][ T4208] x64_sys_call+0x2f/0x9a0 [ 75.008799][ T4208] do_syscall_64+0x4c/0xa0 [ 75.013195][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.017848][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.022504][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.028372][ T4208] RIP: 0033:0x7f966739e1d9 [ 75.032764][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.052345][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.060731][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 75.068676][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 75.076625][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 75.084572][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.092522][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 75.100472][ T4208] [ 75.103472][ T4208] ---[ end trace 0000000000000000 ]--- [ 75.110505][ T4208] ------------[ cut here ]------------ [ 75.115963][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 75.126183][ T4208] Modules linked in: [ 75.130053][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 75.138874][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.148904][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 75.154688][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 75.174270][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 75.180319][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 75.188267][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 75.196217][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 75.204170][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 75.212122][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 75.220079][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.229010][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.235573][ T4208] CR2: 00007fa2edbf0000 CR3: 000000010b861000 CR4: 00000000003506a0 [ 75.243524][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.251476][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.259422][ T4208] Call Trace: [ 75.262680][ T4208] [ 75.265591][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 75.271204][ T4208] ? __kasan_check_write+0x14/0x20 [ 75.276294][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 75.280954][ T4208] rb_buffer_peek+0x5f/0x930 [ 75.285523][ T4208] ring_buffer_consume+0x1aa/0x370 [ 75.290612][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 75.296235][ T4208] ? print_trace_line+0x393/0x6b0 [ 75.301236][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 75.306153][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 75.311591][ T4208] vfs_read+0x286/0x930 [ 75.315724][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 75.320379][ T4208] ? __kasan_check_write+0x14/0x20 [ 75.325473][ T4208] ? mutex_lock+0x93/0x1b0 [ 75.329870][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 75.334699][ T4208] ? __fdget_pos+0x2cd/0x380 [ 75.339266][ T4208] ? ksys_read+0x70/0x260 [ 75.343571][ T4208] ksys_read+0x14a/0x260 [ 75.347790][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 75.352528][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 75.358143][ T4208] __x64_sys_read+0x7b/0x90 [ 75.362626][ T4208] x64_sys_call+0x2f/0x9a0 [ 75.367023][ T4208] do_syscall_64+0x4c/0xa0 [ 75.371419][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.376075][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.380730][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.386600][ T4208] RIP: 0033:0x7f966739e1d9 [ 75.390991][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.410572][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.418972][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 75.426933][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 75.434890][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 75.442841][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.450800][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 75.458769][ T4208] [ 75.461766][ T4208] ---[ end trace 0000000000000000 ]--- [ 75.467229][ T4208] ------------[ cut here ]------------ [ 75.472659][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 75.482876][ T4208] Modules linked in: [ 75.486766][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 75.495602][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.505637][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 75.511435][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 75.531042][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 75.537088][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 75.545042][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 75.552990][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 75.560943][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 75.568892][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 75.576850][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.585761][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.592324][ T4208] CR2: 00007fa2edbf0000 CR3: 000000010b861000 CR4: 00000000003506a0 [ 75.600279][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.608227][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.616177][ T4208] Call Trace: [ 75.619435][ T4208] [ 75.622356][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 75.627978][ T4208] rb_advance_reader+0x2b/0x770 [ 75.632820][ T4208] ring_buffer_consume+0x1e7/0x370 [ 75.637912][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 75.643521][ T4208] ? print_trace_line+0x393/0x6b0 [ 75.648524][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 75.653442][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 75.658901][ T4208] vfs_read+0x286/0x930 [ 75.663036][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 75.667690][ T4208] ? __kasan_check_write+0x14/0x20 [ 75.672796][ T4208] ? mutex_lock+0x93/0x1b0 [ 75.677189][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 75.682021][ T4208] ? __fdget_pos+0x2cd/0x380 [ 75.686601][ T4208] ? ksys_read+0x70/0x260 [ 75.690906][ T4208] ksys_read+0x14a/0x260 [ 75.695125][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 75.699870][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 75.705492][ T4208] __x64_sys_read+0x7b/0x90 [ 75.709976][ T4208] x64_sys_call+0x2f/0x9a0 [ 75.714372][ T4208] do_syscall_64+0x4c/0xa0 [ 75.718771][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.723427][ T4208] ? clear_bhb_loop+0x30/0x80 [ 75.728085][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.733957][ T4208] RIP: 0033:0x7f966739e1d9 [ 75.738348][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.757930][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.766319][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 75.774286][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 75.782236][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 75.790187][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.798162][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 75.806183][ T4208] [ 75.809187][ T4208] ---[ end trace 0000000000000000 ]--- [ 75.815983][ T722] device veth1_macvtap left promiscuous mode [ 75.819228][ T4208] ------------[ cut here ]------------ [ 75.822025][ T722] device veth0_vlan left promiscuous mode [ 75.827399][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 75.843307][ T4208] Modules linked in: [ 75.847180][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 75.856002][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.866036][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 75.871821][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 75.891410][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 75.897475][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 75.905427][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 75.913379][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 75.921328][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 75.929278][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 75.937227][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 75.946161][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.952721][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 75.960672][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.968618][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.976576][ T4208] Call Trace: [ 75.979834][ T4208] [ 75.982745][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 75.988290][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 75.993946][ T4208] ? __schedule+0xcbb/0x1700 [ 75.998517][ T4208] ? __kasan_check_write+0x14/0x20 [ 76.003607][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 76.008265][ T4208] rb_buffer_peek+0x5f/0x930 [ 76.012833][ T4208] ring_buffer_peek+0x184/0x3b0 [ 76.017663][ T4208] ? __kasan_check_read+0x11/0x20 [ 76.022699][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 76.028050][ T4208] ? _find_next_bit+0x8a/0x130 [ 76.032795][ T4208] __find_next_entry+0x33c/0x6c0 [ 76.037715][ T4208] ? trace_find_next_entry+0x380/0x380 [ 76.043154][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 76.048766][ T4208] ? print_trace_line+0x393/0x6b0 [ 76.053766][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 76.058684][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 76.064119][ T4208] vfs_read+0x286/0x930 [ 76.068258][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 76.072922][ T4208] ? __kasan_check_write+0x14/0x20 [ 76.078012][ T4208] ? mutex_lock+0x93/0x1b0 [ 76.082405][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 76.087240][ T4208] ? __fdget_pos+0x2cd/0x380 [ 76.091810][ T4208] ? ksys_read+0x70/0x260 [ 76.096115][ T4208] ksys_read+0x14a/0x260 [ 76.100337][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 76.105112][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 76.110722][ T4208] __x64_sys_read+0x7b/0x90 [ 76.115205][ T4208] x64_sys_call+0x2f/0x9a0 [ 76.119601][ T4208] do_syscall_64+0x4c/0xa0 [ 76.124019][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.128676][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.133329][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.139206][ T4208] RIP: 0033:0x7f966739e1d9 [ 76.143603][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.163189][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.171593][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 76.179546][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 76.187494][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 76.195444][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.203395][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 76.211349][ T4208] [ 76.214349][ T4208] ---[ end trace 0000000000000000 ]--- [ 76.220164][ T4208] ------------[ cut here ]------------ [ 76.225613][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 76.235831][ T4208] Modules linked in: [ 76.239705][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 76.248544][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.258590][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 76.264376][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 76.283958][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 76.290003][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 76.297952][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 76.305905][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 76.313856][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 76.321805][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 76.329757][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.338666][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.345228][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 76.353179][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.361126][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.369074][ T4208] Call Trace: [ 76.372336][ T4208] [ 76.375247][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 76.380874][ T4208] ? __kasan_check_write+0x14/0x20 [ 76.385973][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 76.390636][ T4208] rb_buffer_peek+0x5f/0x930 [ 76.395202][ T4208] ring_buffer_consume+0x1aa/0x370 [ 76.400291][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 76.405911][ T4208] ? print_trace_line+0x393/0x6b0 [ 76.410913][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 76.415832][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 76.421271][ T4208] vfs_read+0x286/0x930 [ 76.425409][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 76.430060][ T4208] ? __kasan_check_write+0x14/0x20 [ 76.435148][ T4208] ? mutex_lock+0x93/0x1b0 [ 76.439544][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 76.444374][ T4208] ? __fdget_pos+0x2cd/0x380 [ 76.448967][ T4208] ? ksys_read+0x70/0x260 [ 76.453273][ T4208] ksys_read+0x14a/0x260 [ 76.457496][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 76.462242][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 76.467856][ T4208] __x64_sys_read+0x7b/0x90 [ 76.472341][ T4208] x64_sys_call+0x2f/0x9a0 [ 76.476739][ T4208] do_syscall_64+0x4c/0xa0 [ 76.481135][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.485790][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.490445][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.496318][ T4208] RIP: 0033:0x7f966739e1d9 [ 76.500713][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.520295][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.528689][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 76.536639][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 76.544587][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 76.552533][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.560478][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 76.568430][ T4208] [ 76.571429][ T4208] ---[ end trace 0000000000000000 ]--- [ 76.576893][ T4208] ------------[ cut here ]------------ [ 76.582321][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 76.592542][ T4208] Modules linked in: [ 76.596410][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 76.605230][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.615258][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 76.621043][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 76.640625][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010006 [ 76.646669][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 76.654625][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 76.662586][ T4208] RBP: ffffc90000967ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 76.670533][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 76.678481][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 76.686437][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.695343][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.701905][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 76.709857][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.717807][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.725760][ T4208] Call Trace: [ 76.729018][ T4208] [ 76.731931][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 76.737546][ T4208] rb_advance_reader+0x2b/0x770 [ 76.742375][ T4208] ring_buffer_consume+0x1e7/0x370 [ 76.747483][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 76.753093][ T4208] ? print_trace_line+0x393/0x6b0 [ 76.758093][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 76.763010][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 76.768448][ T4208] vfs_read+0x286/0x930 [ 76.772581][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 76.777235][ T4208] ? __kasan_check_write+0x14/0x20 [ 76.782346][ T4208] ? mutex_lock+0x93/0x1b0 [ 76.786741][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 76.791576][ T4208] ? __fdget_pos+0x2cd/0x380 [ 76.796152][ T4208] ? ksys_read+0x70/0x260 [ 76.800477][ T4208] ksys_read+0x14a/0x260 [ 76.804696][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 76.809437][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 76.815048][ T4208] __x64_sys_read+0x7b/0x90 [ 76.819530][ T4208] x64_sys_call+0x2f/0x9a0 [ 76.823923][ T4208] do_syscall_64+0x4c/0xa0 [ 76.828321][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.832974][ T4208] ? clear_bhb_loop+0x30/0x80 [ 76.837628][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.843498][ T4208] RIP: 0033:0x7f966739e1d9 [ 76.847890][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.867474][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.875868][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 76.883817][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 76.891783][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 76.899733][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.907679][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 76.915633][ T4208] [ 76.918629][ T4208] ---[ end trace 0000000000000000 ]--- [ 76.924716][ T4208] ------------[ cut here ]------------ [ 76.930174][ T4208] WARNING: CPU: 0 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 76.940421][ T4208] Modules linked in: [ 76.944316][ T4208] CPU: 0 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 76.953160][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.963198][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 76.968995][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 76.988584][ T4208] RSP: 0018:ffffc90000967820 EFLAGS: 00010002 [ 76.994633][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 77.002587][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 77.010537][ T4208] RBP: ffffc90000967990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 77.018489][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 77.026443][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 77.034397][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 77.043310][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.049873][ T4208] CR2: 0000001b2ec1fff8 CR3: 000000010b861000 CR4: 00000000003506b0 [ 77.057829][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.065789][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.073740][ T4208] Call Trace: [ 77.077002][ T4208] [ 77.079914][ T4208] ? __this_cpu_preempt_check+0x13/0x20 [ 77.085452][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 77.091068][ T4208] ? __schedule+0xcbb/0x1700 [ 77.095647][ T4208] ? __kasan_check_write+0x14/0x20 [ 77.100752][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 77.105428][ T4208] rb_buffer_peek+0x5f/0x930 [ 77.110003][ T4208] ring_buffer_peek+0x184/0x3b0 [ 77.114839][ T4208] ? __kasan_check_read+0x11/0x20 [ 77.119862][ T4208] ? __cfi_ring_buffer_peek+0x10/0x10 [ 77.125215][ T4208] ? _find_next_bit+0x8a/0x130 [ 77.129965][ T4208] __find_next_entry+0x33c/0x6c0 [ 77.134893][ T4208] ? trace_find_next_entry+0x380/0x380 [ 77.140340][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 77.145959][ T4208] ? print_trace_line+0x393/0x6b0 [ 77.150964][ T4208] tracing_read_pipe+0x3d2/0xaf0 [ 77.155889][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 77.161332][ T4208] vfs_read+0x286/0x930 [ 77.165472][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 77.170130][ T4208] ? __kasan_check_write+0x14/0x20 [ 77.175225][ T4208] ? mutex_lock+0x93/0x1b0 [ 77.179621][ T4208] ? __cfi_mutex_lock+0x10/0x10 [ 77.184456][ T4208] ? __fdget_pos+0x2cd/0x380 [ 77.189029][ T4208] ? ksys_read+0x70/0x260 [ 77.193339][ T4208] ksys_read+0x14a/0x260 [ 77.197566][ T4208] ? __cfi_ksys_read+0x10/0x10 [ 77.202315][ T4208] ? fpregs_restore_userregs+0x128/0x260 [ 77.207932][ T4208] __x64_sys_read+0x7b/0x90 [ 77.212421][ T4208] x64_sys_call+0x2f/0x9a0 [ 77.216820][ T4208] do_syscall_64+0x4c/0xa0 [ 77.221229][ T4208] ? clear_bhb_loop+0x30/0x80 [ 77.225889][ T4208] ? clear_bhb_loop+0x30/0x80 [ 77.230550][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.236425][ T4208] RIP: 0033:0x7f966739e1d9 [ 77.240825][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.260417][ T4208] RSP: 002b:00007f966823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.268817][ T4208] RAX: ffffffffffffffda RBX: 00007f9667625fa0 RCX: 00007f966739e1d9 [ 77.276774][ T4208] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003 [ 77.284726][ T4208] RBP: 00007f9667435888 R08: 0000000000000000 R09: 0000000000000000 [ 77.292681][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.300641][ T4208] R13: 00007f9667626038 R14: 00007f9667625fa0 R15: 00007ffe7fd90a38 [ 77.308598][ T4208] [ 77.311603][ T4208] ---[ end trace 0000000000000000 ]--- [ 77.318679][ T4208] ------------[ cut here ]------------ [ 77.324147][ T4208] WARNING: CPU: 1 PID: 4208 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 77.334395][ T4208] Modules linked in: [ 77.338280][ T4208] CPU: 1 PID: 4208 Comm: syz.1.1637 Tainted: G B W syzkaller #0 [ 77.347129][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.357179][ T4208] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 77.362976][ T4208] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 2e 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 30 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 77.382561][ T4208] RSP: 0018:ffffc90000967940 EFLAGS: 00010002 [ 77.388611][ T4208] RAX: 1ffff1102002ee01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 77.396562][ T4208] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 77.404515][ T4208] RBP: ffffc90000967ab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 77.412467][ T4208] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 77.420424][ T4208] R13: 1ffff11020073ed6 R14: 1ffff11020073ed3 R15: 0000000000000038 [ 77.428374][ T4208] FS: 00007f966823a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.437282][ T4208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.443846][ T4208] CR2: 00007fa2edbf0000 CR3: 000000010b861000 CR4: 00000000003506a0 [ 77.451799][ T4208] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.459750][ T4208] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.467700][ T4208] Call Trace: [ 77.470959][ T4208] [ 77.473876][ T4208] ? ring_buffer_read_page+0x1260/0x1260 [ 77.479493][ T4208] ? __kasan_check_write+0x14/0x20 [ 77.484587][ T4208] ? _raw_spin_lock+0x94/0xf0 [ 77.489255][ T4208] rb_buffer_peek+0x5f/0x930 [ 77.493829][ T4208] ring_buffer_consume+0x1aa/0x370 [ 77.498926][ T4208] ? __cfi_ring_buffer_consume+0x10/0x10 [ 77.504538][ T4208] ? print_trace_line+0x393/0x6b0 [ 77.509542][ T4208] tracing_read_pipe+0x5b3/0xaf0 [ 77.514463][ T4208] ? __cfi_tracing_read_pipe+0x10/0x10 [ 77.519904][ T4208] vfs_read+0x286/0x930 [ 77.524040][ T4208] ? __cfi_vfs_read+0x10/0x10 [ 77.528696][ T4208] ? __kasan_check_write+0x14/0x20 [ 77.533786][ T4208] ? mutex_lock+0x93/0x1b0 [ 77.538183][ T4208] ? __cfi_mutex_lock+0x10/0x10