last executing test programs:

17m3.089470457s ago: executing program 1 (id=935):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r0, &(0x7f0000001a80)={@void, @val={0x0, 0x4, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "644dda", 0xf90, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x1c, 0x0, @local, @mcast2, [@fragment={0x0, 0x0, 0x8, 0x1, 0x0, 0x10, 0x68}], "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"}}}}}, 0xfc2)

17m2.757880751s ago: executing program 1 (id=938):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3018000, &(0x7f0000000180)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000001c0)="$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")
openat$kvm(0x0, &(0x7f0000000880), 0x20000, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r0, &(0x7f00000008c0)={0x0, &(0x7f00000009c0)=[@out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x28})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000c40), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
creat(&(0x7f0000000d00)='./bus\x00', 0xd4)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
io_setup(0x1bf9, &(0x7f0000000d40))
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
link(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file2\x00')

17m0.327347512s ago: executing program 1 (id=947):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x40)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7f, 0x4)
connect$inet6(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0)
write$khugepaged_scan(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000002c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r6, 0x2)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000640)={0x1, {{0x2, 0x4e24, @multicast1}}}, 0x88)

16m59.236180335s ago: executing program 1 (id=953):
setpriority(0x1, 0x0, 0x2a14b58)
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x804, &(0x7f0000000480)={[{@shortname_winnt}, {@shortname_win95}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@gid}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@quiet}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}, 0x1, 0x27b, &(0x7f0000000580)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', 0x40000, 0x0)
getdents64(r0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101042, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000340)={0xfffffffffffffe43, 0x0})
read(r2, 0x0, 0x5f)

16m59.171272342s ago: executing program 1 (id=956):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x40000000)

16m59.006405309s ago: executing program 1 (id=958):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3018000, &(0x7f0000000180)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000001c0)="$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")
openat$kvm(0x0, &(0x7f0000000880), 0x20000, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r0, &(0x7f00000008c0)={0x0, &(0x7f00000009c0)=[@out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x28})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
creat(&(0x7f0000000d00)='./bus\x00', 0xd4)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
io_setup(0x1bf9, &(0x7f0000000d40))
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
link(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file2\x00')

16m59.006196099s ago: executing program 32 (id=958):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3018000, &(0x7f0000000180)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000001c0)="$eJzs3d9rZFcdAPDvvcnEZDc1UxVZC7bFVnaL7kzSWI0ibQXRp4Ja39eYTELIJBMyk7oJRVP8AwQRFfwDfBF88FGQ/gkiFPRdVBTRrT7qXrkzN5ofM8mYmexsJ58PnMw598f5nnPJ3Lk/DvcGcG09GxGvRsRERLwQEXPF9LRIcdhJ+XLvPnhzJU9JZNnrf0siKaYd1ZWXJyPiZrHadER87csR30zOxm3uH2wu1+u13aJcbW3tVJv7B3c3tpbXa+u17cXFhV9ExEtL81lhoH6WI+LlL/7ph9/76Zde/tUnv/X7e3+58+28WZ//cKfdEbEyUIAeOnWX2tviSL6Ndq8i2Ijk/SlNjLoVAAD0Iz/G/0BEfKx9/D8XE+2jOQAAAGCcZK/Mxr+SiAwAAAAYW2lEzEaSVoqxALORppVKZwzvh+JGWm80W59Ya+xtr+bzIspRStc26rX5YqxwOUpJXl4oxtgelV88VV6MiCcj4gdzM+1yZaVRXx31xQ8AAAC4Jm4+c/L8/59zaTsPAAAAjJlyzwIAAAAwLpzyAwAAwPhz/g8AAABj7SuvvZan7Og93qtv7O9tNt64u1prbla29lYqK43dncp6o7Hefmbf1kX11RuNnU/F9t79aqvWbFWb+wf3thp72617GydegQ0AAAA8Qk8+8/bvkog4/NxMO0XxHECAE/446gYAwzQx6gYAIzM56gYAI1O6cAl7CBh3yQXzzw7e6VwrjF9fTXsAAIDhu/2Rs/f/p4p5F18bAN7LjPUBgOvn5N29mZG1A3j0SpcdAXhr2C0BRuX9xWev0T49H97Rx/3/zjWGLLtUwwAAgKGZbackrRTnALORppVKxBPxMCtHKVnbqNfmi3m/nSu9Ly8vtNdMLhwzDAAAAAAAAAAAAAAAAAAAAAAAAAB0ZFkSGQAAADDWItI/J+2n+Ufcnnt+9uTVgVNv/frJ6z+6v9xq7S5ETCV/n8snTUVE68fF9BczrwQAAACA0ZrJ/3TO04vPhVE3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBx8+6DN1eOUt8rTQwe969fiIhyt/iTMd3+nI5SRNz4RxKTx9ZLhhM+Dt+KiFvd4ifxMMuyctGKbvFnrjh+ub1pusdPI+LmEOLDdfZ2vv95tdv3L41n25/dv3+TRRpU7/1f+t/930SP/c8Tp8q9PPXOz6s9478V8dRk9/3PUfykE/9EiLzwXJ99/MbXDw66zjhWZbf4x2NVW1s71eb+wd2NreX12npte3Fx4dNLn1l6aWm+urZRrxV/u4b5/kd/+fC8/t/oEb98sv9ntv/zffU+i3+/c//BBzuFUrf4d57r/vt7q0f8tPjt+3iRz+ffPsofdvLHPf2z3zx9Xv9Xe/R/+oL+3+mr//HZF7763T90nXNmawAAj0Jz/2BzuV6v7Z6Tme5jmf8rEzFoPa8MtT2PQyYuXmb6MWnqVWSy73T+HwerZ8DVz2SyQVafjCE0Y+rM93QiLlthEnGY19XnPyQAADBm/nfQf94dJAAAAAAAAAAAAAAAAAAAAOAqXfKxZNMR0ffCp2MejqarAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn+k8AAAD//xwK0hs=")
openat$kvm(0x0, &(0x7f0000000880), 0x20000, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r0, &(0x7f00000008c0)={0x0, &(0x7f00000009c0)=[@out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x28})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
creat(&(0x7f0000000d00)='./bus\x00', 0xd4)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
io_setup(0x1bf9, &(0x7f0000000d40))
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
link(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file2\x00')

2m29.722353597s ago: executing program 4 (id=5076):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m29.197022061s ago: executing program 4 (id=5079):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x91)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
syz_open_dev$MSR(0x0, 0x5, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
unshare(0x22020600)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000340), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001280)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0)

2m27.942999509s ago: executing program 4 (id=5081):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m26.029576335s ago: executing program 4 (id=5090):
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x204001, &(0x7f0000000c80), 0x1, 0xb9f, &(0x7f0000000cc0)="$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")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001880), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f00000018c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)

2m25.153905825s ago: executing program 4 (id=5092):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x100000000e2)
keyctl$clear(0x3, 0xfffffffffffffffd)
preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x804, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x1, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180))

2m24.913030889s ago: executing program 4 (id=5093):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="150000001000000008"], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
syz_mount_image$fuse(0x0, &(0x7f00000010c0)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000001100)='./proc\x00', &(0x7f0000001140)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r2, &(0x7f00000011c0), 0x0)

2m24.912841489s ago: executing program 33 (id=5093):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="150000001000000008"], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
syz_mount_image$fuse(0x0, &(0x7f00000010c0)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000001100)='./proc\x00', &(0x7f0000001140)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r2, &(0x7f00000011c0), 0x0)

1m3.872370232s ago: executing program 3 (id=5449):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x91)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
syz_open_dev$MSR(0x0, 0x5, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
unshare(0x22020600)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000340), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

1m3.79449364s ago: executing program 3 (id=5451):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x4000}, {r0, 0x9100}], 0x2, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000940)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000980)='./mysys\x00', &(0x7f00000009c0)='sysfs\x00', 0x0, 0x0)

1m2.698372762s ago: executing program 3 (id=5454):
syz_mount_image$f2fs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x2010018, &(0x7f0000000640)={[{@nodiscard}, {@nocheckpoint_merge}, {@resgid}, {@six_active_logs}, {@flush_merge}, {@grpjquota={'grpjquota', 0x3d, '!'}}, {@acl}, {@noacl}, {@nobarrier}, {@alloc_mode_def}, {@jqfmt_vfsold}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000000740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.sectors\x00', 0x275a, 0x0)
symlink(&(0x7f0000007500)='./file0\x00', 0x0)

59.526493386s ago: executing program 3 (id=5465):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@auto_da_alloc_val}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$eJzs3EtvG1UUAOAzk6TvklDKow8gUBARj6RJC3TBBgRSN0hIsCjLkKZVadqgJki0qkhAqCxRfwGwROIXsIINAlYgtrBHSBXqhpYFGjT2jGscO40bJ07j75Nc3zsP33PsuZM7c+0G0LOG83+SiF0R8VtEDEZEX+MGw9WnG9cvT928fnkqiSx7868k3y3+vn55qtw0KZ53FpWRNCL9JIkDTdqdu3jp7OTMzPSFoj42f+69sbmLl547c27y9PTp6fMTx44dPTL+4gsTz3ckz915rPs/nD247/jbV1+fOnH1nR+/zuPdVayvz6NqaNVtDsdw7T1p9OSqX31j2V08t8qXjSnv6/0RMVDp/4PRV6lVDcZrH3c1OGBNZVmWbV2ytDYCWMyATSyJbkcAdEf5hz6//i0f6zj86LprL1cvgPK8bxSP6pr+SIttBuqubzttOCJOLP7zef6IpvchAAA669t8/PNss/FfGg/UbXdPMTc0FBH3RsSeiLgvIvZGxP0RlW0fjIiH2mx/uKG+dPzzy/Y7SmyF8vHfS8Xc1v/Hf+XoL4b6itruSv4DyakzM9OHi/dkJAa25vXxZdr47tVfP2u1rn78lz/y9suxYBHHn/0NN+hOTs5Pribnetc+qtwDXFiaf1KbCUgiYl9E7L+D198WEWee/upgq/W3z38Z/XcQUIPsy4inqp//YjTkX0qWn58c2xYz04fHyqNiqZ9+vvJGq/ZXlX8H5J//jqbHfy3/oaR+vnau/Tau/P5py2ualvnXmm9+/G9J3qqUtxTLPpicn78wHrElWVy6fOLWvmW93D7Pf+RQk/xvZvk57t8viv0ORER+ED8cEY9ExKNF7I9FxOMRcahJbtlC9fmHV554t+3810me/8m2Pv/2C31nv/+mVfsrO/8drZRGiiUrOf+tNMDVvHcAAABwt0gr34FP0tFaOU1HR6vf4d8bO9KZ2bn5Z07Nvn/+ZPW78kMxkJZ3ugbr7oeOF/eGy/pEQ/1I5b5xlmXZ9kp9dGp2Zq3m1IGV2dmi/+f+6Ot2dMCaa2sezS+8YFPpwDw6cJfS/6F3tdP/nStgc9GnoXc16/8LETe6EAqwzm7z9//W/xIAbDrG/9C79H/oXfo/9KTV/K5/ucKe42v1yput0Lcxwmi7EGn9kvJ42gCBNSkMFNHVlqRdi6e/PoxqYWtE3GavNIrCQqxXqN07JwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTSfwEAAP//wIroBw==")
mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0)

58.377400663s ago: executing program 3 (id=5469):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x259, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x101e42, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000840)='\f', 0x1, 0x8000c61)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
pwrite64(0xffffffffffffffff, &(0x7f0000010e80)='2', 0xfdef, 0xc00)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010ec0)={0x8, {"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", 0x1000}}, 0x1006)

57.158735958s ago: executing program 2 (id=5472):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f0000006180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000b740)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f000000b780), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$sock_int(r0, 0x1, 0x72d3bdd666830050, &(0x7f00000006c0)=0x4e9, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18300000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000200000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlockall(0x7)
r1 = fsopen(&(0x7f000000b7c0)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="242400002248000008001300", @ANYRES32=0x0, @ANYBLOB="1400030069f3897f52089229e000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x40044)
openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c)
creat(&(0x7f0000000000)='./file1\x00', 0x0)

56.615031213s ago: executing program 3 (id=5475):
r0 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000003c0)={0x0, &(0x7f0000000640)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30})
r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000840)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"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", "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"}})
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4)

56.166772289s ago: executing program 34 (id=5475):
r0 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000003c0)={0x0, &(0x7f0000000640)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30})
r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000840)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"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", "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"}})
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4)

54.091630982s ago: executing program 2 (id=5485):
syz_mount_image$f2fs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x2010018, &(0x7f0000000640)={[{@nodiscard}, {@nocheckpoint_merge}, {@resgid}, {@six_active_logs}, {@flush_merge}, {@grpjquota={'grpjquota', 0x3d, '!'}}, {@acl}, {@noacl}, {@nobarrier}, {@alloc_mode_def}, {@jqfmt_vfsold}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000000740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.sectors\x00', 0x275a, 0x0)
symlink(&(0x7f0000007500)='./file0\x00', 0x0)

51.491768887s ago: executing program 2 (id=5493):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

49.078699184s ago: executing program 2 (id=5500):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@auto_da_alloc_val}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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")
mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0)

48.794375913s ago: executing program 2 (id=5501):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x98)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x246a41, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f000000a980)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a9c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000000aa00)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f000000aa80), 0x651, 0x0)
recvmmsg(r1, &(0x7f000000aac0), 0x4000087, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f000000cbc0), 0x0, 0x0)

48.190158045s ago: executing program 2 (id=5502):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x800714, &(0x7f0000000400)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0xc4042, 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x40)
syz_open_dev$mouse(0x0, 0x8, 0x2c8600)
sendfile(r0, r0, 0x0, 0xfffe80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000002a0001039900000000000000000000000100"/36, 0x24)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="13000000010203", 0x7}, {&(0x7f00000001c0)="44338ec9bdf8bc", 0x7}], 0x2)
write$binfmt_register(r0, &(0x7f0000000940)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7c1c, 0x3a, '', 0x3a, 'GPL\x00', 0x3a, './file1'}, 0x2b)

48.097861124s ago: executing program 35 (id=5502):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x800714, &(0x7f0000000400)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0xc4042, 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x40)
syz_open_dev$mouse(0x0, 0x8, 0x2c8600)
sendfile(r0, r0, 0x0, 0xfffe80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000002a0001039900000000000000000000000100"/36, 0x24)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="13000000010203", 0x7}, {&(0x7f00000001c0)="44338ec9bdf8bc", 0x7}], 0x2)
write$binfmt_register(r0, &(0x7f0000000940)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7c1c, 0x3a, '', 0x3a, 'GPL\x00', 0x3a, './file1'}, 0x2b)

9.912953007s ago: executing program 8 (id=5629):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f0000006180)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f000000b780), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
fdatasync(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x210800, &(0x7f0000000b80)={[{@barrier}, {@barrier_val={'barrier', 0x3d, 0x2}}]}, 0xfa, 0x58e, &(0x7f0000000bc0)="$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")

9.377452351s ago: executing program 8 (id=5633):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9.172594103s ago: executing program 8 (id=5636):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000000, &(0x7f0000000080)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x1, 0x533, &(0x7f0000000280)="$eJzs3WFrJGcdAPD/TLK55C5ttipyFmyLrdwVvd1LY/UUaSuIviqo9f0Zk00It8keyaZeQrEpfgBBRAU/gG8EX/hSkH4EEQr6XlQU0av6Tm9kdiaaze7exssm225+P5js8+wz8/z/z5Cd3Zl92AngwnomIl6JiKmIeD4iFsrn03KJg2LJ13s3K7wZWfbaX5NI8ufuv7Fy2Fden46IK+VmsxHxtS9HfDPpjbuzt39nudlsbJf1envzbn1nb//GxubyemO9sbW0tPjziHjx1s0yanaqcVYj4qUv/vEH3/3Jl1765Se/9bvbf77+7Tytz3+4yDsiVk4VYICi70pnXxzK99H2WQQbk3w8lalxZwEAwEnkn/E/EBEf63z+X4ipzqc5AAAAYJJkL8/Hv5KIDAAAAJhYaUTMR5LWyrkA85GmtVoxh/dDcTlttnban1hr7W6t5m0R1aikaxvNxs1yrnA1KsnaxuONxXKObVFvNl44Vl+KiCci4vsLc516baXVXB33xQ8AAAC4IK483X3+/4+FtFMGAAAAJkx1YAUAAACYFE75AQAAYPI5/wcAAICJ9pVXX82X7PA+3quv7+3eab1+Y7Wxc6e2ubtSW2lt362t/7NcfXNYf81W6+6nYmv3Xr09E+36zt7+7c3W7lb79kbXLbABAACAc/TE02//NomIg8/NdZYofwcQoMsfxp0AMEpT404AGJvpcScAjE1l6BqOEDDpkiHtvZN3imuF8auzyQcAABi9ax/p/f5/pmwbfm0AeD8z1wcALp7ub/fmxpYHcP4qXTMATzQbsLg8cPWsMgLO2+PFw6VB7QN/vOME3/8X1xiy7JESAwAARma+syRprTwHmI80rdUiHosHWTUqydpGs3GzbPvNQuVSXl/sbJkMnTMMAAAAAAAAAAAAAAAAAAAAAAAAABSyLIkMAAAAmGgR6Z+Szq/5R1xbeG6+++rAsbt+/fi1H95bbre3FyNmkr8tRHkzwPaPyudfyNwSAAAAAMZrLv9TnKeXj4vjTgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASfPu/TdWDpfzjPuXL0REtV/86ZjtPM5GJSIu/z2J6SPbJRExNYL4B29FxNV+8ZN4kGVZtcyiX/y5M45f7eya/vHTiLgygvhwkb2dH39e6ff6S+OZzmP/119evjSC+IOPf+l/j39TA44/jx2r9ygTfPKdn9VnBsV/K+LJ6f7Hn8P4SRG/K0ReeXbY4IoO4htf39/v236ky37xj8aqtzfv1nf29m9sbC6vN9YbW0tLi5++9ZlbL966WV/baDbKv33DfO+jv3gwKMV8/JcHxK92j79n/z83bPwdWfz7nXv3P1hUKv3iX3+2//vv1QHx0/K97+NlOW+/dlg+KMpHPfXTXz/1sPGvDhj/7JDxXz/R+OOzz3/1O7/v29KzNwCA87Czt39nudlsbD+kMHuCdf6vQsRp+3l5pPm8FwoxfJ3Z90iqZ1HI3iz+H0/Xzyk37ylkp9l8OkaQxkzP63QqHrXDJOIg7+uE/5AAAMCE+d+H/r7fIAEAAAAAAAAAAAAAAAAAAADn4BF/lmw2Ik688vGYB+MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQ/0nAAD//6H+0dA=")
symlink(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002d00)='./file0/file1\x00', 0x880cc2, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x1, 0x0)
r0 = syz_usb_connect$uac3(0x2, 0xa0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12011003000001403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602ecc784e00700100002000f2409020d0000000001"], &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000002780)={0x44, &(0x7f0000002800)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.714090316s ago: executing program 5 (id=5650):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x800714, &(0x7f0000000400)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0xc4042, 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x40)
syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x2c8600)
sendfile(r0, r0, 0x0, 0xfffe80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000002a00010399000000000000000000", 0x12)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="13000000010203", 0x7}, {&(0x7f00000001c0)="44338ec9bdf8bc", 0x7}], 0x2)
write$binfmt_register(r0, &(0x7f0000000940)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7c1c, 0x3a, '', 0x3a, 'GPL\x00', 0x3a, './file1'}, 0x2b)

5.57169934s ago: executing program 5 (id=5653):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc5c, &(0x7f0000000100)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000000140)="$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")
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0)

5.540096464s ago: executing program 7 (id=5654):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x10, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x104000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008d00), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000008d40)='./file0\x00', &(0x7f0000008d80), 0x0, &(0x7f0000008dc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000480)='./file0\x00', 0xb)

5.461808512s ago: executing program 7 (id=5656):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, r0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002580)={0x73622a85, 0xeed7e89f6334d838})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000026c0)='./binderfs/binder0\x00', 0x0, 0x0)

5.354569673s ago: executing program 5 (id=5657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.344080916s ago: executing program 7 (id=5658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x28)
write(r0, 0x0, 0x0)

4.237098607s ago: executing program 7 (id=5660):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000100))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32], 0x4c}}, 0x0)

4.216810619s ago: executing program 7 (id=5661):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x98)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x246a41, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f000000a980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a9c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000000aa00)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f000000aa80), 0x651, 0x0)
recvmmsg(r0, &(0x7f000000aac0), 0x4000087, 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f000000cbc0), 0x0, 0x0)

4.172417883s ago: executing program 5 (id=5662):
syz_create_resource$futex(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x4000087, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x3261e)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/mcfilter\x00')
read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020)

4.170965943s ago: executing program 8 (id=5663):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000380)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

4.094620942s ago: executing program 6 (id=5664):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x800714, &(0x7f0000000400)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000440)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0xc4042, 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x40)
syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x2c8600)
sendfile(r0, r0, 0x0, 0xfffe80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000002a00010399000000000000000000", 0x12)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="13000000010203", 0x7}, {&(0x7f00000001c0)="44338ec9bdf8bc", 0x7}], 0x2)
write$binfmt_register(r0, &(0x7f0000000940)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7c1c, 0x3a, '', 0x3a, 'GPL\x00', 0x3a, './file1'}, 0x2b)

4.074819633s ago: executing program 0 (id=5665):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e40)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000e80)=0x2)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001140)={0x1, &(0x7f0000001180)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

4.067760484s ago: executing program 8 (id=5666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.183899305s ago: executing program 0 (id=5667):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc5c, &(0x7f0000000100)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000000140)="$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")
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0)

3.182912535s ago: executing program 6 (id=5668):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000a0001000200007f00000000480003006465666c6174650000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

3.181315375s ago: executing program 0 (id=5669):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000080)=""/140, 0x8c}], 0x2, &(0x7f0000000140)=[{&(0x7f0000000300)=""/119, 0x77}], 0x1, 0x0)
r1 = fsopen(&(0x7f0000000240)='bpf\x00', 0x0)
capset(&(0x7f00000001c0), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r3, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x100000)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020)
preadv(r4, &(0x7f0000002580)=[{&(0x7f00000025c0)=""/155, 0x9b}], 0x1, 0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f00000046c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000004700)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000004740)=0x2)
sched_setscheduler(r5, 0x1, &(0x7f0000004780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000047c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000004800)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000004880), 0x651, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
recvmmsg(r6, &(0x7f00000048c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004900), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)={0x28, r8, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

3.180877905s ago: executing program 5 (id=5670):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
r4 = socket(0x11, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bind$packet(r4, 0x0, 0x0)
waitid(0x1, r3, 0x0, 0xb, &(0x7f0000000540))
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4898}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4080)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='.\x02\x00', 0x22000402, &(0x7f0000000840)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000000940)="$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")

3.150738148s ago: executing program 6 (id=5671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x28)
write(r0, &(0x7f0000000240), 0x0)

3.052725698s ago: executing program 6 (id=5672):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, r0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002580)={0x73622a85, 0xeed7e89f6334d838})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x306788b2edba9ed4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000026c0)='./binderfs/binder0\x00', 0x0, 0x0)

2.799894794s ago: executing program 8 (id=5673):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1})
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000340), 0x4000087, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000380)={&(0x7f00000003c0)=""/152, 0x98})

1.459136161s ago: executing program 0 (id=5674):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e40)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000e80)=0x2)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001140)={0x1, &(0x7f0000001180)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.458689231s ago: executing program 0 (id=5675):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
r4 = socket(0x11, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
waitid(0x1, r3, 0x0, 0xb, &(0x7f0000000540))
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4898}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4080)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='.\x02\x00', 0x22000402, &(0x7f0000000840)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000000940)="$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")
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x13, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000b8090000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000000002020782500000000002020207b1af8ff00310000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000e84316de8bec9b55894222e57b3d7ae8a3969b9b13ad2d8c4cb729dc69453df025ed9158ae2fbf49cb2e06d700"/196], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.37378146s ago: executing program 6 (id=5676):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

779.75446ms ago: executing program 5 (id=5677):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/trace_marker\x00', 0x1, 0x5a)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x8000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./debug\x00', 0x1ff)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
read(r1, &(0x7f0000006300)=""/16384, 0x4000)

469.739082ms ago: executing program 0 (id=5678):
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x204001, &(0x7f0000000c80), 0x1, 0xb9f, &(0x7f0000000cc0)="$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")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001880), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f00000018c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000001940)='.\x00', 0x0, 0x2390024, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000008}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./file0\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@ipv6_newrule={0x30, 0x20, 0x1, 0x170bd29, 0x35dfdbff, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x3, 0x1}, [@FRA_SRC={0x14, 0x2, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x4)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000080))
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000000)=0x2)
read$FUSE(r6, 0x0, 0x0)

456.448333ms ago: executing program 6 (id=5679):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0xcc28163f40625b85, 0x0, {0x9, 0x21, 0x2, 0x65, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

0s ago: executing program 7 (id=5680):
syz_create_resource$futex(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x4000087, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/mcfilter\x00')
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

=1, sector=77824, nr_sectors = 8 limit=40427
[ 1102.374029][T17627] loop6: detected capacity change from 0 to 512
[ 1102.374334][   T10] kworker/u4:1: attempt to access beyond end of device
[ 1102.374334][   T10] loop0: rw=1, sector=77912, nr_sectors = 8 limit=40427
[ 1102.471507][T17627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1102.480635][T17627] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1102.904769][T17632] loop2: detected capacity change from 0 to 512
[ 1103.127269][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1103.143678][T17632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1103.192632][T17632] overlayfs: missing 'lowerdir'
[ 1103.290732][ T9928] EXT4-fs (loop2): unmounting filesystem.
[ 1103.380937][T17641] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1103.392727][T17641] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00
[ 1103.419117][T17641] pci 0000:00:07.0: BAR 0 [io  0xc0a0-0xc0bf]
[ 1103.445125][T17641] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f]
[ 1103.558566][T17641] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned
[ 1103.575901][T17641] pci 0000:00:07.0: BAR 0 [io  0xc0a0-0xc0bf]: assigned
[ 1103.625726][T17641] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
[ 1103.795722][T17648] loop2: detected capacity change from 0 to 256
[ 1103.802157][T17647] page:ffffea0004600000 refcount:8 mapcount:7 mapping:0000000000000000 index:0x0 pfn:0x118000
[ 1103.828085][T17647] flags: 0x440000000000004a(referenced|dirty|workingset|zone=1)
[ 1103.829064][T17648] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1103.847875][T17647] raw: 440000000000004a 0000000000000000 dead000000000122 0000000000000000
[ 1103.856695][T17647] raw: 0000000000000000 0000000000000000 0000000800000006 0000000000000000
[ 1103.865662][T17647] page dumped because: unmovable page
[ 1103.871093][T17648] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1103.876164][T17647] page_owner tracks the page as allocated
[ 1103.885953][T17647] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 16747, tgid 16747 (syz-executor), ts 1052585067735, free_ts 1048914249782
[ 1103.893379][T17648] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1103.905541][T17647]  post_alloc_hook+0x1f5/0x210
[ 1103.922243][T17647]  prep_new_page+0x1c/0x110
[ 1103.926962][T17647]  get_page_from_freelist+0x2ca9/0x2d20
[ 1103.932860][T17647]  __alloc_pages+0x1fa/0x610
[ 1103.937571][T17647]  __vmalloc_node_range+0x8ca/0x1440
[ 1103.944066][T17647]  vmalloc_user+0x73/0x80
[ 1103.948529][T17647]  kcov_ioctl+0x57/0x610
[ 1103.953245][T17647]  __se_sys_ioctl+0x12f/0x1b0
[ 1103.958588][T17647]  __x64_sys_ioctl+0x7b/0x90
[ 1103.964445][T17647]  x64_sys_call+0x58b/0x9a0
[ 1103.969163][T17647]  do_syscall_64+0x4c/0xa0
[ 1103.974946][T17647]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1103.981006][T17647] page last free stack trace:
[ 1103.987112][T17647]  free_unref_page_prepare+0x81b/0x820
[ 1104.036405][T17650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17650 comm=syz.6.5332
[ 1104.051738][T17650] loop6: detected capacity change from 0 to 512
[ 1104.071002][T17647]  free_unref_page_list+0x117/0x8d0
[ 1104.076331][T17647]  release_pages+0xc7e/0xce0
[ 1104.081130][T17647]  __pagevec_release+0x71/0xe0
[ 1104.086150][T17647]  truncate_inode_pages_range+0x362/0xd20
[ 1104.091922][T17647]  truncate_inode_pages_final+0x82/0x90
[ 1104.097518][T17647]  f2fs_evict_inode+0x282/0x1850
[ 1104.102587][T17647]  evict+0x4c4/0x8c0
[ 1104.106512][T17647]  evict_inodes+0x620/0x6a0
[ 1104.111036][T17647]  generic_shutdown_super+0x96/0x480
[ 1104.116381][T17647]  kill_block_super+0x7f/0xf0
[ 1104.121131][T17647]  kill_f2fs_super+0x310/0x3d0
[ 1104.126108][T17647]  deactivate_locked_super+0xb5/0x120
[ 1104.131520][T17647]  deactivate_super+0xaf/0xe0
[ 1104.136257][T17647]  cleanup_mnt+0x45e/0x4e0
[ 1104.140697][T17647]  __cleanup_mnt+0x19/0x20
[ 1104.328073][T17650] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5332: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1104.342986][T17650] EXT4-fs (loop6): Remounting filesystem read-only
[ 1104.349629][T17650] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5332: error -117 reading directory block
[ 1104.362460][T17650] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[ 1104.371014][T17650] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5332: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1104.386338][T17650] EXT4-fs (loop6): Remounting filesystem read-only
[ 1104.393171][T17650] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5332: error -117 reading directory block
[ 1104.405926][T17650] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[ 1104.414158][T17650] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1104.556828][T17655] loop0: detected capacity change from 0 to 512
[ 1104.753625][T17655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1104.780361][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1104.833250][T17655] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1104.876130][T17655] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5334: invalid indirect mapped block 2683928664 (level 1)
[ 1104.920156][T17655] EXT4-fs (loop0): Remounting filesystem read-only
[ 1105.039097][T17655] EXT4-fs (loop0): 1 truncate cleaned up
[ 1106.054521][T17655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1106.156405][T17655] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.5334: Invalid block bitmap block 3 in block_group 0
[ 1106.227836][T17655] EXT4-fs (loop0): Remounting filesystem read-only
[ 1106.372140][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1107.046864][T17682] loop0: detected capacity change from 0 to 4096
[ 1107.443042][T17682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1107.493554][T17682] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1107.514890][T17682] xt_hashlimit: max too large, truncated to 1048576
[ 1107.569229][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1108.638247][T17698] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1109.099742][T17705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17705 comm=syz.5.5346
[ 1109.132361][T17705] loop5: detected capacity change from 0 to 512
[ 1109.279316][T17705] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5346: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1109.294555][T17705] EXT4-fs (loop5): Remounting filesystem read-only
[ 1109.301102][T17705] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5346: error -117 reading directory block
[ 1109.314198][T17705] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[ 1109.322648][T17705] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5346: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1109.338416][T17705] EXT4-fs (loop5): Remounting filesystem read-only
[ 1109.345161][T17705] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5346: error -117 reading directory block
[ 1109.358007][T17705] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[ 1109.366472][T17705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1109.806682][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1109.909007][T17712] loop5: detected capacity change from 0 to 256
[ 1109.927359][T17701] loop0: detected capacity change from 0 to 40427
[ 1109.942389][T17712] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1109.958664][T17712] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1109.996074][T17701] F2FS-fs (loop0): Image doesn't support compression
[ 1110.046269][T17701] F2FS-fs (loop0): fault_type options not supported
[ 1110.057878][T17712] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1110.193869][T17701] F2FS-fs (loop0): invalid crc value
[ 1110.213338][T17701] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1110.329762][T17714] loop2: detected capacity change from 0 to 40427
[ 1110.336358][T17701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1110.344748][T17714] F2FS-fs (loop2): Image doesn't support compression
[ 1110.351644][T17714] F2FS-fs (loop2): fault_type options not supported
[ 1110.368678][T17714] F2FS-fs (loop2): invalid crc value
[ 1110.566661][T17714] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1111.314508][T17701] syz.0.5347: attempt to access beyond end of device
[ 1111.314508][T17701] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1111.371682][T17725] loop5: detected capacity change from 0 to 128
[ 1111.402384][T17714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1111.437097][T17725] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1111.489304][T17725] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1111.531882][T17714] syz.2.5351: attempt to access beyond end of device
[ 1111.531882][T17714] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1111.560934][T15347] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1111.666053][T17735] loop0: detected capacity change from 0 to 4096
[ 1112.615093][T17744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17744 comm=syz.3.5359
[ 1112.630519][T17744] loop3: detected capacity change from 0 to 512
[ 1112.720073][T17744] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 8: comm syz.3.5359: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1112.734321][T17744] EXT4-fs (loop3): Remounting filesystem read-only
[ 1112.740843][T17744] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.5359: error -117 reading directory block
[ 1112.748379][T17735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1112.753438][T17744] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[ 1112.770682][T17744] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 8: comm syz.3.5359: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1112.812970][T17744] EXT4-fs (loop3): Remounting filesystem read-only
[ 1112.819568][T17744] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.5359: error -117 reading directory block
[ 1112.832261][T17744] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[ 1112.840490][T17744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1113.058376][T17749] loop6: detected capacity change from 0 to 512
[ 1113.548283][T17735] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1113.563475][T17735] xt_hashlimit: max too large, truncated to 1048576
[ 1113.574581][T17749] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1113.582000][T10651] EXT4-fs (loop3): unmounting filesystem.
[ 1113.589851][T17749] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.5361: inode has both inline data and extents flags
[ 1113.629157][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1113.669831][T17749] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.5361: couldn't read orphan inode 15 (err -117)
[ 1113.743383][T17749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1113.781818][T17737] loop5: detected capacity change from 0 to 40427
[ 1113.846684][T17737] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1113.920614][T17737] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1113.987162][T17737] F2FS-fs (loop5): invalid crc value
[ 1114.019923][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1114.031303][T17737] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1114.096995][T17737] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1114.104721][T17737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1114.552384][T17754] page:ffffea0004600000 refcount:8 mapcount:7 mapping:0000000000000000 index:0x0 pfn:0x118000
[ 1114.556733][T17765] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5365'.
[ 1114.577451][T17754] flags: 0x460000000000004a(referenced|dirty|workingset|zone=1)
[ 1114.587666][T17754] raw: 460000000000004a 0000000000000000 dead000000000122 0000000000000000
[ 1114.606970][T17754] raw: 0000000000000000 0000000000000000 0000000a00000008 0000000000000000
[ 1114.622415][T17754] page dumped because: unmovable page
[ 1114.627874][T17754] page_owner tracks the page as allocated
[ 1114.653883][T17754] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 16747, tgid 16747 (syz-executor), ts 1052585067735, free_ts 1048914249782
[ 1114.676799][T17737] syz.5.5357: attempt to access beyond end of device
[ 1114.676799][T17737] loop5: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[ 1114.682376][T17754]  post_alloc_hook+0x1f5/0x210
[ 1114.709930][T17754]  prep_new_page+0x1c/0x110
[ 1114.714511][T17754]  get_page_from_freelist+0x2ca9/0x2d20
[ 1114.727352][T17754]  __alloc_pages+0x1fa/0x610
[ 1114.737865][T17737] syz.5.5357: attempt to access beyond end of device
[ 1114.737865][T17737] loop5: rw=2049, sector=79872, nr_sectors = 2048 limit=40427
[ 1114.790505][T17754]  __vmalloc_node_range+0x8ca/0x1440
[ 1114.796113][T17754]  vmalloc_user+0x73/0x80
[ 1114.800605][T17754]  kcov_ioctl+0x57/0x610
[ 1114.805114][T17754]  __se_sys_ioctl+0x12f/0x1b0
[ 1114.809800][T17754]  __x64_sys_ioctl+0x7b/0x90
[ 1114.814589][T17754]  x64_sys_call+0x58b/0x9a0
[ 1114.817503][T17763] loop0: detected capacity change from 0 to 40427
[ 1114.819106][T17754]  do_syscall_64+0x4c/0xa0
[ 1114.832653][T17754]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1115.267453][T17754] page last free stack trace:
[ 1115.272339][T17754]  free_unref_page_prepare+0x81b/0x820
[ 1115.278005][T17754]  free_unref_page_list+0x117/0x8d0
[ 1115.283505][T17754]  release_pages+0xc7e/0xce0
[ 1115.288239][T17754]  __pagevec_release+0x71/0xe0
[ 1115.293121][T17754]  truncate_inode_pages_range+0x362/0xd20
[ 1115.298959][T17754]  truncate_inode_pages_final+0x82/0x90
[ 1115.304726][T17754]  f2fs_evict_inode+0x282/0x1850
[ 1115.309818][T17754]  evict+0x4c4/0x8c0
[ 1115.313849][T17754]  evict_inodes+0x620/0x6a0
[ 1115.318436][T17754]  generic_shutdown_super+0x96/0x480
[ 1115.323845][T17754]  kill_block_super+0x7f/0xf0
[ 1115.328623][T17754]  kill_f2fs_super+0x310/0x3d0
[ 1115.333534][T17754]  deactivate_locked_super+0xb5/0x120
[ 1115.339034][T17754]  deactivate_super+0xaf/0xe0
[ 1115.343902][T17754]  cleanup_mnt+0x45e/0x4e0
[ 1115.348444][T17754]  __cleanup_mnt+0x19/0x20
[ 1115.457309][T17763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1115.726693][T17737] syz.5.5357: attempt to access beyond end of device
[ 1115.726693][T17737] loop5: rw=2049, sector=49152, nr_sectors = 2056 limit=40427
[ 1115.740294][T17763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1115.751401][T17763] F2FS-fs (loop0): invalid crc value
[ 1115.776982][T17763] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1115.788434][T17737] syz.5.5357: attempt to access beyond end of device
[ 1115.788434][T17737] loop5: rw=2049, sector=51208, nr_sectors = 2040 limit=40427
[ 1115.812000][T17737] syz.5.5357: attempt to access beyond end of device
[ 1115.812000][T17737] loop5: rw=2049, sector=57344, nr_sectors = 3704 limit=40427
[ 1115.829801][T17737] syz.5.5357: attempt to access beyond end of device
[ 1115.829801][T17737] loop5: rw=2049, sector=61048, nr_sectors = 904 limit=40427
[ 1115.875312][T17763] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1115.882455][T17763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1115.987077][ T1221] kworker/u4:6: attempt to access beyond end of device
[ 1115.987077][ T1221] loop5: rw=1, sector=77824, nr_sectors = 16 limit=40427
[ 1116.105917][T17799] loop3: detected capacity change from 0 to 4096
[ 1116.138452][T17799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1116.194462][T17799] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[ 1116.219894][T17799] xt_hashlimit: max too large, truncated to 1048576
[ 1116.281741][T10651] EXT4-fs (loop3): unmounting filesystem.
[ 1116.376919][T17809] loop3: detected capacity change from 0 to 128
[ 1116.390707][T17809] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1116.419061][T17809] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1116.432011][T17809] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1116.451353][T17809] FAT-fs (loop3): Filesystem has been set read-only
[ 1116.470369][T17814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17814 comm=syz.0.5377
[ 1116.485353][T17814] loop0: detected capacity change from 0 to 512
[ 1116.497635][T17814] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5377: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1116.511839][T17814] EXT4-fs (loop0): Remounting filesystem read-only
[ 1116.518433][T17814] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5377: error -117 reading directory block
[ 1116.528250][T17820] loop3: detected capacity change from 0 to 256
[ 1116.531010][T17814] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1116.545577][T17814] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5377: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1116.560200][T17820] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1116.570866][T17814] EXT4-fs (loop0): Remounting filesystem read-only
[ 1116.577603][T17814] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5377: error -117 reading directory block
[ 1116.590162][T17814] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1116.593201][T17820] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1116.598348][T17814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1116.633950][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1116.681772][T17820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1116.788003][T17822] loop6: detected capacity change from 0 to 40427
[ 1116.798155][T17822] F2FS-fs (loop6): Image doesn't support compression
[ 1116.805011][T17822] F2FS-fs (loop6): fault_type options not supported
[ 1116.813872][T17822] F2FS-fs (loop6): invalid crc value
[ 1116.828849][T17822] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1117.014740][T17822] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1117.809784][T17844] loop5: detected capacity change from 0 to 4096
[ 1118.886770][T17844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1119.071651][T17855] loop0: detected capacity change from 0 to 128
[ 1119.092908][T17844] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1119.103109][T17855] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1119.132522][T17844] xt_hashlimit: max too large, truncated to 1048576
[ 1119.150892][T17855] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1119.216082][T17855] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1119.226982][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1119.258157][T17855] FAT-fs (loop0): Filesystem has been set read-only
[ 1119.435790][T17846] loop6: detected capacity change from 0 to 40427
[ 1119.447231][T17863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17863 comm=syz.3.5394
[ 1119.462279][T17863] loop3: detected capacity change from 0 to 512
[ 1119.473137][T17846] F2FS-fs (loop6): Image doesn't support compression
[ 1119.479866][T17846] F2FS-fs (loop6): fault_type options not supported
[ 1119.503309][T17863] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 8: comm syz.3.5394: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1119.517658][T17863] EXT4-fs (loop3): Remounting filesystem read-only
[ 1119.517987][T17846] F2FS-fs (loop6): invalid crc value
[ 1119.524895][T17863] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.5394: error -117 reading directory block
[ 1119.542561][T17863] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[ 1119.550033][T17846] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1119.550779][T17863] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 8: comm syz.3.5394: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1119.572830][T17863] EXT4-fs (loop3): Remounting filesystem read-only
[ 1119.579931][T17863] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.5394: error -117 reading directory block
[ 1119.592525][T17863] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[ 1119.600712][T17863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1119.626065][T10651] EXT4-fs (loop3): unmounting filesystem.
[ 1119.695618][T17846] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1119.840633][T17861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17861 comm=syz.5.5392
[ 1119.862764][T17859] loop0: detected capacity change from 0 to 40427
[ 1119.872993][T17859] F2FS-fs (loop0): Image doesn't support compression
[ 1119.884217][T17846] syz.6.5387: attempt to access beyond end of device
[ 1119.884217][T17846] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1119.922397][T17859] F2FS-fs (loop0): fault_type options not supported
[ 1119.931455][T17861] loop5: detected capacity change from 0 to 512
[ 1119.959848][T17859] F2FS-fs (loop0): invalid crc value
[ 1120.011871][T17861] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5392: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1120.035012][T17859] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1120.090292][T17861] EXT4-fs (loop5): Remounting filesystem read-only
[ 1120.128928][T17861] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5392: error -117 reading directory block
[ 1120.178533][T17861] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[ 1120.193249][T17859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1120.231350][T17861] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5392: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1120.334916][T17861] EXT4-fs (loop5): Remounting filesystem read-only
[ 1120.382396][T17861] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5392: error -117 reading directory block
[ 1120.404105][T17859] syz.0.5393: attempt to access beyond end of device
[ 1120.404105][T17859] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1120.462420][T17861] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[ 1120.478031][T17883] loop6: detected capacity change from 0 to 256
[ 1120.497518][T17861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1120.605168][T17878] loop3: detected capacity change from 0 to 40427
[ 1120.622886][T17878] F2FS-fs (loop3): Image doesn't support compression
[ 1120.645349][T17878] F2FS-fs (loop3): fault_type options not supported
[ 1120.671663][T17878] F2FS-fs (loop3): invalid crc value
[ 1120.713841][T17878] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1120.728215][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1120.796247][T17896] loop5: detected capacity change from 0 to 128
[ 1120.813787][T17878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1120.819930][T17896] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1120.848985][T17896] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1120.862230][T17896] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1120.871131][T17896] FAT-fs (loop5): Filesystem has been set read-only
[ 1121.145290][T17910] loop6: detected capacity change from 0 to 512
[ 1121.309555][T17910] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1121.397737][T17910] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1121.747130][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1122.002363][  T992] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1122.025144][T17925] loop2: detected capacity change from 0 to 40427
[ 1122.042726][T17925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1122.050882][T17925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1122.060782][T17925] F2FS-fs (loop2): invalid crc value
[ 1122.067199][T17925] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1122.089100][T17925] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1122.096420][T17925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1122.274565][T17933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17933 comm=syz.6.5415
[ 1122.307234][T17933] loop6: detected capacity change from 0 to 512
[ 1122.418592][T17933] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5415: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1122.433562][T17933] EXT4-fs (loop6): Remounting filesystem read-only
[ 1122.440113][T17933] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5415: error -117 reading directory block
[ 1122.452854][T17933] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[ 1122.463500][T17933] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5415: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1122.479642][T17933] EXT4-fs (loop6): Remounting filesystem read-only
[ 1122.486346][T17933] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5415: error -117 reading directory block
[ 1122.499038][T17933] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[ 1122.507283][T17933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1122.981317][T17937] loop0: detected capacity change from 0 to 4096
[ 1123.037141][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1123.037296][T17937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1123.067245][  T992] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1123.074776][T17937] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1123.599668][T17945] syz.2.5414: attempt to access beyond end of device
[ 1123.599668][T17945] loop2: rw=2049, sector=77824, nr_sectors = 2056 limit=40427
[ 1123.685760][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1123.748304][T17945] syz.2.5414: attempt to access beyond end of device
[ 1123.748304][T17945] loop2: rw=2049, sector=79880, nr_sectors = 2040 limit=40427
[ 1124.047786][  T992] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[ 1124.060502][T17945] syz.2.5414: attempt to access beyond end of device
[ 1124.060502][T17945] loop2: rw=2049, sector=49152, nr_sectors = 2056 limit=40427
[ 1124.082978][T17955] loop5: detected capacity change from 0 to 256
[ 1124.100020][T17955] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1124.109758][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1124.184386][   T28] audit: type=1400 audit(1793721469.000:864): avc:  denied  { lock } for  pid=17951 comm="syz.3.5422" path="socket:[108625]" dev="sockfs" ino=108625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1124.468938][T17955] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1124.507194][  T992] usb 6-1: config 0 descriptor??
[ 1124.512796][  T992] usb 6-1: can't set config #0, error -71
[ 1124.519400][  T992] usb 6-1: USB disconnect, device number 97
[ 1124.526880][T17955] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1124.560930][T17945] syz.2.5414: attempt to access beyond end of device
[ 1124.560930][T17945] loop2: rw=2049, sector=51208, nr_sectors = 2040 limit=40427
[ 1124.606650][T17945] syz.2.5414: attempt to access beyond end of device
[ 1124.606650][T17945] loop2: rw=2049, sector=57344, nr_sectors = 4664 limit=40427
[ 1124.676346][T17945] syz.2.5414: attempt to access beyond end of device
[ 1124.676346][T17945] loop2: rw=2049, sector=62008, nr_sectors = 7216 limit=40427
[ 1126.539923][   T43] kworker/u4:2: attempt to access beyond end of device
[ 1126.539923][   T43] loop2: rw=1, sector=77824, nr_sectors = 16 limit=40427
[ 1126.720134][T17976] loop0: detected capacity change from 0 to 512
[ 1127.713241][T17976] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1127.721360][T17976] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.5429: inode has both inline data and extents flags
[ 1127.734835][T17976] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.5429: couldn't read orphan inode 15 (err -117)
[ 1127.747023][T17976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1128.708766][T17987] loop5: detected capacity change from 0 to 128
[ 1128.718107][T17987] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1128.730252][T17987] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1128.743419][T17987] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1128.752101][T17987] FAT-fs (loop5): Filesystem has been set read-only
[ 1129.391408][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1129.778442][T18006] loop5: detected capacity change from 0 to 512
[ 1129.785142][T18006] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value
[ 1130.447577][T17990] loop6: detected capacity change from 0 to 40427
[ 1130.474106][T17990] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1130.702414][T17990] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1130.716419][T17990] F2FS-fs (loop6): invalid crc value
[ 1130.739666][T18010] loop0: detected capacity change from 0 to 40427
[ 1130.752900][T18010] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1130.770328][T18017] loop5: detected capacity change from 0 to 4096
[ 1130.778329][T18010] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1130.791502][T18017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1130.805524][T17990] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1130.815765][T18010] F2FS-fs (loop0): invalid crc value
[ 1130.827479][T18017] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1130.837793][T18010] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1130.892453][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1130.930502][T17990] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1130.936336][T18010] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1130.942168][T17990] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1130.947757][T18010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1131.108326][T17990] syz.6.5434: attempt to access beyond end of device
[ 1131.108326][T17990] loop6: rw=2049, sector=77824, nr_sectors = 3064 limit=40427
[ 1131.121410][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.121410][T18010] loop0: rw=2049, sector=77824, nr_sectors = 2664 limit=40427
[ 1131.125576][T17990] syz.6.5434: attempt to access beyond end of device
[ 1131.125576][T17990] loop6: rw=2049, sector=80888, nr_sectors = 1032 limit=40427
[ 1131.140960][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.140960][T18010] loop0: rw=2049, sector=80488, nr_sectors = 1432 limit=40427
[ 1131.152743][T17990] syz.6.5434: attempt to access beyond end of device
[ 1131.152743][T17990] loop6: rw=2049, sector=49152, nr_sectors = 512 limit=40427
[ 1131.188320][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.188320][T18010] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1131.220748][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.220748][T18010] loop0: rw=2049, sector=57344, nr_sectors = 7936 limit=40427
[ 1131.242405][ T4609] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1131.281282][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.281282][T17989] loop6: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[ 1131.299507][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.299507][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.463976][ T4609] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1131.514831][ T4609] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[ 1131.542752][T18009] bio_check_eod: 2855 callbacks suppressed
[ 1131.542788][T18009] syz.0.5438: attempt to access beyond end of device
[ 1131.542788][T18009] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.591741][ T4609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.618061][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.618061][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.634554][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.634554][T18010] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.649856][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.649856][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.669057][ T4609] usb 6-1: config 0 descriptor??
[ 1131.681826][T18009] syz.0.5438: attempt to access beyond end of device
[ 1131.681826][T18009] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.698291][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.698291][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.714396][T18010] syz.0.5438: attempt to access beyond end of device
[ 1131.714396][T18010] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.729925][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.729925][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.745488][T18009] syz.0.5438: attempt to access beyond end of device
[ 1131.745488][T18009] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1131.765319][T17989] syz.6.5434: attempt to access beyond end of device
[ 1131.765319][T17989] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1132.084384][ T4609] usbhid 6-1:0.0: can't add hid device: -71
[ 1132.172476][ T4609] usbhid: probe of 6-1:0.0 failed with error -71
[ 1132.188207][ T4609] usb 6-1: USB disconnect, device number 98
[ 1133.364082][T18062] loop6: detected capacity change from 0 to 256
[ 1133.398764][T18062] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1133.452041][T18062] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[ 1133.483459][T18062] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1133.612754][T18070] loop2: detected capacity change from 0 to 512
[ 1133.752429][T18070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1133.891830][T18070] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5455: invalid indirect mapped block 32768 (level 2)
[ 1133.929908][T18070] EXT4-fs (loop2): 1 orphan inode deleted
[ 1133.956286][T18070] EXT4-fs (loop2): 1 truncate cleaned up
[ 1133.987095][T18070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1134.701145][ T9928] EXT4-fs (loop2): unmounting filesystem.
[ 1134.712518][T18066] loop3: detected capacity change from 0 to 40427
[ 1134.719825][T18066] F2FS-fs (loop3): Image doesn't support compression
[ 1134.726700][T18066] F2FS-fs (loop3): fault_type options not supported
[ 1134.733716][T18066] F2FS-fs (loop3): invalid crc value
[ 1134.739881][T18066] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1136.553165][T18099] xt_hashlimit: max too large, truncated to 1048576
[ 1136.597812][T18066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1137.188785][T18107] loop3: detected capacity change from 0 to 512
[ 1137.349186][T18107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1137.543562][T18107] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 1137.566676][T18107] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5465: invalid indirect mapped block 2683928664 (level 1)
[ 1137.611295][T18107] EXT4-fs (loop3): Remounting filesystem read-only
[ 1137.638136][T18090] loop2: detected capacity change from 0 to 40427
[ 1137.657626][T18103] loop5: detected capacity change from 0 to 40427
[ 1137.660833][T18107] EXT4-fs (loop3): 1 truncate cleaned up
[ 1137.671097][T18107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1137.680861][T18103] F2FS-fs (loop5): Image doesn't support compression
[ 1137.687758][T18103] F2FS-fs (loop5): fault_type options not supported
[ 1137.694837][T18090] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1137.702832][T18090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1137.711248][T18103] F2FS-fs (loop5): invalid crc value
[ 1137.717572][T18090] F2FS-fs (loop2): invalid crc value
[ 1137.723380][T18103] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1137.759503][T18090] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1137.768257][T18103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1137.779573][T10651] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1137.832934][T18103] bio_check_eod: 314 callbacks suppressed
[ 1137.832953][T18103] syz.5.5464: attempt to access beyond end of device
[ 1137.832953][T18103] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1137.895283][T10651] EXT4-fs (loop3): Remounting filesystem read-only
[ 1137.903183][T10651] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[ 1137.918863][T18090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1137.926045][T18090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1137.933823][T10651] EXT4-fs (loop3): Remounting filesystem read-only
[ 1137.940365][T10651] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[ 1138.103002][T10651] EXT4-fs (loop3): Remounting filesystem read-only
[ 1138.125618][T10651] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz-executor: corrupted in-inode xattr
[ 1138.138059][   T28] audit: type=1400 audit(1793721482.950:865): avc:  denied  { setattr } for  pid=10651 comm="syz-executor" path="/450/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1138.285032][T10651] EXT4-fs (loop3): Remounting filesystem read-only
[ 1138.320847][T10651] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz-executor: corrupted in-inode xattr
[ 1138.400967][T10651] EXT4-fs (loop3): Remounting filesystem read-only
[ 1139.019968][T18109] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[ 1139.051719][T18109] EXT4-fs (loop3): Remounting filesystem read-only
[ 1139.066341][T18133] loop0: detected capacity change from 0 to 4096
[ 1139.090480][T18133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1139.148980][T14789] EXT4-fs (loop3): unmounting filesystem.
[ 1139.156665][T18139] xt_hashlimit: max too large, truncated to 1048576
[ 1139.172694][  T307] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1139.176996][T18133] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1139.761328][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1140.023185][ T1273] device bridge_slave_1 left promiscuous mode
[ 1140.029338][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.057185][ T1273] device bridge_slave_0 left promiscuous mode
[ 1140.074489][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.103119][ T1273] device veth1_macvtap left promiscuous mode
[ 1140.109271][ T1273] device veth0_vlan left promiscuous mode
[ 1140.117260][T18138] loop2: detected capacity change from 0 to 40427
[ 1140.125952][T18138] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1140.153821][T18138] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1140.168410][T18138] F2FS-fs (loop2): invalid crc value
[ 1140.189004][T18138] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1140.212392][  T307] usb 7-1: Using ep0 maxpacket: 16
[ 1140.221885][  T307] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1140.233626][  T307] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1140.243654][  T307] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[ 1140.256882][  T307] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1140.260064][T18138] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1140.264086][  T307] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1140.270616][T18138] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1140.280154][  T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.305406][  T307] usb 7-1: config 0 descriptor??
[ 1140.381777][T18149] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.402398][T18149] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.425762][T18149] device bridge_slave_0 entered promiscuous mode
[ 1140.443773][T18149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.450864][T18149] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.468788][T18149] device bridge_slave_1 entered promiscuous mode
[ 1140.613775][T18138] syz.2.5472: attempt to access beyond end of device
[ 1140.613775][T18138] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1140.860266][T18137] syz.2.5472: attempt to access beyond end of device
[ 1140.860266][T18137] loop2: rw=524288, sector=77824, nr_sectors = 56 limit=40427
[ 1141.068172][T18149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1141.075290][T18149] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1141.082612][T18149] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.089641][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1141.195569][T18137] syz.2.5472: attempt to access beyond end of device
[ 1141.195569][T18137] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1141.350951][T18138] syz.2.5472: attempt to access beyond end of device
[ 1141.350951][T18138] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1141.381745][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1141.389478][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1141.396789][T18137] syz.2.5472: attempt to access beyond end of device
[ 1141.396789][T18137] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1141.412545][  T307] usbhid 7-1:0.0: can't add hid device: -71
[ 1141.418640][  T307] usbhid: probe of 7-1:0.0 failed with error -71
[ 1141.434038][  T307] usb 7-1: USB disconnect, device number 4
[ 1141.499234][T18138] syz.2.5472: attempt to access beyond end of device
[ 1141.499234][T18138] loop2: rw=2049, sector=57344, nr_sectors = 3048 limit=40427
[ 1141.500483][T18163] syz.2.5472: attempt to access beyond end of device
[ 1141.500483][T18163] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1141.529396][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1141.536833][T18163] syz.2.5472: attempt to access beyond end of device
[ 1141.536833][T18163] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1141.538357][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1141.550794][T18163] syz.2.5472: attempt to access beyond end of device
[ 1141.550794][T18163] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1141.558514][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1141.666880][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1141.764231][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.771332][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1141.794089][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1141.802604][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1141.810848][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1141.817919][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1141.838668][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1141.862722][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1141.871369][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1141.883850][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1141.909646][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1141.921266][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1141.941587][T18149] device veth0_vlan entered promiscuous mode
[ 1141.950097][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1141.960200][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1141.972357][ T1414] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1141.981148][T18149] device veth1_macvtap entered promiscuous mode
[ 1141.991182][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1142.000097][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1142.011911][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1142.022785][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1142.033482][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1142.056687][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1142.065633][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1142.074848][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1142.092732][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1142.212470][ T1414] usb 6-1: Using ep0 maxpacket: 16
[ 1142.219726][ T1414] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[ 1142.233921][ T1414] usb 6-1: config 0 has no interface number 0
[ 1142.272133][ T1414] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1142.359220][T18183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18183 comm=syz.7.5477
[ 1142.388396][T18183] loop7: detected capacity change from 0 to 512
[ 1142.494574][ T1414] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1142.563357][T18183] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 8: comm syz.7.5477: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1142.578373][T18183] EXT4-fs (loop7): Remounting filesystem read-only
[ 1142.585040][T18183] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.5477: error -117 reading directory block
[ 1142.597962][T18183] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117
[ 1142.606377][T18183] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 8: comm syz.7.5477: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1142.621873][T18183] EXT4-fs (loop7): Remounting filesystem read-only
[ 1142.628473][T18183] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.5477: error -117 reading directory block
[ 1142.641363][T18183] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[ 1142.649607][T18183] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1142.694561][T18188] loop0: detected capacity change from 0 to 128
[ 1142.781796][ T1414] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1142.796339][T18188] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1142.812386][T18187] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[ 1142.889737][ T1414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.901023][T18187] EXT4-fs (loop7): Remounting filesystem read-only
[ 1142.931836][T18188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1142.962446][ T1414] usb 6-1: Product: syz
[ 1142.983825][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1142.993380][ T1414] usb 6-1: Manufacturer: syz
[ 1142.997996][ T1414] usb 6-1: SerialNumber: syz
[ 1143.022013][T18188] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1143.032481][ T1414] usb 6-1: config 0 descriptor??
[ 1143.038982][T18179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1143.051473][T18188] FAT-fs (loop0): Filesystem has been set read-only
[ 1143.058245][T18179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1143.305322][T18179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1143.342159][T18179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1144.045845][ T1414] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1144.302277][ T1414] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1144.342341][ T1414] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[ 1144.367218][T18202] loop7: detected capacity change from 0 to 4096
[ 1144.394888][T18190] loop2: detected capacity change from 0 to 40427
[ 1144.435477][T18190] F2FS-fs (loop2): Image doesn't support compression
[ 1144.452499][T18190] F2FS-fs (loop2): fault_type options not supported
[ 1144.469899][T18190] F2FS-fs (loop2): invalid crc value
[ 1144.490335][T18202] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1144.500107][T18190] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1144.529779][T18202] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[ 1144.548750][T18202] xt_hashlimit: max too large, truncated to 1048576
[ 1144.581511][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1144.587817][T18190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1144.625819][T18208] loop0: detected capacity change from 0 to 256
[ 1144.627318][ T1414] asix: probe of 6-1:0.34 failed with error -61
[ 1144.636543][T18190] bio_check_eod: 1906 callbacks suppressed
[ 1144.636561][T18190] syz.2.5485: attempt to access beyond end of device
[ 1144.636561][T18190] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1144.641422][T18208] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1144.672529][T18208] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1144.701729][T18208] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1145.728704][   T60] usb 6-1: USB disconnect, device number 99
[ 1146.669278][T18232] loop6: detected capacity change from 0 to 512
[ 1146.741965][T18232] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1146.751424][T18232] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1146.954095][T18228] loop7: detected capacity change from 0 to 40427
[ 1146.971014][T18228] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1147.001035][T18228] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1147.043284][T18228] F2FS-fs (loop7): invalid crc value
[ 1147.049357][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1147.073524][T18228] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1147.082074][T18224] loop5: detected capacity change from 0 to 40427
[ 1147.102560][T18224] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1147.110360][T18224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1147.157251][T18224] F2FS-fs (loop5): invalid crc value
[ 1147.165507][T18228] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1147.172254][T18245] loop2: detected capacity change from 0 to 512
[ 1147.182722][T18228] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1147.183415][T18245] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1147.216150][T18245] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[ 1147.216302][T18224] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1147.226351][T18245] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5500: invalid indirect mapped block 2683928664 (level 1)
[ 1147.245515][T18245] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.252274][T18245] EXT4-fs (loop2): 1 truncate cleaned up
[ 1147.275173][T18245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1147.292797][T18224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1147.299874][T18224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1147.312409][   T60] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1147.334899][T18254] loop6: detected capacity change from 0 to 512
[ 1147.372855][T18254] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value
[ 1147.379274][ T9928] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1147.426578][T18228] syz.7.5497: attempt to access beyond end of device
[ 1147.426578][T18228] loop7: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1147.443554][ T9928] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.451410][ T9928] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[ 1147.501241][T18228] syz.7.5497: attempt to access beyond end of device
[ 1147.501241][T18228] loop7: rw=2049, sector=49152, nr_sectors = 1584 limit=40427
[ 1147.505409][T18255] syz.5.5495: attempt to access beyond end of device
[ 1147.505409][T18255] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1147.520550][T18227] syz.7.5497: attempt to access beyond end of device
[ 1147.520550][T18227] loop7: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[ 1147.545438][ T9928] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.552343][ T9928] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[ 1147.553283][T18227] syz.7.5497: attempt to access beyond end of device
[ 1147.553283][T18227] loop7: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1147.572590][T18255] syz.5.5495: attempt to access beyond end of device
[ 1147.572590][T18255] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1147.590054][T18227] syz.7.5497: attempt to access beyond end of device
[ 1147.590054][T18227] loop7: rw=0, sector=77824, nr_sectors = 8 limit=40427
[ 1147.604238][   T60] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1147.623711][ T9928] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.631117][   T60] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[ 1147.643886][ T9928] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz-executor: corrupted in-inode xattr
[ 1147.651906][T18255] syz.5.5495: attempt to access beyond end of device
[ 1147.651906][T18255] loop5: rw=2049, sector=57344, nr_sectors = 4000 limit=40427
[ 1147.673552][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.692620][ T9928] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.706330][   T60] usb 1-1: config 0 descriptor??
[ 1147.714061][T18223] syz.5.5495: attempt to access beyond end of device
[ 1147.714061][T18223] loop5: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[ 1147.718137][ T9928] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz-executor: corrupted in-inode xattr
[ 1147.742546][ T9928] EXT4-fs (loop2): Remounting filesystem read-only
[ 1147.935691][T14865] EXT4-fs (loop2): unmounting filesystem.
[ 1148.149303][   T60] usbhid 1-1:0.0: can't add hid device: -71
[ 1148.162407][   T60] usbhid: probe of 1-1:0.0 failed with error -71
[ 1148.181807][   T60] usb 1-1: USB disconnect, device number 84
[ 1148.337275][T18257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.365049][T18257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.395384][T18257] device bridge_slave_0 entered promiscuous mode
[ 1148.413820][ T8438] device bridge_slave_1 left promiscuous mode
[ 1148.420503][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.438695][ T8438] device bridge_slave_0 left promiscuous mode
[ 1148.448427][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.467822][T18265] loop7: detected capacity change from 0 to 256
[ 1148.477905][ T8438] device veth1_macvtap left promiscuous mode
[ 1148.486517][ T8438] device veth0_vlan left promiscuous mode
[ 1148.506988][T18265] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1148.532371][T18265] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1148.553059][T18265] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1148.691597][T18257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.698889][T18257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.706840][T18257] device bridge_slave_1 entered promiscuous mode
[ 1149.751018][T18267] loop5: detected capacity change from 0 to 40427
[ 1150.270354][T18267] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1150.278235][T18267] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1150.311556][T18281] loop7: detected capacity change from 0 to 128
[ 1150.329214][T18267] F2FS-fs (loop5): invalid crc value
[ 1150.361259][T18281] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1150.374555][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1150.392767][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1150.402896][T18267] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1150.430843][T18281] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1150.456826][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1150.469257][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1150.480078][T18281] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1150.501767][T18281] FAT-fs (loop7): Filesystem has been set read-only
[ 1150.501946][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.515442][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.523187][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1150.523253][T18267] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1150.531716][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1150.546744][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.553798][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1150.557384][T18267] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1150.564603][T18291] loop7: detected capacity change from 0 to 512
[ 1150.575909][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1150.584519][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1150.601048][T18282] loop0: detected capacity change from 0 to 40427
[ 1150.612253][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1150.620613][T18291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[ 1150.632444][T18291] System zones: 0-2, 18-18, 34-34
[ 1150.632552][T18282] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1150.645698][T18291] EXT4-fs (loop7): 1 orphan inode deleted
[ 1150.651459][T18291] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1150.660875][T18282] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1150.669826][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1150.672626][ T1273] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1150.678091][T18291] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1150.694088][T18282] F2FS-fs (loop0): invalid crc value
[ 1150.700333][ T1273] EXT4-fs error (device loop7): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1
[ 1150.717607][T18257] device veth0_vlan entered promiscuous mode
[ 1150.731715][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1150.742918][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1150.753214][T18282] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1150.763231][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1150.777882][T18301] loop6: detected capacity change from 0 to 512
[ 1150.788382][T18291] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.5513: corrupted xattr block 6
[ 1150.793367][T18301] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1150.810944][T18291] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[ 1150.818048][T18257] device veth1_macvtap entered promiscuous mode
[ 1150.842924][T18291] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.5513: corrupted xattr block 6
[ 1150.856094][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1150.866689][T18291] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[ 1150.868518][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1150.883107][T18301] EXT4-fs (loop6): 1 truncate cleaned up
[ 1150.885069][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1150.890620][T18301] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1150.898603][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1150.906776][T18282] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1150.914753][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1150.929693][T18291] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.5513: corrupted xattr block 6
[ 1150.930032][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1150.950061][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1150.951865][T18282] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1150.967677][T18291] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[ 1150.977607][T18267] bio_check_eod: 5630 callbacks suppressed
[ 1150.977623][T18267] syz.5.5506: attempt to access beyond end of device
[ 1150.977623][T18267] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1150.992112][T18291] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.5513: corrupted xattr block 6
[ 1151.011399][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1151.012677][T18291] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[ 1151.053230][T18291] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.5513: corrupted xattr block 6
[ 1151.066595][T18267] syz.5.5506: attempt to access beyond end of device
[ 1151.066595][T18267] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1151.100550][T18291] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[ 1151.119973][T18291] EXT4-fs error (device loop7): ext4_lookup:1858: inode #14: comm syz.7.5513: iget: bogus i_mode (0)
[ 1151.143157][  T336] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1151.156315][T18267] syz.5.5506: attempt to access beyond end of device
[ 1151.156315][T18267] loop5: rw=2049, sector=57344, nr_sectors = 6184 limit=40427
[ 1151.180977][T18312] syz.0.5510: attempt to access beyond end of device
[ 1151.180977][T18312] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1151.260196][T18312] syz.0.5510: attempt to access beyond end of device
[ 1151.260196][T18312] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1151.269453][T18306] loop6: detected capacity change from 0 to 40427
[ 1151.294594][T18312] syz.0.5510: attempt to access beyond end of device
[ 1151.294594][T18312] loop0: rw=2049, sector=57344, nr_sectors = 3792 limit=40427
[ 1151.310590][T18306] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1151.329104][T18306] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1151.338794][T18315] loop8: detected capacity change from 0 to 4096
[ 1151.343413][  T336] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1151.368699][T18306] F2FS-fs (loop6): invalid crc value
[ 1151.374564][T18315] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1151.385566][  T336] usb 8-1: not running at top speed; connect to a high speed hub
[ 1151.405619][  T336] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1151.423237][T18306] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1151.440006][T18315] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[ 1151.456709][T16412] syz-executor: attempt to access beyond end of device
[ 1151.456709][T16412] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[ 1151.472363][  T336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1151.489922][T18315] xt_hashlimit: max too large, truncated to 1048576
[ 1151.497078][T18306] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1151.518661][  T336] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1151.521627][T18306] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1151.535647][  T336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.546373][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5520'.
[ 1151.555546][  T336] usb 8-1: Product: syz
[ 1151.562485][  T336] usb 8-1: Manufacturer: syz
[ 1151.569860][  T336] usb 8-1: SerialNumber: syz
[ 1151.575112][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1151.615896][  T336] usb 8-1: selecting invalid altsetting 1
[ 1151.622179][  T336] usb 8-1: unit 6 not found!
[ 1151.632244][T18326] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5522'.
[ 1151.639096][T18329] loop8: detected capacity change from 0 to 256
[ 1151.662391][T18329] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1151.684870][T18329] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[ 1151.697356][T18331] loop5: detected capacity change from 0 to 4096
[ 1151.708000][T18306] syz.6.5515: attempt to access beyond end of device
[ 1151.708000][T18306] loop6: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1151.714244][T18329] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1151.735603][T18306] syz.6.5515: attempt to access beyond end of device
[ 1151.735603][T18306] loop6: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1151.768515][T18331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1151.800405][T18305] syz.6.5515: attempt to access beyond end of device
[ 1151.800405][T18305] loop6: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[ 1151.914297][T18331] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1152.838996][  T336] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[ 1152.857042][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1153.562837][  T336] usb 8-1: USB disconnect, device number 2
[ 1154.043230][ T7010] udevd[7010]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1154.646960][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1154.952677][T18357] xt_hashlimit: max too large, truncated to 1048576
[ 1155.042368][    T6] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1156.582422][    T6] usb 9-1: device descriptor read/64, error -71
[ 1156.612391][ T1494] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1156.792461][ T1494] usb 8-1: Using ep0 maxpacket: 32
[ 1156.803679][ T1494] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 1156.824497][ T1494] usb 8-1: config 0 has no interface number 0
[ 1156.843656][ T1494] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1156.869399][ T1494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.892864][ T1494] usb 8-1: Product: syz
[ 1156.905286][ T1494] usb 8-1: Manufacturer: syz
[ 1156.918961][ T1494] usb 8-1: SerialNumber: syz
[ 1156.960673][T18389] loop6: detected capacity change from 0 to 40427
[ 1156.986249][ T1494] usb 8-1: config 0 descriptor??
[ 1156.998451][ T1494] smsc95xx v2.0.0
[ 1157.029224][T18389] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1157.030636][T18397] xt_hashlimit: max too large, truncated to 1048576
[ 1157.043221][T18389] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1157.052268][T18389] F2FS-fs (loop6): invalid crc value
[ 1157.566061][T18389] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1157.757329][T18389] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1157.911519][ T1494] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1157.938971][ T1494] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1157.949039][T18389] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1158.075331][T18412] loop8: detected capacity change from 0 to 128
[ 1158.083433][T18412] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1158.100240][T18412] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1158.126884][ T1221] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1158.159568][ T1494] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1158.181931][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5548'.
[ 1158.183394][ T1494] smsc95xx: probe of 8-1:0.67 failed with error -61
[ 1158.310792][T18389] bio_check_eod: 1065 callbacks suppressed
[ 1158.310813][T18389] syz.6.5539: attempt to access beyond end of device
[ 1158.310813][T18389] loop6: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1158.382224][T18389] syz.6.5539: attempt to access beyond end of device
[ 1158.382224][T18389] loop6: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1158.408742][ T1494] usb 8-1: USB disconnect, device number 3
[ 1158.420501][T18389] syz.6.5539: attempt to access beyond end of device
[ 1158.420501][T18389] loop6: rw=2049, sector=57344, nr_sectors = 632 limit=40427
[ 1158.587793][T18423] loop6: detected capacity change from 0 to 128
[ 1158.601980][T18423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1158.610692][T18423] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1158.632373][    T6] usb 9-1: device descriptor read/64, error -71
[ 1158.640901][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1158.671156][T18430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5553'.
[ 1159.405879][T18442] loop6: detected capacity change from 0 to 512
[ 1160.265146][   T28] audit: type=1400 audit(1793721505.090:866): avc:  denied  { map } for  pid=18444 comm="syz.7.5557" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1160.654781][T18449] ./dev/sda1: Can't open blockdev
[ 1160.673893][T18442] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5555: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1160.688796][T18442] EXT4-fs (loop6): Remounting filesystem read-only
[ 1160.695493][T18442] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5555: error -117 reading directory block
[ 1160.708096][T18442] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[ 1160.708844][    T6] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1160.716308][T18442] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5555: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1161.035948][T18456] loop0: detected capacity change from 0 to 512
[ 1161.095244][T18442] EXT4-fs (loop6): Remounting filesystem read-only
[ 1161.101807][T18442] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5555: error -117 reading directory block
[ 1161.114528][T18442] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[ 1161.122800][T18442] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1161.663829][T18456] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5558: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1161.678692][T18456] EXT4-fs (loop0): Remounting filesystem read-only
[ 1161.685531][T18456] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5558: error -117 reading directory block
[ 1161.698202][T18456] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1161.706427][T18456] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5558: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1161.873497][T18456] EXT4-fs (loop0): Remounting filesystem read-only
[ 1161.880058][T18456] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5558: error -117 reading directory block
[ 1161.892728][T18456] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1161.900918][T18456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1161.976361][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1162.002984][    T6] usb 9-1: device descriptor read/64, error -71
[ 1162.011133][T18459] loop5: detected capacity change from 0 to 128
[ 1162.066240][T18459] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007fff)
[ 1162.128894][T18459] FAT-fs (loop5): Filesystem has been set read-only
[ 1162.135878][T18459] FAT-fs (loop5): error, invalid access to FAT (entry 0x00007fff)
[ 1162.148060][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1163.209867][T18471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18471 comm=syz.0.5565
[ 1163.224868][T18471] loop0: detected capacity change from 0 to 512
[ 1163.303294][T18471] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5565: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1163.318231][T18471] EXT4-fs (loop0): Remounting filesystem read-only
[ 1163.325024][T18471] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5565: error -117 reading directory block
[ 1163.337602][T18471] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1163.345800][T18471] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5565: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1163.360289][T18471] EXT4-fs (loop0): Remounting filesystem read-only
[ 1163.367030][T18471] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5565: error -117 reading directory block
[ 1163.379591][T18471] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1163.387768][T18471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1163.410143][T18477] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5566'.
[ 1164.579207][T18480] loop8: detected capacity change from 0 to 512
[ 1164.688359][T18455] loop7: detected capacity change from 0 to 40427
[ 1164.696794][T18475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[ 1164.722843][T18455] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1164.723719][T18475] EXT4-fs (loop0): Remounting filesystem read-only
[ 1164.737272][T18455] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1164.745988][T18455] F2FS-fs (loop7): invalid crc value
[ 1164.751409][T18455] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4)
[ 1164.757596][T18463] loop6: detected capacity change from 0 to 40427
[ 1164.786414][T18480] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 8: comm syz.8.5567: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1164.802662][T18480] EXT4-fs (loop8): Remounting filesystem read-only
[ 1164.809204][T18480] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.5567: error -117 reading directory block
[ 1164.823767][T18480] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117
[ 1164.832016][T18480] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 8: comm syz.8.5567: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1164.846595][T18480] EXT4-fs (loop8): Remounting filesystem read-only
[ 1164.853227][T18480] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.5567: error -117 reading directory block
[ 1164.865879][T18480] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[ 1164.874207][T18480] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1164.940048][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1165.743215][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1166.123687][T18463] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1166.131577][T18463] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1166.178795][T18463] F2FS-fs (loop6): invalid crc value
[ 1166.185608][T18463] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-4)
[ 1166.186931][T18499] loop7: detected capacity change from 0 to 256
[ 1166.195293][T18497] xt_hashlimit: max too large, truncated to 1048576
[ 1166.209889][T18499] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1166.247099][T18499] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1166.324967][T18499] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1166.530921][T18508] loop0: detected capacity change from 0 to 128
[ 1166.901718][T18508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1166.928284][T18514] loop6: detected capacity change from 0 to 512
[ 1166.935881][T18508] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1167.522263][T18514] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[ 1167.530443][T18514] System zones: 0-2, 18-18, 34-34
[ 1167.554571][T18514] EXT4-fs (loop6): 1 orphan inode deleted
[ 1167.568054][T18514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1167.587351][T18514] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1167.607419][ T8438] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1167.622699][T18514] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5574: corrupted xattr block 6
[ 1167.636990][ T8438] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1
[ 1167.649023][T18514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1167.650912][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1167.664862][T18514] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5574: corrupted xattr block 6
[ 1167.723501][T18514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1167.814790][T18514] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5574: corrupted xattr block 6
[ 1167.829738][T18514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1167.843024][T18514] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5574: corrupted xattr block 6
[ 1167.859061][T18514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1168.752373][T18514] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5574: corrupted xattr block 6
[ 1168.799945][T18528] loop0: detected capacity change from 0 to 512
[ 1168.830593][T18514] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1168.841596][T18528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1168.850598][T18528] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1168.875540][T18514] EXT4-fs error (device loop6): ext4_lookup:1858: inode #14: comm syz.6.5574: iget: bogus i_mode (0)
[ 1168.903701][T18522] loop7: detected capacity change from 0 to 40427
[ 1168.920763][T18522] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1168.934127][T18522] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1168.943039][T18522] F2FS-fs (loop7): invalid crc value
[ 1168.949549][T18522] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1168.956103][    T6] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1169.034786][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1169.070093][T18522] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1169.077402][T18522] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1169.174711][T18536] loop0: detected capacity change from 0 to 256
[ 1169.192562][T18536] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1169.207950][T18536] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1169.216671][    T6] usb 9-1: Using ep0 maxpacket: 16
[ 1169.229924][   T60] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1169.250514][    T6] usb 9-1: unable to read config index 0 descriptor/all
[ 1169.255367][T18540] syz.7.5580: attempt to access beyond end of device
[ 1169.255367][T18540] loop7: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1169.264448][T18542] loop8: detected capacity change from 0 to 128
[ 1169.281275][T18540] syz.7.5580: attempt to access beyond end of device
[ 1169.281275][T18540] loop7: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1169.302517][    T6] usb 9-1: can't read configurations, error -71
[ 1169.313461][T18536] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1169.360052][T18542] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1169.370838][T18542] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1169.754598][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1169.774415][   T60] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1169.788161][T18540] syz.7.5580: attempt to access beyond end of device
[ 1169.788161][T18540] loop7: rw=2049, sector=57344, nr_sectors = 12288 limit=40427
[ 1169.803621][   T60] usb 7-1: not running at top speed; connect to a high speed hub
[ 1169.820202][   T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1169.879295][   T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1169.976243][   T60] usb 7-1: string descriptor 0 read error: -71
[ 1170.443912][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1170.449873][   T60] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1170.467467][T18540] syz.7.5580: attempt to access beyond end of device
[ 1170.467467][T18540] loop7: rw=2049, sector=69632, nr_sectors = 8 limit=40427
[ 1170.561859][   T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.565283][T18540] syz.7.5580: attempt to access beyond end of device
[ 1170.565283][T18540] loop7: rw=2049, sector=69640, nr_sectors = 8 limit=40427
[ 1170.570949][T18553] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5587'.
[ 1170.584408][T18540] syz.7.5580: attempt to access beyond end of device
[ 1170.584408][T18540] loop7: rw=2049, sector=69648, nr_sectors = 8 limit=40427
[ 1170.606880][T18540] syz.7.5580: attempt to access beyond end of device
[ 1170.606880][T18540] loop7: rw=2049, sector=69656, nr_sectors = 8 limit=40427
[ 1170.627015][   T60] usb 7-1: can't set config #1, error -71
[ 1170.627283][T18540] syz.7.5580: attempt to access beyond end of device
[ 1170.627283][T18540] loop7: rw=2049, sector=69664, nr_sectors = 8 limit=40427
[ 1170.635761][   T60] usb 7-1: USB disconnect, device number 5
[ 1171.174787][T18540] syz.7.5580: attempt to access beyond end of device
[ 1171.174787][T18540] loop7: rw=2049, sector=69672, nr_sectors = 8 limit=40427
[ 1171.621229][T18521] syz.7.5580: attempt to access beyond end of device
[ 1171.621229][T18521] loop7: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[ 1171.711553][T18563] loop5: detected capacity change from 0 to 256
[ 1171.723200][   T28] audit: type=1400 audit(1793721516.560:867): avc:  denied  { view } for  pid=18561 comm="syz.0.5590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1171.866045][T18563] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1171.890386][T18563] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1173.655090][T18563] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1173.771254][T18572] loop8: detected capacity change from 0 to 128
[ 1174.728559][T18572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00007fff)
[ 1175.703230][T18572] FAT-fs (loop8): Filesystem has been set read-only
[ 1175.710013][T18572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00007fff)
[ 1175.745880][T18581] loop7: detected capacity change from 0 to 128
[ 1176.528974][T18581] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1176.537721][T18581] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1176.665987][T18595] loop8: detected capacity change from 0 to 512
[ 1176.727243][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1176.733343][  T307] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1176.746093][T18595] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1176.755149][T18595] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1176.834350][T18603] loop0: detected capacity change from 0 to 256
[ 1176.867340][T18599] loop5: detected capacity change from 0 to 4096
[ 1176.886633][T18599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1176.899153][T18603] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1176.922503][T18603] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1176.942376][  T307] usb 7-1: Using ep0 maxpacket: 16
[ 1176.943267][T18599] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1176.957544][  T307] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1176.973031][  T307] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1176.985665][T18603] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1176.997868][  T307] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[ 1177.007842][T18599] xt_hashlimit: max too large, truncated to 1048576
[ 1177.017573][  T307] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1177.036353][  T307] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1177.137143][  T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.162019][  T307] usb 7-1: config 0 descriptor??
[ 1177.178142][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1178.264441][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1178.287500][T18605] loop7: detected capacity change from 0 to 40427
[ 1178.311264][T18605] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1178.333281][T18605] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1178.344788][T18605] F2FS-fs (loop7): invalid crc value
[ 1178.351734][T18605] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1178.589148][T18605] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1178.598666][T18605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1179.802455][ T1151] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1179.954998][T18631] bio_check_eod: 3556 callbacks suppressed
[ 1179.955045][T18631] syz.7.5603: attempt to access beyond end of device
[ 1179.955045][T18631] loop7: rw=2049, sector=77824, nr_sectors = 2640 limit=40427
[ 1180.002372][ T1151] usb 6-1: Using ep0 maxpacket: 16
[ 1180.010230][ T1151] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1180.086773][ T1151] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1180.169010][ T1151] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1180.203418][T18631] syz.7.5603: attempt to access beyond end of device
[ 1180.203418][T18631] loop7: rw=2049, sector=80464, nr_sectors = 1264 limit=40427
[ 1180.236811][ T1151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.253924][  T307] usbhid 7-1:0.0: can't add hid device: -71
[ 1180.259918][  T307] usbhid: probe of 7-1:0.0 failed with error -71
[ 1180.266609][ T1151] usb 6-1: Product: syz
[ 1180.270781][ T1151] usb 6-1: Manufacturer: syz
[ 1180.286552][ T1151] usb 6-1: SerialNumber: syz
[ 1180.299654][ T1151] usb 6-1: config 0 descriptor??
[ 1180.307439][  T307] usb 7-1: USB disconnect, device number 6
[ 1180.437254][T18635] loop6: detected capacity change from 0 to 40427
[ 1180.452243][T18635] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1180.460257][T18635] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1180.569063][T18635] F2FS-fs (loop6): invalid crc value
[ 1181.681064][T18654] loop0: detected capacity change from 0 to 512
[ 1181.688296][T18635] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1181.739771][T18635] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1181.746932][T18635] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1181.747662][T18654] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[ 1181.762611][T18654] System zones: 0-2, 18-18, 34-34
[ 1181.769273][T18654] EXT4-fs (loop0): 1 orphan inode deleted
[ 1181.775430][T18654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1181.808194][T18654] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1182.353886][T18654] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.5615: corrupted xattr block 6
[ 1182.413337][T18654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[ 1182.455443][T18654] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.5615: corrupted xattr block 6
[ 1182.682889][T15347] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1182.700914][ T1494] usb 6-1: USB disconnect, device number 100
[ 1182.707846][T15347] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 1
[ 1182.729441][T18654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[ 1182.748228][T18654] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.5615: corrupted xattr block 6
[ 1182.763336][T18654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[ 1182.772641][T18654] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.5615: corrupted xattr block 6
[ 1182.785299][T18654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[ 1182.794188][T18671] loop5: detected capacity change from 0 to 4096
[ 1182.794640][T18654] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.5615: corrupted xattr block 6
[ 1182.813464][T18654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[ 1182.822556][ T1413] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1182.830399][T18654] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz.0.5615: iget: bogus i_mode (0)
[ 1182.862470][T18671] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1182.884365][T18671] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1182.893893][T18671] xt_hashlimit: max too large, truncated to 1048576
[ 1182.895879][T18675] loop6: detected capacity change from 0 to 512
[ 1182.917005][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1182.932060][T18675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[ 1182.940250][T18675] System zones: 0-2, 18-18, 34-34
[ 1182.946822][T18675] EXT4-fs (loop6): 1 orphan inode deleted
[ 1182.950272][  T307] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[ 1182.953258][T18675] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1182.972414][ T1273] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1182.982640][T18675] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1182.998564][ T1273] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1
[ 1183.022387][ T1413] usb 8-1: Using ep0 maxpacket: 32
[ 1183.028938][ T1413] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 1183.045567][ T1413] usb 8-1: config 0 has no interface number 0
[ 1183.052639][T18675] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5619: corrupted xattr block 6
[ 1183.105073][T18675] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1183.110665][T18679] loop5: detected capacity change from 0 to 40427
[ 1183.114271][T18675] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5619: corrupted xattr block 6
[ 1183.121863][T18679] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1183.140074][ T1413] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1183.149241][ T1413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.149245][T18675] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1183.149265][ T1413] usb 8-1: Product: syz
[ 1183.149278][ T1413] usb 8-1: Manufacturer: syz
[ 1183.149290][ T1413] usb 8-1: SerialNumber: syz
[ 1183.149913][T18679] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1183.167561][T18675] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5619: corrupted xattr block 6
[ 1183.171206][ T1413] usb 8-1: config 0 descriptor??
[ 1183.178376][T18679] F2FS-fs (loop5): invalid crc value
[ 1183.211942][T18675] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1183.348023][T18686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18686 comm=syz.8.5622
[ 1183.381133][T18686] loop8: detected capacity change from 0 to 512
[ 1183.397210][T18675] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5619: corrupted xattr block 6
[ 1183.414755][T18686] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 8: comm syz.8.5622: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1183.430526][T18686] EXT4-fs (loop8): Remounting filesystem read-only
[ 1183.437137][T18686] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.5622: error -117 reading directory block
[ 1183.449819][T18686] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117
[ 1183.458236][T18686] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 8: comm syz.8.5622: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1183.474600][T18686] EXT4-fs (loop8): Remounting filesystem read-only
[ 1183.481242][T18686] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.5622: error -117 reading directory block
[ 1183.493954][T18686] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[ 1183.502172][T18686] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1183.602452][ T1151] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1183.651544][T18675] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1183.690555][T18679] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1183.720844][T18675] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.5619: corrupted xattr block 6
[ 1183.792212][T18679] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1183.800663][T18675] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=12
[ 1183.810975][T18679] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1183.819884][T18675] EXT4-fs error (device loop6): ext4_lookup:1858: inode #14: comm syz.6.5619: iget: bogus i_mode (0)
[ 1183.834116][  T307] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1183.909474][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1183.909899][ T1413] smsc95xx v2.0.0
[ 1183.918945][  T307] usb 1-1: not running at top speed; connect to a high speed hub
[ 1183.932454][  T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1183.942784][ T1151] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1183.951315][  T307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1184.015376][T18696] syz.5.5620: attempt to access beyond end of device
[ 1184.015376][T18696] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[ 1184.022070][  T307] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1184.029548][ T1151] usb 7-1: not running at top speed; connect to a high speed hub
[ 1184.039057][  T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.047648][ T1151] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1184.054647][  T307] usb 1-1: Product: syz
[ 1184.068848][ T1151] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1184.077829][  T307] usb 1-1: Manufacturer: syz
[ 1184.083736][ T1151] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1184.086812][  T307] usb 1-1: SerialNumber: syz
[ 1184.093722][T18696] syz.5.5620: attempt to access beyond end of device
[ 1184.093722][T18696] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[ 1184.111618][ T1151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.120616][ T1151] usb 7-1: Product: syz
[ 1184.125731][ T1151] usb 7-1: Manufacturer: syz
[ 1184.130374][ T1151] usb 7-1: SerialNumber: syz
[ 1184.159773][T18699] loop8: detected capacity change from 0 to 512
[ 1184.172449][T18699] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value
[ 1184.206765][ T1151] usb 7-1: selecting invalid altsetting 1
[ 1184.214889][ T1151] usb 7-1: unit 6 not found!
[ 1184.240470][ T7130] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1184.880190][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1184.921106][T18696] syz.5.5620: attempt to access beyond end of device
[ 1184.921106][T18696] loop5: rw=2049, sector=57344, nr_sectors = 12288 limit=40427
[ 1184.952413][ T1413] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1184.963384][  T307] usb 1-1: can't set config #1, error -71
[ 1184.972397][  T307] usb 1-1: USB disconnect, device number 85
[ 1184.978573][ T1413] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1185.026298][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.026298][T18696] loop5: rw=2049, sector=69632, nr_sectors = 8 limit=40427
[ 1185.040338][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.040338][T18696] loop5: rw=2049, sector=69640, nr_sectors = 8 limit=40427
[ 1185.054289][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.054289][T18696] loop5: rw=2049, sector=69648, nr_sectors = 8 limit=40427
[ 1185.086786][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.086786][T18696] loop5: rw=2049, sector=69656, nr_sectors = 8 limit=40427
[ 1185.102125][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.102125][T18696] loop5: rw=2049, sector=69664, nr_sectors = 8 limit=40427
[ 1185.120280][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.120280][T18696] loop5: rw=2049, sector=69672, nr_sectors = 8 limit=40427
[ 1185.120525][ T1151] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[ 1185.134241][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.134241][T18696] loop5: rw=2049, sector=69680, nr_sectors = 8 limit=40427
[ 1185.169321][ T1151] usb 7-1: USB disconnect, device number 7
[ 1185.178682][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.178682][T18696] loop5: rw=2049, sector=69688, nr_sectors = 8 limit=40427
[ 1185.513441][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.513441][T18696] loop5: rw=2049, sector=69696, nr_sectors = 8 limit=40427
[ 1185.654559][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1185.784185][T18696] syz.5.5620: attempt to access beyond end of device
[ 1185.784185][T18696] loop5: rw=2049, sector=69704, nr_sectors = 8 limit=40427
[ 1186.063940][ T1413] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1186.075058][ T1413] smsc95xx: probe of 8-1:0.67 failed with error -61
[ 1186.144913][ T1413] usb 8-1: USB disconnect, device number 4
[ 1186.161622][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1186.214626][T18715] loop6: detected capacity change from 0 to 512
[ 1186.233704][T18715] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1186.274657][T18715] EXT4-fs (loop6): 1 truncate cleaned up
[ 1186.280333][T18715] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1186.329472][T18713] loop0: detected capacity change from 0 to 40427
[ 1186.346139][T18713] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1186.358777][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1186.393065][T18713] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1186.416877][T18713] F2FS-fs (loop0): invalid crc value
[ 1186.443423][T18713] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1186.493547][T18713] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1186.500689][T18713] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1186.535964][T18718] loop8: detected capacity change from 0 to 40427
[ 1186.553018][T18718] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 1186.561174][T18718] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1186.587615][T18718] F2FS-fs (loop8): invalid crc value
[ 1186.646762][T18718] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1186.672383][ T1413] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1186.724848][T18718] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 1186.731912][T18718] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1186.862346][ T1413] usb 7-1: Using ep0 maxpacket: 16
[ 1186.874377][ T1413] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[ 1186.882521][ T1413] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.892753][ T1413] usb 7-1: config 0 has no interface number 0
[ 1186.898851][ T1413] usb 7-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1186.909476][ T1413] usb 7-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1186.937143][ T1413] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1186.946252][ T1413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.954357][ T1413] usb 7-1: Product: syz
[ 1186.958520][ T1413] usb 7-1: Manufacturer: syz
[ 1186.963154][ T1413] usb 7-1: SerialNumber: syz
[ 1186.977138][ T1413] usb 7-1: config 0 descriptor??
[ 1186.984016][ T1413] asix: probe of 7-1:0.34 failed with error -22
[ 1187.006922][T18745] loop8: detected capacity change from 0 to 512
[ 1187.019647][T18747] xt_hashlimit: max too large, truncated to 1048576
[ 1187.037848][T18745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[ 1187.045970][T18745] System zones: 0-2, 18-18, 34-34
[ 1187.052741][T18745] EXT4-fs (loop8): 1 orphan inode deleted
[ 1187.058590][T18745] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1187.067687][T18745] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1187.078079][   T43] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1187.088445][   T43] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1
[ 1187.106397][T18745] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.5636: corrupted xattr block 6
[ 1187.121200][T18745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[ 1187.130753][T18745] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.5636: corrupted xattr block 6
[ 1187.143002][T18745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[ 1187.152071][T18745] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.5636: corrupted xattr block 6
[ 1187.163965][T18745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[ 1187.173045][T18745] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.5636: corrupted xattr block 6
[ 1187.184888][T18745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[ 1187.194080][T18745] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.5636: corrupted xattr block 6
[ 1187.206616][T18745] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[ 1187.216665][T18745] EXT4-fs error (device loop8): ext4_lookup:1858: inode #14: comm syz.8.5636: iget: bogus i_mode (0)
[ 1189.037123][T18767] loop5: detected capacity change from 0 to 512
[ 1189.059827][T18767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1189.072426][ T1413] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1189.083940][T18767] EXT4-fs (loop5): 1 truncate cleaned up
[ 1189.089753][T18767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1189.106770][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1189.126275][T18773] loop5: detected capacity change from 0 to 512
[ 1189.167487][T18773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1189.177573][T18773] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1189.199056][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1189.264798][ T1413] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1189.281277][T18774] loop7: detected capacity change from 0 to 1024
[ 1189.306843][ T1413] usb 9-1: not running at top speed; connect to a high speed hub
[ 1189.306895][T18774] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1189.315369][ T1413] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1189.333353][ T1413] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1189.343887][ T1413] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1189.352996][ T1413] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.361475][ T1413] usb 9-1: Product: syz
[ 1189.365847][ T1413] usb 9-1: Manufacturer: syz
[ 1189.370537][ T1413] usb 9-1: SerialNumber: syz
[ 1189.387146][ T1413] usb 9-1: selecting invalid altsetting 1
[ 1189.393193][ T1413] usb 9-1: unit 6 not found!
[ 1189.419016][T18007] usb 7-1: USB disconnect, device number 8
[ 1189.431956][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1189.642305][T18795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18795 comm=syz.0.5645
[ 1189.669144][T18795] loop0: detected capacity change from 0 to 512
[ 1189.830952][T18795] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5645: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1189.846291][T18795] EXT4-fs (loop0): Remounting filesystem read-only
[ 1189.852930][T18795] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5645: error -117 reading directory block
[ 1189.865582][T18795] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1189.873951][T18795] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5645: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1189.888980][T18795] EXT4-fs (loop0): Remounting filesystem read-only
[ 1189.895613][T18795] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5645: error -117 reading directory block
[ 1189.908635][T18795] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1189.916870][T18795] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1190.152835][T18801] loop5: detected capacity change from 0 to 512
[ 1190.209086][T18801] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1190.466125][T18799] loop7: detected capacity change from 0 to 4096
[ 1190.475862][T18799] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1190.489727][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1190.492067][T18801] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.5650: inode has both inline data and extents flags
[ 1190.496183][ T1413] snd-usb-audio: probe of 9-1:1.0 failed with error -22
[ 1190.516589][T18801] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.5650: couldn't read orphan inode 15 (err -117)
[ 1190.528608][T18799] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[ 1190.537001][T18805] loop6: detected capacity change from 0 to 512
[ 1190.546057][T18799] xt_hashlimit: max too large, truncated to 1048576
[ 1190.554046][T18801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1190.559142][T18805] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1190.584347][ T7010] udevd[7010]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1190.598928][T18805] EXT4-fs (loop6): 1 truncate cleaned up
[ 1190.600762][ T1413] usb 9-1: USB disconnect, device number 6
[ 1190.605811][T18805] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1190.620976][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1190.632099][T18149] EXT4-fs (loop7): unmounting filesystem.
[ 1190.654389][T18813] loop5: detected capacity change from 0 to 512
[ 1190.658183][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1190.667566][T18813] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1190.672486][   T28] audit: type=1400 audit(1793721535.500:868): avc:  denied  { mount } for  pid=18814 comm="syz.7.5654" name="/" dev="ramfs" ino=111819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1190.721252][T18813] EXT4-fs (loop5): 1 truncate cleaned up
[ 1190.731407][   T28] audit: type=1400 audit(1793721535.540:869): avc:  denied  { unmount } for  pid=18149 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1190.758383][T18813] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1190.775361][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1190.944370][T18827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18827 comm=syz.6.5655
[ 1190.972895][T18827] loop6: detected capacity change from 0 to 512
[ 1191.828743][T18827] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5655: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1191.850914][T18827] EXT4-fs (loop6): Remounting filesystem read-only
[ 1191.857569][T18827] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5655: error -117 reading directory block
[ 1191.870134][T18827] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[ 1191.878367][T18827] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 8: comm syz.6.5655: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1191.898686][T18827] EXT4-fs (loop6): Remounting filesystem read-only
[ 1191.905321][T18827] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.5655: error -117 reading directory block
[ 1191.917883][T18827] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[ 1191.926121][T18827] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1191.933539][T18838] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5660'.
[ 1192.001624][T18257] EXT4-fs (loop8): unmounting filesystem.
[ 1192.082878][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1192.106550][T18849] loop6: detected capacity change from 0 to 512
[ 1192.208288][T18849] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1192.372009][T18849] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.5664: inode has both inline data and extents flags
[ 1192.543568][T18849] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.5664: couldn't read orphan inode 15 (err -117)
[ 1192.624721][T18861] loop0: detected capacity change from 0 to 512
[ 1192.644773][T18849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1192.705792][T18861] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1192.809668][T18861] EXT4-fs (loop0): 1 truncate cleaned up
[ 1192.924224][T18861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1192.945325][T16757] EXT4-fs (loop6): unmounting filesystem.
[ 1192.981921][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1194.161956][T18878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18878 comm=syz.5.5670
[ 1194.213206][T18878] loop5: detected capacity change from 0 to 512
[ 1194.269134][T18878] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5670: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1194.560370][T18878] EXT4-fs (loop5): Remounting filesystem read-only
[ 1194.566948][T18878] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5670: error -117 reading directory block
[ 1194.579482][T18878] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[ 1194.587680][T18878] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.5670: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1194.747126][T18878] EXT4-fs (loop5): Remounting filesystem read-only
[ 1194.753717][T18878] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.5670: error -117 reading directory block
[ 1194.766302][T18878] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[ 1194.774519][T18878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1195.000849][T18893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18893 comm=syz.0.5675
[ 1195.029200][T18893] loop0: detected capacity change from 0 to 512
[ 1195.129524][T13273] EXT4-fs (loop5): unmounting filesystem.
[ 1195.199822][T18893] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5675: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1195.215453][T18893] EXT4-fs (loop0): Remounting filesystem read-only
[ 1195.222002][T18893] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5675: error -117 reading directory block
[ 1195.234729][T18893] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1195.243127][T18893] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 8: comm syz.0.5675: lblock 0 mapped to illegal pblock 8 (length 1)
[ 1195.258321][T18893] EXT4-fs (loop0): Remounting filesystem read-only
[ 1195.264920][T18893] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.5675: error -117 reading directory block
[ 1195.277639][T18893] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1195.285875][T18893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1195.706323][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1195.727382][T18899] ------------[ cut here ]------------
[ 1195.732920][T18899] fmt: 'level=%s
[ 1195.732920][T18899] ' current_buffer: '      syz.0.2242-7198    [000] .....   500.030756: dwc3_ctrl_req: Get Device Status(Length = 0)
[ 1195.732920][T18899]            <...>-1970561396 [000] .p.35   500.086049: Unknown type 25955
[ 1195.732920][T18899]            <...>-6912    [000] .....   500.111281: initcall_level: level='
[ 1195.766151][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/trace.c:3890 trace_check_vprintf+0xd2c/0x1050
[ 1195.809075][T18899] Modules linked in:
[ 1195.813017][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Not tainted syzkaller #0
[ 1195.820475][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1195.830561][T18899] RIP: 0010:trace_check_vprintf+0xd2c/0x1050
[ 1195.836715][T18899] Code: ea ae fc ff c6 05 ba e9 1a 06 01 48 8b 7d 88 e8 5a 04 00 00 48 c7 c7 e0 f6 aa 85 48 8b b5 60 ff ff ff 48 89 c2 e8 84 2e cd ff <0f> 0b e9 d6 fd ff ff 48 8b 4d 98 80 e1 07 38 c1 0f 8c d5 f7 ff ff
[ 1195.856495][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010246
[ 1195.862676][T18899] RAX: 7d4b3a71c5604d00 RBX: dffffc0000000000 RCX: 0000000000080000
[ 1195.870654][T18899] RDX: ffffc90003671000 RSI: 00000000000024ef RDI: 00000000000024f0
[ 1195.878670][T18899] RBP: ffffc9000161fa10 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3
[ 1195.886695][T18899] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffffffff87017250
[ 1195.894719][T18899] R13: ffff888110110078 R14: 0000000000000000 R15: 0000000000000002
[ 1195.902812][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1195.911761][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1195.918411][T18899] CR2: 00007f7ed9b6b000 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1195.926419][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1195.934442][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1195.942464][T18899] Call Trace:
[ 1195.945749][T18899]  <TASK>
[ 1195.948689][T18899]  trace_event_printf+0xea/0x140
[ 1195.953667][T18899]  ? __cfi_trace_seq_printf+0x10/0x10
[ 1195.959133][T18899]  ? __cfi_trace_event_printf+0x10/0x10
[ 1195.964721][T18899]  ? trace_print_context+0x3a1/0x4d0
[ 1195.970010][T18899]  ? trace_handle_return+0xa5/0xe0
[ 1195.975176][T18899]  ? trace_raw_output_prep+0x1c9/0x240
[ 1195.980648][T18899]  trace_raw_output_initcall_level+0x98/0xd0
[ 1195.986675][T18899]  print_trace_fmt+0x4fe/0x720
[ 1195.991443][T18899]  print_trace_line+0x393/0x6b0
[ 1195.996331][T18899]  tracing_read_pipe+0x517/0xaf0
[ 1196.001272][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1196.006770][T18899]  vfs_read+0x286/0x930
[ 1196.010926][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1196.015640][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.020756][T18899]  ? mutex_lock+0x93/0x1b0
[ 1196.025231][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1196.030088][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1196.034732][T18899]  ? ksys_read+0x70/0x260
[ 1196.039059][T18899]  ksys_read+0x14a/0x260
[ 1196.043329][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1196.048099][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1196.049840][T18903] loop0: detected capacity change from 0 to 4096
[ 1196.053766][T18899]  __x64_sys_read+0x7b/0x90
[ 1196.065079][T18899]  x64_sys_call+0x2f/0x9a0
[ 1196.069598][T18899]  do_syscall_64+0x4c/0xa0
[ 1196.074055][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.078735][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.083441][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1196.089338][T18899] RIP: 0033:0x7ff5e159fb19
[ 1196.093813][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1196.113531][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1196.121956][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1196.129987][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1196.137984][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1196.146003][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.154025][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1196.162009][T18899]  </TASK>
[ 1196.165083][T18899] ---[ end trace 0000000000000000 ]---
[ 1196.171832][T18899] ------------[ cut here ]------------
[ 1196.177311][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1196.184780][T18903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1196.187679][T18899] Modules linked in:
[ 1196.187694][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G        W          syzkaller #0
[ 1196.187715][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1196.187726][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1196.225165][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1196.244776][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1196.250853][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1196.258828][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1196.266802][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1196.274775][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1196.282747][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1196.290721][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1196.299669][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1196.306292][T18899] CR2: 00007ff5efffa890 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1196.314270][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1196.322340][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1196.330314][T18899] Call Trace:
[ 1196.333591][T18899]  <TASK>
[ 1196.336522][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1196.342171][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.347292][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1196.351972][T18899]  rb_buffer_peek+0x5f/0x930
[ 1196.356568][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1196.361429][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1196.366807][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.371924][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1196.376618][T18899]  ? _find_next_bit+0x8a/0x130
[ 1196.381392][T18899]  __find_next_entry+0x33c/0x6c0
[ 1196.386339][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1196.391807][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1196.397448][T18899]  ? print_trace_line+0x393/0x6b0
[ 1196.402475][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1196.407424][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1196.412886][T18899]  vfs_read+0x286/0x930
[ 1196.417052][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1196.421735][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.426851][T18899]  ? mutex_lock+0x93/0x1b0
[ 1196.431258][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1196.436096][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1196.440672][T18899]  ? ksys_read+0x70/0x260
[ 1196.444990][T18899]  ksys_read+0x14a/0x260
[ 1196.449218][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1196.453966][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1196.459582][T18899]  __x64_sys_read+0x7b/0x90
[ 1196.464069][T18899]  x64_sys_call+0x2f/0x9a0
[ 1196.468470][T18899]  do_syscall_64+0x4c/0xa0
[ 1196.472868][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.477531][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.482194][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1196.488071][T18899] RIP: 0033:0x7ff5e159fb19
[ 1196.492468][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1196.512232][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1196.520629][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1196.528584][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1196.536536][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1196.544491][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.552449][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1196.560408][T18899]  </TASK>
[ 1196.563407][T18899] ---[ end trace 0000000000000000 ]---
[ 1196.568864][T18899] ==================================================================
[ 1196.576913][T18899] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930
[ 1196.584114][T18899] Read of size 4 at addr ffff88819e06b071 by task syz.5.5677/18899
[ 1196.591984][T18899] 
[ 1196.594288][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G        W          syzkaller #0
[ 1196.603202][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1196.613239][T18899] Call Trace:
[ 1196.616500][T18899]  <TASK>
[ 1196.619416][T18899]  __dump_stack+0x21/0x24
[ 1196.623737][T18899]  dump_stack_lvl+0x110/0x170
[ 1196.628399][T18899]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1196.633405][T18899]  ? rb_get_reader_page+0x9f6/0xc60
[ 1196.638588][T18899]  ? rb_buffer_peek+0x88d/0x930
[ 1196.643423][T18899]  print_address_description+0x71/0x200
[ 1196.648955][T18899]  print_report+0x4a/0x60
[ 1196.653356][T18899]  kasan_report+0x122/0x150
[ 1196.657847][T18899]  ? rb_buffer_peek+0x88d/0x930
[ 1196.662679][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.667776][T18899]  __asan_report_load4_noabort+0x14/0x20
[ 1196.673388][T18899]  rb_buffer_peek+0x88d/0x930
[ 1196.678049][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1196.682883][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1196.688241][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.693333][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1196.698014][T18899]  ? _find_next_bit+0x8a/0x130
[ 1196.702763][T18899]  __find_next_entry+0x33c/0x6c0
[ 1196.707691][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1196.713135][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1196.718750][T18899]  ? print_trace_line+0x393/0x6b0
[ 1196.723758][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1196.728683][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1196.734136][T18899]  vfs_read+0x286/0x930
[ 1196.738274][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1196.742931][T18899]  ? __kasan_check_write+0x14/0x20
[ 1196.748024][T18899]  ? mutex_lock+0x93/0x1b0
[ 1196.752426][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1196.757265][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1196.761839][T18899]  ? ksys_read+0x70/0x260
[ 1196.766159][T18899]  ksys_read+0x14a/0x260
[ 1196.770383][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1196.775129][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1196.780753][T18899]  __x64_sys_read+0x7b/0x90
[ 1196.785238][T18899]  x64_sys_call+0x2f/0x9a0
[ 1196.789642][T18899]  do_syscall_64+0x4c/0xa0
[ 1196.794039][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.798699][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1196.803359][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1196.809235][T18899] RIP: 0033:0x7ff5e159fb19
[ 1196.813635][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1196.833274][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1196.841679][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1196.849637][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1196.857594][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1196.865552][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.873505][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1196.881469][T18899]  </TASK>
[ 1196.884474][T18899] 
[ 1196.886780][T18899] The buggy address belongs to the physical page:
[ 1196.893170][T18899] page:ffffea0006781ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19e06b
[ 1196.903474][T18899] flags: 0x4000000000000000(zone=1)
[ 1196.908657][T18899] raw: 4000000000000000 ffffea0006781ac8 ffffea0006781ac8 0000000000000000
[ 1196.917219][T18899] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1196.925777][T18899] page dumped because: kasan: bad access detected
[ 1196.932266][T18899] page_owner info is not present (never set?)
[ 1196.938334][T18899] 
[ 1196.940641][T18899] Memory state around the buggy address:
[ 1196.946256][T18899]  ffff88819e06af00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1196.954298][T18899]  ffff88819e06af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1196.962354][T18899] >ffff88819e06b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1196.970391][T18899]                                                              ^
[ 1196.978081][T18899]  ffff88819e06b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1196.986120][T18899]  ffff88819e06b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1196.994174][T18899] ==================================================================
[ 1197.002226][T18899] Disabling lock debugging due to kernel taint
[ 1197.029620][T18899] ------------[ cut here ]------------
[ 1197.035101][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1197.045438][T18899] Modules linked in:
[ 1197.049339][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1197.058289][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1197.068352][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1197.074193][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1197.086156][T18911] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1197.093808][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1197.093831][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1197.093843][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1197.093853][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1197.093865][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1197.093877][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1197.093888][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1197.093903][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1197.100736][ T1414] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1197.106716][T18899] CR2: 0000001b3291dff8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1197.106737][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1197.106745][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1197.106756][T18899] Call Trace:
[ 1197.106762][T18899]  <TASK>
[ 1197.106773][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1197.193381][T18911] xt_hashlimit: max too large, truncated to 1048576
[ 1197.193815][T18899]  ? __kasan_check_write+0x14/0x20
[ 1197.217550][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1197.222259][T18899]  rb_buffer_peek+0x5f/0x930
[ 1197.226864][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1197.231979][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1197.237613][T18899]  ? print_trace_line+0x393/0x6b0
[ 1197.242638][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1197.247584][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1197.253049][T18899]  vfs_read+0x286/0x930
[ 1197.257204][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1197.261881][T18899]  ? __kasan_check_write+0x14/0x20
[ 1197.266989][T18899]  ? mutex_lock+0x93/0x1b0
[ 1197.271402][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1197.276254][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1197.280850][T18899]  ? ksys_read+0x70/0x260
[ 1197.285177][T18899]  ksys_read+0x14a/0x260
[ 1197.289421][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1197.294183][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1197.299994][T18899]  __x64_sys_read+0x7b/0x90
[ 1197.303355][ T1414] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1197.304496][T18899]  x64_sys_call+0x2f/0x9a0
[ 1197.311092][ T1414] usb 7-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[ 1197.315501][T18899]  do_syscall_64+0x4c/0xa0
[ 1197.315524][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1197.315545][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1197.332175][ T1414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.333616][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1197.333643][T18899] RIP: 0033:0x7ff5e159fb19
[ 1197.333657][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1197.376210][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1197.384639][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1197.392702][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1197.392857][ T1414] usb 7-1: config 0 descriptor??
[ 1197.400696][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1197.400712][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1197.400722][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1197.400739][T18899]  </TASK>
[ 1197.432532][T18899] ---[ end trace 0000000000000000 ]---
[ 1197.438019][T18899] ------------[ cut here ]------------
[ 1197.443460][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1197.453779][T18899] Modules linked in:
[ 1197.457656][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1197.466663][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1197.476787][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1197.482589][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1197.502457][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1197.508517][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1197.516474][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1197.524432][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1197.532561][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1197.540515][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1197.548470][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1197.557380][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1197.563955][T18899] CR2: 0000001b3291dff8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1197.571914][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1197.579866][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1197.587823][T18899] Call Trace:
[ 1197.591084][T18899]  <TASK>
[ 1197.594004][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1197.599723][T18899]  rb_advance_reader+0x2b/0x770
[ 1197.604560][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1197.609657][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1197.615271][T18899]  ? print_trace_line+0x393/0x6b0
[ 1197.620280][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1197.625209][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1197.630653][T18899]  vfs_read+0x286/0x930
[ 1197.634807][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1197.639494][T18899]  ? __kasan_check_write+0x14/0x20
[ 1197.644593][T18899]  ? mutex_lock+0x93/0x1b0
[ 1197.648999][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1197.653832][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1197.658405][T18899]  ? ksys_read+0x70/0x260
[ 1197.662719][T18899]  ksys_read+0x14a/0x260
[ 1197.667041][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1197.671791][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1197.677413][T18899]  __x64_sys_read+0x7b/0x90
[ 1197.681902][T18899]  x64_sys_call+0x2f/0x9a0
[ 1197.686304][T18899]  do_syscall_64+0x4c/0xa0
[ 1197.690706][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1197.695369][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1197.700047][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1197.705925][T18899] RIP: 0033:0x7ff5e159fb19
[ 1197.710323][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1197.729914][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1197.738835][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1197.746799][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1197.754761][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1197.762892][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1197.770848][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1197.778806][T18899]  </TASK>
[ 1197.781808][T18899] ---[ end trace 0000000000000000 ]---
[ 1197.797131][T16412] EXT4-fs (loop0): unmounting filesystem.
[ 1197.803985][T18899] ------------[ cut here ]------------
[ 1197.809458][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1197.819800][T18899] Modules linked in:
[ 1197.823695][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1197.832637][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1197.842700][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1197.848522][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1197.868216][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1197.874385][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1197.882365][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1197.890427][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1197.898402][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1197.906379][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1197.914364][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1197.923385][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1197.929973][T18899] CR2: 00005555620e8908 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1197.937948][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1197.945921][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1197.953897][T18899] Call Trace:
[ 1197.957169][T18899]  <TASK>
[ 1197.960096][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1197.965730][T18899]  ? __schedule+0xcbb/0x1700
[ 1197.970319][T18899]  ? __kasan_check_write+0x14/0x20
[ 1197.975429][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1197.980107][T18899]  rb_buffer_peek+0x5f/0x930
[ 1197.984694][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1197.989537][T18899]  ? __kasan_check_read+0x11/0x20
[ 1197.994560][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1197.999934][T18899]  ? _find_next_bit+0x8a/0x130
[ 1198.004700][T18899]  __find_next_entry+0x33c/0x6c0
[ 1198.009642][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1198.015109][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1198.020833][T18899]  ? print_trace_line+0x393/0x6b0
[ 1198.025858][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1198.030799][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1198.036263][T18899]  vfs_read+0x286/0x930
[ 1198.040431][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1198.045121][T18899]  ? __kasan_check_write+0x14/0x20
[ 1198.051100][T18899]  ? mutex_lock+0x93/0x1b0
[ 1198.055643][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1198.060501][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1198.065092][T18899]  ? ksys_read+0x70/0x260
[ 1198.069418][T18899]  ksys_read+0x14a/0x260
[ 1198.073757][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1198.078523][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1198.084162][T18899]  __x64_sys_read+0x7b/0x90
[ 1198.088679][T18899]  x64_sys_call+0x2f/0x9a0
[ 1198.093194][T18899]  do_syscall_64+0x4c/0xa0
[ 1198.097619][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.102386][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.107076][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1198.112995][T18899] RIP: 0033:0x7ff5e159fb19
[ 1198.117512][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1198.137210][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1198.145822][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1198.153797][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1198.161757][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1198.169752][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1198.177718][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1198.185683][T18899]  </TASK>
[ 1198.188689][T18899] ---[ end trace 0000000000000000 ]---
[ 1198.196764][T18899] ------------[ cut here ]------------
[ 1198.197265][ T1414] wacom 0003:056A:00B1.00A6: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[ 1198.202340][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1198.202379][T18899] Modules linked in:
[ 1198.202390][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1198.202408][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1198.202418][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1198.202440][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1198.202455][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1198.202470][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1198.213655][ T1414] wacom 0003:056A:00B1.00A6: hidraw0: USB HID v0.02 Device [HID 056a:00b1] on usb-dummy_hcd.6-1/input0
[ 1198.222219][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1198.227040][ T1414] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B1.00A6/input/input78
[ 1198.235173][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1198.235188][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1198.235200][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1198.235212][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1198.235228][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1198.235241][T18899] CR2: 00007f6a90209fe0 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1198.235258][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1198.235269][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1198.235281][T18899] Call Trace:
[ 1198.235287][T18899]  <TASK>
[ 1198.235296][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1198.391156][T18899]  ? __kasan_check_write+0x14/0x20
[ 1198.396263][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1198.400938][T18899]  rb_buffer_peek+0x5f/0x930
[ 1198.405651][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1198.410774][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1198.416410][T18899]  ? print_trace_line+0x393/0x6b0
[ 1198.421423][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1198.426354][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1198.431801][T18899]  vfs_read+0x286/0x930
[ 1198.435940][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1198.440690][T18899]  ? __kasan_check_write+0x14/0x20
[ 1198.445976][T18899]  ? mutex_lock+0x93/0x1b0
[ 1198.450400][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1198.455242][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1198.459823][T18899]  ? ksys_read+0x70/0x260
[ 1198.464142][T18899]  ksys_read+0x14a/0x260
[ 1198.468372][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1198.473121][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1198.478742][T18899]  __x64_sys_read+0x7b/0x90
[ 1198.483228][T18899]  x64_sys_call+0x2f/0x9a0
[ 1198.487639][T18899]  do_syscall_64+0x4c/0xa0
[ 1198.492039][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.496706][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.501373][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1198.507254][T18899] RIP: 0033:0x7ff5e159fb19
[ 1198.511657][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1198.531249][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1198.539654][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1198.547621][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1198.555581][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1198.563540][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1198.571502][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1198.579465][T18899]  </TASK>
[ 1198.582468][T18899] ---[ end trace 0000000000000000 ]---
[ 1198.587945][T18899] ------------[ cut here ]------------
[ 1198.593378][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1198.603698][T18899] Modules linked in:
[ 1198.607576][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1198.616496][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1198.626533][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1198.632338][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1198.651928][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1198.657986][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1198.665948][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1198.673907][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1198.681863][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1198.689822][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1198.697780][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1198.706697][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1198.713264][T18899] CR2: 00007f6a90209fe0 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1198.721223][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1198.729273][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1198.737233][T18899] Call Trace:
[ 1198.740493][T18899]  <TASK>
[ 1198.743416][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1198.749044][T18899]  rb_advance_reader+0x2b/0x770
[ 1198.753880][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1198.759068][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1198.764683][T18899]  ? print_trace_line+0x393/0x6b0
[ 1198.769691][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1198.774618][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1198.780064][T18899]  vfs_read+0x286/0x930
[ 1198.784212][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1198.788873][T18899]  ? __kasan_check_write+0x14/0x20
[ 1198.793985][T18899]  ? mutex_lock+0x93/0x1b0
[ 1198.798386][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1198.803227][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1198.807814][T18899]  ? ksys_read+0x70/0x260
[ 1198.812127][T18899]  ksys_read+0x14a/0x260
[ 1198.816356][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1198.821106][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1198.827075][T18899]  __x64_sys_read+0x7b/0x90
[ 1198.831578][T18899]  x64_sys_call+0x2f/0x9a0
[ 1198.835995][T18899]  do_syscall_64+0x4c/0xa0
[ 1198.840402][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.845072][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1198.849741][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1198.855624][T18899] RIP: 0033:0x7ff5e159fb19
[ 1198.860028][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1198.880162][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1198.888587][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1198.896566][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1198.904520][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1198.912478][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1198.920438][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1198.928401][T18899]  </TASK>
[ 1198.931401][T18899] ---[ end trace 0000000000000000 ]---
[ 1198.937385][T18899] ------------[ cut here ]------------
[ 1198.942856][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1198.953287][T18899] Modules linked in:
[ 1198.957184][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1198.966124][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1198.976188][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1198.982012][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1198.987770][  T307] usb 7-1: USB disconnect, device number 9
[ 1199.001715][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1199.001739][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1199.001751][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1199.001762][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1199.001774][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1199.045393][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1199.053363][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1199.062280][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1199.068849][T18899] CR2: 00007ffde4a5df18 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1199.076809][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1199.084763][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1199.092726][T18899] Call Trace:
[ 1199.095987][T18899]  <TASK>
[ 1199.098905][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1199.104527][T18899]  ? __schedule+0xcbb/0x1700
[ 1199.109101][T18899]  ? __kasan_check_write+0x14/0x20
[ 1199.114196][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1199.118856][T18899]  rb_buffer_peek+0x5f/0x930
[ 1199.123432][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1199.128265][T18899]  ? __kasan_check_read+0x11/0x20
[ 1199.133271][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1199.138633][T18899]  ? _find_next_bit+0x8a/0x130
[ 1199.143388][T18899]  __find_next_entry+0x33c/0x6c0
[ 1199.148315][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1199.153763][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1199.159378][T18899]  ? print_trace_line+0x393/0x6b0
[ 1199.164388][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1199.169323][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1199.174782][T18899]  vfs_read+0x286/0x930
[ 1199.178930][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1199.183610][T18899]  ? __kasan_check_write+0x14/0x20
[ 1199.188714][T18899]  ? mutex_lock+0x93/0x1b0
[ 1199.193122][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1199.197966][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1199.202548][T18899]  ? ksys_read+0x70/0x260
[ 1199.206899][T18899]  ksys_read+0x14a/0x260
[ 1199.211154][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1199.215991][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1199.221618][T18899]  __x64_sys_read+0x7b/0x90
[ 1199.226107][T18899]  x64_sys_call+0x2f/0x9a0
[ 1199.230514][T18899]  do_syscall_64+0x4c/0xa0
[ 1199.234919][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.239587][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.244255][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1199.250130][T18899] RIP: 0033:0x7ff5e159fb19
[ 1199.254526][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.274118][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1199.282516][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1199.290513][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1199.298469][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1199.306429][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1199.314385][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1199.322345][T18899]  </TASK>
[ 1199.325346][T18899] ---[ end trace 0000000000000000 ]---
[ 1199.333556][T18899] ------------[ cut here ]------------
[ 1199.339059][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1199.349373][T18899] Modules linked in:
[ 1199.353247][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1199.362160][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1199.372215][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1199.378018][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1199.397626][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1199.403866][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1199.411821][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1199.419780][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1199.427778][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1199.435734][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1199.443716][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1199.452665][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1199.459241][T18899] CR2: 0000001b33d16ff8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1199.467218][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1199.475181][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1199.483227][T18899] Call Trace:
[ 1199.486485][T18899]  <TASK>
[ 1199.489412][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1199.495026][T18899]  ? __kasan_check_write+0x14/0x20
[ 1199.500129][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1199.504784][T18899]  rb_buffer_peek+0x5f/0x930
[ 1199.509352][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1199.514457][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1199.520081][T18899]  ? print_trace_line+0x393/0x6b0
[ 1199.525082][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1199.530000][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1199.535436][T18899]  vfs_read+0x286/0x930
[ 1199.539607][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1199.544345][T18899]  ? __kasan_check_write+0x14/0x20
[ 1199.549454][T18899]  ? mutex_lock+0x93/0x1b0
[ 1199.553853][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1199.558698][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1199.563271][T18899]  ? ksys_read+0x70/0x260
[ 1199.567578][T18899]  ksys_read+0x14a/0x260
[ 1199.571815][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1199.576558][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1199.582172][T18899]  __x64_sys_read+0x7b/0x90
[ 1199.586776][T18899]  x64_sys_call+0x2f/0x9a0
[ 1199.591188][T18899]  do_syscall_64+0x4c/0xa0
[ 1199.595582][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.600264][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.605004][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1199.610877][T18899] RIP: 0033:0x7ff5e159fb19
[ 1199.615273][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.634877][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1199.643274][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1199.651328][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1199.659295][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1199.667251][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1199.675204][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1199.683166][T18899]  </TASK>
[ 1199.686169][T18899] ---[ end trace 0000000000000000 ]---
[ 1199.691656][T18899] ------------[ cut here ]------------
[ 1199.697085][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1199.707396][T18899] Modules linked in:
[ 1199.711273][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1199.720200][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1199.730238][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1199.736031][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1199.755792][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1199.761865][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1199.769840][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1199.777917][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1199.785905][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1199.793859][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1199.801812][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1199.810725][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1199.817289][T18899] CR2: 0000001b33d16ff8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1199.825240][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1199.833190][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1199.841160][T18899] Call Trace:
[ 1199.844423][T18899]  <TASK>
[ 1199.847344][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1199.852971][T18899]  rb_advance_reader+0x2b/0x770
[ 1199.857811][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1199.862907][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1199.868524][T18899]  ? print_trace_line+0x393/0x6b0
[ 1199.873536][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1199.878470][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1199.883914][T18899]  vfs_read+0x286/0x930
[ 1199.888056][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1199.892716][T18899]  ? __kasan_check_write+0x14/0x20
[ 1199.897812][T18899]  ? mutex_lock+0x93/0x1b0
[ 1199.902212][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1199.907047][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1199.911716][T18899]  ? ksys_read+0x70/0x260
[ 1199.916028][T18899]  ksys_read+0x14a/0x260
[ 1199.920255][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1199.925027][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1199.930645][T18899]  __x64_sys_read+0x7b/0x90
[ 1199.935132][T18899]  x64_sys_call+0x2f/0x9a0
[ 1199.939533][T18899]  do_syscall_64+0x4c/0xa0
[ 1199.943957][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.948620][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1199.953281][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1199.959158][T18899] RIP: 0033:0x7ff5e159fb19
[ 1199.963557][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.983145][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1199.991542][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1199.999495][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1200.007453][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1200.015408][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1200.023380][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1200.031340][T18899]  </TASK>
[ 1200.034342][T18899] ---[ end trace 0000000000000000 ]---
[ 1200.040280][T18899] ------------[ cut here ]------------
[ 1200.045743][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1200.056066][T18899] Modules linked in:
[ 1200.059944][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1200.068860][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1200.078899][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1200.084703][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1200.104291][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010006
[ 1200.110340][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1200.118292][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1200.126351][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1200.134479][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1200.142435][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1200.150389][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1200.159403][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1200.165974][T18899] CR2: 000055558d3814e8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1200.173936][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1200.181891][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1200.189848][T18899] Call Trace:
[ 1200.193112][T18899]  <TASK>
[ 1200.196032][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1200.201738][T18899]  ? __schedule+0xcbb/0x1700
[ 1200.206313][T18899]  ? __kasan_check_write+0x14/0x20
[ 1200.211408][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1200.216067][T18899]  rb_buffer_peek+0x5f/0x930
[ 1200.220644][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1200.225479][T18899]  ? __kasan_check_read+0x11/0x20
[ 1200.230487][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1200.235842][T18899]  ? _find_next_bit+0x8a/0x130
[ 1200.240591][T18899]  __find_next_entry+0x33c/0x6c0
[ 1200.245522][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1200.250968][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1200.256584][T18899]  ? print_trace_line+0x393/0x6b0
[ 1200.261600][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1200.266525][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1200.271970][T18899]  vfs_read+0x286/0x930
[ 1200.276108][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1200.280766][T18899]  ? __kasan_check_write+0x14/0x20
[ 1200.285859][T18899]  ? mutex_lock+0x93/0x1b0
[ 1200.290262][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1200.295099][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1200.299672][T18899]  ? ksys_read+0x70/0x260
[ 1200.303983][T18899]  ksys_read+0x14a/0x260
[ 1200.308208][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1200.312952][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1200.318570][T18899]  __x64_sys_read+0x7b/0x90
[ 1200.323055][T18899]  x64_sys_call+0x2f/0x9a0
[ 1200.327465][T18899]  do_syscall_64+0x4c/0xa0
[ 1200.331863][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1200.336523][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1200.341186][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1200.347061][T18899] RIP: 0033:0x7ff5e159fb19
[ 1200.351480][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1200.371159][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1200.379559][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1200.387518][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1200.395481][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1200.403884][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1200.411845][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1200.419812][T18899]  </TASK>
[ 1200.422818][T18899] ---[ end trace 0000000000000000 ]---
[ 1200.434844][T18899] ------------[ cut here ]------------
[ 1200.440321][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1200.450646][T18899] Modules linked in:
[ 1200.454533][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1200.463450][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1200.473487][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1200.479282][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1200.498872][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1200.505185][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1200.513232][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1200.521202][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1200.529160][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1200.537116][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1200.545597][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1200.554511][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1200.561078][T18899] CR2: 00007ffde4a56df8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1200.569044][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1200.576998][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1200.585473][T18899] Call Trace:
[ 1200.588737][T18899]  <TASK>
[ 1200.591661][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1200.597282][T18899]  ? __kasan_check_write+0x14/0x20
[ 1200.602407][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1200.607072][T18899]  rb_buffer_peek+0x5f/0x930
[ 1200.611671][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1200.616772][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1200.622910][T18899]  ? print_trace_line+0x393/0x6b0
[ 1200.627919][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1200.632846][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1200.638291][T18899]  vfs_read+0x286/0x930
[ 1200.642440][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1200.647109][T18899]  ? __kasan_check_write+0x14/0x20
[ 1200.652255][T18899]  ? mutex_lock+0x93/0x1b0
[ 1200.656677][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1200.661514][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1200.666088][T18899]  ? ksys_read+0x70/0x260
[ 1200.670414][T18899]  ksys_read+0x14a/0x260
[ 1200.674727][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1200.679475][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1200.685109][T18899]  __x64_sys_read+0x7b/0x90
[ 1200.689597][T18899]  x64_sys_call+0x2f/0x9a0
[ 1200.694027][T18899]  do_syscall_64+0x4c/0xa0
[ 1200.698427][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1200.703090][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1200.707838][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1200.713723][T18899] RIP: 0033:0x7ff5e159fb19
[ 1200.718124][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1200.737714][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1200.746120][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1200.754162][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1200.762119][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1200.770071][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1200.778026][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1200.785982][T18899]  </TASK>
[ 1200.788982][T18899] ---[ end trace 0000000000000000 ]---
[ 1200.794460][T18899] ------------[ cut here ]------------
[ 1200.799889][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1200.810223][T18899] Modules linked in:
[ 1200.814097][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1200.823066][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1200.833101][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1200.838898][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1200.858503][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1200.864551][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1200.872506][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1200.880460][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1200.888418][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1200.896388][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1200.904601][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1200.913512][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1200.920080][T18899] CR2: 00007ffde4a56df8 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1200.928036][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1200.935988][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1200.943939][T18899] Call Trace:
[ 1200.947201][T18899]  <TASK>
[ 1200.950121][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1200.955746][T18899]  rb_advance_reader+0x2b/0x770
[ 1200.960588][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1200.965680][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1200.971293][T18899]  ? print_trace_line+0x393/0x6b0
[ 1200.976298][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1200.981222][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1200.986663][T18899]  vfs_read+0x286/0x930
[ 1200.990808][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1200.995466][T18899]  ? __kasan_check_write+0x14/0x20
[ 1201.000562][T18899]  ? mutex_lock+0x93/0x1b0
[ 1201.004962][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1201.009796][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1201.014372][T18899]  ? ksys_read+0x70/0x260
[ 1201.018684][T18899]  ksys_read+0x14a/0x260
[ 1201.022908][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1201.027657][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1201.033274][T18899]  __x64_sys_read+0x7b/0x90
[ 1201.037759][T18899]  x64_sys_call+0x2f/0x9a0
[ 1201.042162][T18899]  do_syscall_64+0x4c/0xa0
[ 1201.046570][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.051238][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.055903][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1201.061785][T18899] RIP: 0033:0x7ff5e159fb19
[ 1201.066188][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.085865][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1201.094266][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1201.102222][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1201.110175][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1201.118214][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1201.126169][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1201.134127][T18899]  </TASK>
[ 1201.137128][T18899] ---[ end trace 0000000000000000 ]---
[ 1201.142943][T18899] ------------[ cut here ]------------
[ 1201.148407][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1201.158827][T18899] Modules linked in:
[ 1201.162700][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1201.171612][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1201.181645][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1201.187439][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1201.207048][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1201.213108][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1201.221064][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1201.229105][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1201.237082][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1201.245040][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1201.252997][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1201.261938][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1201.268555][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1201.276520][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1201.284498][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1201.292475][T18899] Call Trace:
[ 1201.295756][T18899]  <TASK>
[ 1201.298699][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1201.304356][T18899]  ? __schedule+0xcbb/0x1700
[ 1201.308945][T18899]  ? __kasan_check_write+0x14/0x20
[ 1201.314053][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1201.318714][T18899]  rb_buffer_peek+0x5f/0x930
[ 1201.323334][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1201.328170][T18899]  ? __kasan_check_read+0x11/0x20
[ 1201.333188][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1201.338571][T18899]  ? _find_next_bit+0x8a/0x130
[ 1201.343324][T18899]  __find_next_entry+0x33c/0x6c0
[ 1201.348261][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1201.353724][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1201.359343][T18899]  ? print_trace_line+0x393/0x6b0
[ 1201.364374][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1201.369301][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1201.374775][T18899]  vfs_read+0x286/0x930
[ 1201.378917][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1201.383573][T18899]  ? __kasan_check_write+0x14/0x20
[ 1201.388670][T18899]  ? mutex_lock+0x93/0x1b0
[ 1201.393074][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1201.397913][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1201.402483][T18899]  ? ksys_read+0x70/0x260
[ 1201.406797][T18899]  ksys_read+0x14a/0x260
[ 1201.411031][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1201.415795][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1201.421422][T18899]  __x64_sys_read+0x7b/0x90
[ 1201.425931][T18899]  x64_sys_call+0x2f/0x9a0
[ 1201.430358][T18899]  do_syscall_64+0x4c/0xa0
[ 1201.434768][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.439439][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.444109][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1201.449998][T18899] RIP: 0033:0x7ff5e159fb19
[ 1201.454404][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.474005][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1201.482409][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1201.490386][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1201.498373][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1201.506340][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1201.514332][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1201.522311][T18899]  </TASK>
[ 1201.525313][T18899] ---[ end trace 0000000000000000 ]---
[ 1201.532477][T18899] ------------[ cut here ]------------
[ 1201.537949][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1201.548264][T18899] Modules linked in:
[ 1201.552143][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1201.561101][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1201.571148][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1201.576943][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1201.596532][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1201.602590][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1201.610566][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1201.618544][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1201.626518][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1201.634485][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1201.642618][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1201.651555][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1201.658139][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1201.666093][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1201.674053][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1201.682105][T18899] Call Trace:
[ 1201.685366][T18899]  <TASK>
[ 1201.688281][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1201.693897][T18899]  ? __kasan_check_write+0x14/0x20
[ 1201.698995][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1201.703661][T18899]  rb_buffer_peek+0x5f/0x930
[ 1201.708258][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1201.713403][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1201.719017][T18899]  ? print_trace_line+0x393/0x6b0
[ 1201.724029][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1201.729072][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1201.734513][T18899]  vfs_read+0x286/0x930
[ 1201.738653][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1201.743310][T18899]  ? __kasan_check_write+0x14/0x20
[ 1201.748422][T18899]  ? mutex_lock+0x93/0x1b0
[ 1201.752847][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1201.757692][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1201.762270][T18899]  ? ksys_read+0x70/0x260
[ 1201.766619][T18899]  ksys_read+0x14a/0x260
[ 1201.770853][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1201.775631][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1201.781286][T18899]  __x64_sys_read+0x7b/0x90
[ 1201.785788][T18899]  x64_sys_call+0x2f/0x9a0
[ 1201.790196][T18899]  do_syscall_64+0x4c/0xa0
[ 1201.794597][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.799283][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1201.803964][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1201.809846][T18899] RIP: 0033:0x7ff5e159fb19
[ 1201.814261][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.833849][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1201.842256][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1201.850245][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1201.858207][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1201.866189][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1201.874144][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1201.882278][T18899]  </TASK>
[ 1201.885291][T18899] ---[ end trace 0000000000000000 ]---
[ 1201.890791][T18899] ------------[ cut here ]------------
[ 1201.896425][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1201.906752][T18899] Modules linked in:
[ 1201.910643][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1201.919654][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1201.929694][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1201.935511][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1201.955117][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1201.961178][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1201.969146][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1201.977132][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1201.985193][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1201.993153][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1202.001134][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1202.010071][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1202.016643][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1202.024606][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1202.032582][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1202.040636][T18899] Call Trace:
[ 1202.043902][T18899]  <TASK>
[ 1202.046819][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1202.052454][T18899]  rb_advance_reader+0x2b/0x770
[ 1202.057302][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1202.062457][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1202.068098][T18899]  ? print_trace_line+0x393/0x6b0
[ 1202.073108][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1202.078042][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1202.083480][T18899]  vfs_read+0x286/0x930
[ 1202.087656][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1202.092316][T18899]  ? __kasan_check_write+0x14/0x20
[ 1202.097438][T18899]  ? mutex_lock+0x93/0x1b0
[ 1202.101832][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1202.106672][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1202.111295][T18899]  ? ksys_read+0x70/0x260
[ 1202.115646][T18899]  ksys_read+0x14a/0x260
[ 1202.119873][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1202.124631][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1202.130262][T18899]  __x64_sys_read+0x7b/0x90
[ 1202.134747][T18899]  x64_sys_call+0x2f/0x9a0
[ 1202.139166][T18899]  do_syscall_64+0x4c/0xa0
[ 1202.143572][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.148248][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.152906][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1202.158787][T18899] RIP: 0033:0x7ff5e159fb19
[ 1202.163366][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.182958][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1202.191377][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1202.199332][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1202.207290][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1202.215260][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1202.223219][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1202.231179][T18899]  </TASK>
[ 1202.234178][T18899] ---[ end trace 0000000000000000 ]---
[ 1202.239924][T18899] ------------[ cut here ]------------
[ 1202.245379][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1202.255697][T18899] Modules linked in:
[ 1202.259571][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1202.268489][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1202.278523][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1202.284404][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1202.303993][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010012
[ 1202.310044][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1202.317997][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1202.326039][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1202.333992][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1202.341944][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1202.349899][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1202.359162][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1202.365729][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1202.373774][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1202.381728][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1202.389687][T18899] Call Trace:
[ 1202.392947][T18899]  <TASK>
[ 1202.395863][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1202.401481][T18899]  ? __schedule+0xcbb/0x1700
[ 1202.406064][T18899]  ? __kasan_check_write+0x14/0x20
[ 1202.411157][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1202.415816][T18899]  rb_buffer_peek+0x5f/0x930
[ 1202.420389][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1202.425223][T18899]  ? __kasan_check_read+0x11/0x20
[ 1202.430234][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1202.435600][T18899]  ? _find_next_bit+0x8a/0x130
[ 1202.440369][T18899]  __find_next_entry+0x33c/0x6c0
[ 1202.445366][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1202.450824][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1202.456440][T18899]  ? print_trace_line+0x393/0x6b0
[ 1202.461451][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1202.466375][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1202.471819][T18899]  vfs_read+0x286/0x930
[ 1202.475957][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1202.480613][T18899]  ? __kasan_check_write+0x14/0x20
[ 1202.485709][T18899]  ? mutex_lock+0x93/0x1b0
[ 1202.490107][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1202.494945][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1202.499515][T18899]  ? ksys_read+0x70/0x260
[ 1202.503825][T18899]  ksys_read+0x14a/0x260
[ 1202.508048][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1202.512793][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1202.518410][T18899]  __x64_sys_read+0x7b/0x90
[ 1202.522898][T18899]  x64_sys_call+0x2f/0x9a0
[ 1202.527302][T18899]  do_syscall_64+0x4c/0xa0
[ 1202.531698][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.536359][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.541022][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1202.546899][T18899] RIP: 0033:0x7ff5e159fb19
[ 1202.551300][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.570894][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1202.579300][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1202.587264][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1202.595221][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1202.603188][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1202.611144][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1202.619101][T18899]  </TASK>
[ 1202.622149][T18899] ---[ end trace 0000000000000000 ]---
[ 1202.627922][T18899] ------------[ cut here ]------------
[ 1202.633383][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1202.643726][T18899] Modules linked in:
[ 1202.647603][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1202.656531][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1202.666568][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1202.672368][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1202.692044][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1202.698097][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1202.706051][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1202.714006][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1202.721964][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1202.729921][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1202.737874][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1202.746789][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1202.753355][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1202.761319][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1202.769367][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1202.777318][T18899] Call Trace:
[ 1202.780578][T18899]  <TASK>
[ 1202.783495][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1202.789116][T18899]  ? __kasan_check_write+0x14/0x20
[ 1202.794211][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1202.798872][T18899]  rb_buffer_peek+0x5f/0x930
[ 1202.803447][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1202.808542][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1202.814157][T18899]  ? print_trace_line+0x393/0x6b0
[ 1202.819163][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1202.824089][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1202.829573][T18899]  vfs_read+0x286/0x930
[ 1202.833716][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1202.838378][T18899]  ? __kasan_check_write+0x14/0x20
[ 1202.843476][T18899]  ? mutex_lock+0x93/0x1b0
[ 1202.847878][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1202.852716][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1202.857288][T18899]  ? ksys_read+0x70/0x260
[ 1202.861598][T18899]  ksys_read+0x14a/0x260
[ 1202.865822][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1202.870565][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1202.876182][T18899]  __x64_sys_read+0x7b/0x90
[ 1202.880667][T18899]  x64_sys_call+0x2f/0x9a0
[ 1202.885066][T18899]  do_syscall_64+0x4c/0xa0
[ 1202.889552][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.894213][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1202.898876][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1202.904755][T18899] RIP: 0033:0x7ff5e159fb19
[ 1202.909153][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.928827][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1202.937225][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1202.945179][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1202.953135][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1202.961086][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1202.969036][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1202.976996][T18899]  </TASK>
[ 1202.979999][T18899] ---[ end trace 0000000000000000 ]---
[ 1202.985476][T18899] ------------[ cut here ]------------
[ 1202.990906][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1203.001218][T18899] Modules linked in:
[ 1203.005090][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1203.014175][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1203.024298][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1203.030089][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1203.049762][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1203.055811][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1203.063764][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1203.071717][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1203.079669][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1203.087624][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1203.095582][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1203.104493][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1203.111060][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1203.119015][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1203.126968][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1203.134919][T18899] Call Trace:
[ 1203.138179][T18899]  <TASK>
[ 1203.141097][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1203.146718][T18899]  rb_advance_reader+0x2b/0x770
[ 1203.151553][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1203.156646][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1203.162260][T18899]  ? print_trace_line+0x393/0x6b0
[ 1203.167270][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1203.172197][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1203.177648][T18899]  vfs_read+0x286/0x930
[ 1203.181791][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1203.186454][T18899]  ? __kasan_check_write+0x14/0x20
[ 1203.191553][T18899]  ? mutex_lock+0x93/0x1b0
[ 1203.195954][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1203.200788][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1203.205358][T18899]  ? ksys_read+0x70/0x260
[ 1203.209677][T18899]  ksys_read+0x14a/0x260
[ 1203.213905][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1203.218653][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1203.224272][T18899]  __x64_sys_read+0x7b/0x90
[ 1203.228760][T18899]  x64_sys_call+0x2f/0x9a0
[ 1203.233162][T18899]  do_syscall_64+0x4c/0xa0
[ 1203.237577][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.242242][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.246907][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1203.252787][T18899] RIP: 0033:0x7ff5e159fb19
[ 1203.257185][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1203.276773][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1203.285167][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1203.293141][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1203.301094][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1203.309046][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1203.316999][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1203.324960][T18899]  </TASK>
[ 1203.327964][T18899] ---[ end trace 0000000000000000 ]---
[ 1203.333948][T18899] ------------[ cut here ]------------
[ 1203.339410][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1203.349719][T18899] Modules linked in:
[ 1203.353596][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1203.362941][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1203.372974][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1203.378766][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1203.398457][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1203.404511][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1203.412485][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1203.420437][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1203.428410][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1203.436365][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1203.444350][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1203.453277][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1203.459846][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1203.467802][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1203.475758][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1203.483711][T18899] Call Trace:
[ 1203.487001][T18899]  <TASK>
[ 1203.489916][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1203.495533][T18899]  ? __schedule+0xcbb/0x1700
[ 1203.500113][T18899]  ? __kasan_check_write+0x14/0x20
[ 1203.505210][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1203.509867][T18899]  rb_buffer_peek+0x5f/0x930
[ 1203.514442][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1203.519797][T18899]  ? __kasan_check_read+0x11/0x20
[ 1203.524843][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1203.530198][T18899]  ? _find_next_bit+0x8a/0x130
[ 1203.534976][T18899]  __find_next_entry+0x33c/0x6c0
[ 1203.539915][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1203.545359][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1203.550973][T18899]  ? print_trace_line+0x393/0x6b0
[ 1203.555990][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1203.560922][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1203.566371][T18899]  vfs_read+0x286/0x930
[ 1203.570521][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1203.575267][T18899]  ? __kasan_check_write+0x14/0x20
[ 1203.580362][T18899]  ? mutex_lock+0x93/0x1b0
[ 1203.584760][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1203.589631][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1203.594337][T18899]  ? ksys_read+0x70/0x260
[ 1203.598659][T18899]  ksys_read+0x14a/0x260
[ 1203.602885][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1203.607737][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1203.613368][T18899]  __x64_sys_read+0x7b/0x90
[ 1203.617857][T18899]  x64_sys_call+0x2f/0x9a0
[ 1203.622349][T18899]  do_syscall_64+0x4c/0xa0
[ 1203.626759][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.631428][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.636109][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1203.642006][T18899] RIP: 0033:0x7ff5e159fb19
[ 1203.646405][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1203.666108][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1203.674511][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1203.682469][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1203.690518][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1203.698474][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1203.706457][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1203.714419][T18899]  </TASK>
[ 1203.717422][T18899] ---[ end trace 0000000000000000 ]---
[ 1203.723085][T18899] ------------[ cut here ]------------
[ 1203.728534][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1203.738853][T18899] Modules linked in:
[ 1203.742730][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1203.751635][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1203.761664][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1203.767451][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1203.787244][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1203.793290][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1203.801249][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1203.809214][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1203.817168][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1203.825116][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1203.833064][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1203.841985][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1203.848544][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1203.856496][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1203.864468][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1203.872421][T18899] Call Trace:
[ 1203.875689][T18899]  <TASK>
[ 1203.878607][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1203.884230][T18899]  ? __kasan_check_write+0x14/0x20
[ 1203.889325][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1203.893985][T18899]  rb_buffer_peek+0x5f/0x930
[ 1203.898570][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1203.903701][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1203.909332][T18899]  ? print_trace_line+0x393/0x6b0
[ 1203.914343][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1203.919277][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1203.924724][T18899]  vfs_read+0x286/0x930
[ 1203.928865][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1203.933611][T18899]  ? __kasan_check_write+0x14/0x20
[ 1203.938713][T18899]  ? mutex_lock+0x93/0x1b0
[ 1203.943112][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1203.947958][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1203.952553][T18899]  ? ksys_read+0x70/0x260
[ 1203.956881][T18899]  ksys_read+0x14a/0x260
[ 1203.961119][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1203.965871][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1203.971492][T18899]  __x64_sys_read+0x7b/0x90
[ 1203.975990][T18899]  x64_sys_call+0x2f/0x9a0
[ 1203.980399][T18899]  do_syscall_64+0x4c/0xa0
[ 1203.984799][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.989463][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1203.994126][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1204.000007][T18899] RIP: 0033:0x7ff5e159fb19
[ 1204.004404][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1204.024001][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1204.032398][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1204.040353][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1204.048307][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1204.056260][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1204.064386][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1204.072350][T18899]  </TASK>
[ 1204.075364][T18899] ---[ end trace 0000000000000000 ]---
[ 1204.080845][T18899] ------------[ cut here ]------------
[ 1204.086275][T18899] WARNING: CPU: 1 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1204.096597][T18899] Modules linked in:
[ 1204.100486][T18899] CPU: 1 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1204.109406][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1204.119445][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1204.125248][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1204.144847][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1204.150909][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1204.158869][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1204.166834][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1204.174802][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1204.182765][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1204.190743][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1204.199740][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1204.206309][T18899] CR2: 00007f6a8f5f72f8 CR3: 0000000149985000 CR4: 00000000003506a0
[ 1204.214265][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1204.222221][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1204.230186][T18899] Call Trace:
[ 1204.233461][T18899]  <TASK>
[ 1204.236385][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1204.242010][T18899]  rb_advance_reader+0x2b/0x770
[ 1204.246847][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1204.251943][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1204.257556][T18899]  ? print_trace_line+0x393/0x6b0
[ 1204.262563][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1204.267488][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1204.272929][T18899]  vfs_read+0x286/0x930
[ 1204.277072][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1204.281731][T18899]  ? __kasan_check_write+0x14/0x20
[ 1204.286830][T18899]  ? mutex_lock+0x93/0x1b0
[ 1204.291231][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1204.296070][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1204.300646][T18899]  ? ksys_read+0x70/0x260
[ 1204.304957][T18899]  ksys_read+0x14a/0x260
[ 1204.309181][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1204.313927][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1204.319548][T18899]  __x64_sys_read+0x7b/0x90
[ 1204.324037][T18899]  x64_sys_call+0x2f/0x9a0
[ 1204.328440][T18899]  do_syscall_64+0x4c/0xa0
[ 1204.332839][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1204.337501][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1204.342165][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1204.348043][T18899] RIP: 0033:0x7ff5e159fb19
[ 1204.352444][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1204.372040][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1204.380448][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1204.388406][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1204.396364][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1204.404320][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1204.412276][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1204.420244][T18899]  </TASK>
[ 1204.423246][T18899] ---[ end trace 0000000000000000 ]---
[ 1204.429290][T18899] ------------[ cut here ]------------
[ 1204.434757][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1204.445096][T18899] Modules linked in:
[ 1204.448999][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1204.457928][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1204.467981][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1204.473794][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1204.493409][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1204.499464][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1204.507415][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1204.515370][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1204.523337][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1204.531291][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1204.539244][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1204.548177][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1204.554780][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1204.562734][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1204.570706][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1204.578661][T18899] Call Trace:
[ 1204.581942][T18899]  <TASK>
[ 1204.584855][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1204.590469][T18899]  ? __schedule+0xcbb/0x1700
[ 1204.595042][T18899]  ? __kasan_check_write+0x14/0x20
[ 1204.600138][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1204.604880][T18899]  rb_buffer_peek+0x5f/0x930
[ 1204.609458][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1204.614289][T18899]  ? __kasan_check_read+0x11/0x20
[ 1204.619297][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1204.624649][T18899]  ? _find_next_bit+0x8a/0x130
[ 1204.629397][T18899]  __find_next_entry+0x33c/0x6c0
[ 1204.634319][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1204.639790][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1204.645415][T18899]  ? print_trace_line+0x393/0x6b0
[ 1204.650418][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1204.655339][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1204.660778][T18899]  vfs_read+0x286/0x930
[ 1204.664917][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1204.669572][T18899]  ? __kasan_check_write+0x14/0x20
[ 1204.674664][T18899]  ? mutex_lock+0x93/0x1b0
[ 1204.679061][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1204.683891][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1204.688458][T18899]  ? ksys_read+0x70/0x260
[ 1204.692775][T18899]  ksys_read+0x14a/0x260
[ 1204.697010][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1204.701759][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1204.707379][T18899]  __x64_sys_read+0x7b/0x90
[ 1204.711871][T18899]  x64_sys_call+0x2f/0x9a0
[ 1204.716273][T18899]  do_syscall_64+0x4c/0xa0
[ 1204.720672][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1204.725335][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1204.730001][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1204.735882][T18899] RIP: 0033:0x7ff5e159fb19
[ 1204.740285][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1204.759882][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1204.768291][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1204.776254][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1204.784215][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1204.792173][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1204.800128][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1204.808090][T18899]  </TASK>
[ 1204.811092][T18899] ---[ end trace 0000000000000000 ]---
[ 1204.816987][T18899] ------------[ cut here ]------------
[ 1204.822447][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1204.832761][T18899] Modules linked in:
[ 1204.836661][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1204.845575][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1204.855639][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1204.861465][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1204.881083][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1204.887144][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1204.895103][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1204.903061][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1204.911201][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1204.919169][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1204.927127][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1204.936039][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1204.942610][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1204.950576][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1204.958531][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1204.966493][T18899] Call Trace:
[ 1204.969766][T18899]  <TASK>
[ 1204.972681][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1204.978297][T18899]  ? __kasan_check_write+0x14/0x20
[ 1204.983392][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1204.988054][T18899]  rb_buffer_peek+0x5f/0x930
[ 1204.992625][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1204.997718][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1205.003337][T18899]  ? print_trace_line+0x393/0x6b0
[ 1205.008352][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1205.013275][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1205.018719][T18899]  vfs_read+0x286/0x930
[ 1205.022861][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1205.027522][T18899]  ? __kasan_check_write+0x14/0x20
[ 1205.032617][T18899]  ? mutex_lock+0x93/0x1b0
[ 1205.037025][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1205.041883][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1205.046566][T18899]  ? ksys_read+0x70/0x260
[ 1205.050887][T18899]  ksys_read+0x14a/0x260
[ 1205.055112][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1205.059856][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1205.065483][T18899]  __x64_sys_read+0x7b/0x90
[ 1205.069973][T18899]  x64_sys_call+0x2f/0x9a0
[ 1205.074372][T18899]  do_syscall_64+0x4c/0xa0
[ 1205.078788][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.083449][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.088142][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1205.094014][T18899] RIP: 0033:0x7ff5e159fb19
[ 1205.098408][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1205.117994][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1205.126417][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1205.134373][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1205.142441][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1205.150414][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1205.158368][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1205.166329][T18899]  </TASK>
[ 1205.169374][T18899] ---[ end trace 0000000000000000 ]---
[ 1205.174843][T18899] ------------[ cut here ]------------
[ 1205.180291][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1205.190623][T18899] Modules linked in:
[ 1205.194520][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1205.203438][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1205.213478][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1205.219307][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1205.238904][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1205.245070][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1205.253031][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1205.261032][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1205.269039][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1205.277037][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1205.285039][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1205.294365][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1205.300942][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1205.308933][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1205.316894][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1205.324874][T18899] Call Trace:
[ 1205.328143][T18899]  <TASK>
[ 1205.331060][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1205.336680][T18899]  rb_advance_reader+0x2b/0x770
[ 1205.341519][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1205.346621][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1205.352239][T18899]  ? print_trace_line+0x393/0x6b0
[ 1205.357256][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1205.362186][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1205.367630][T18899]  vfs_read+0x286/0x930
[ 1205.371774][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1205.376433][T18899]  ? __kasan_check_write+0x14/0x20
[ 1205.381538][T18899]  ? mutex_lock+0x93/0x1b0
[ 1205.385969][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1205.390805][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1205.395381][T18899]  ? ksys_read+0x70/0x260
[ 1205.399714][T18899]  ksys_read+0x14a/0x260
[ 1205.403940][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1205.408686][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1205.414306][T18899]  __x64_sys_read+0x7b/0x90
[ 1205.418799][T18899]  x64_sys_call+0x2f/0x9a0
[ 1205.423195][T18899]  do_syscall_64+0x4c/0xa0
[ 1205.427589][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.432246][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.436940][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1205.442814][T18899] RIP: 0033:0x7ff5e159fb19
[ 1205.447229][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1205.466818][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1205.475212][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1205.483167][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1205.491123][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1205.499185][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1205.507135][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1205.515093][T18899]  </TASK>
[ 1205.518093][T18899] ---[ end trace 0000000000000000 ]---
[ 1205.524175][T18899] ------------[ cut here ]------------
[ 1205.529640][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1205.539959][T18899] Modules linked in:
[ 1205.543838][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1205.552755][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1205.562792][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1205.568589][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1205.588190][T18899] RSP: 0018:ffffc9000161f820 EFLAGS: 00010002
[ 1205.594239][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1205.602191][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1205.610142][T18899] RBP: ffffc9000161f990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1205.618097][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1205.626051][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1205.634008][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1205.642931][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1205.649500][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1205.657982][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1205.665937][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1205.673895][T18899] Call Trace:
[ 1205.677167][T18899]  <TASK>
[ 1205.680085][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1205.685703][T18899]  ? __schedule+0xcbb/0x1700
[ 1205.690278][T18899]  ? __kasan_check_write+0x14/0x20
[ 1205.695371][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1205.700032][T18899]  rb_buffer_peek+0x5f/0x930
[ 1205.704604][T18899]  ring_buffer_peek+0x184/0x3b0
[ 1205.709436][T18899]  ? __kasan_check_read+0x11/0x20
[ 1205.714441][T18899]  ? __cfi_ring_buffer_peek+0x10/0x10
[ 1205.719795][T18899]  ? _find_next_bit+0x8a/0x130
[ 1205.724543][T18899]  __find_next_entry+0x33c/0x6c0
[ 1205.729485][T18899]  ? trace_find_next_entry+0x380/0x380
[ 1205.734932][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1205.740546][T18899]  ? print_trace_line+0x393/0x6b0
[ 1205.745552][T18899]  tracing_read_pipe+0x3d2/0xaf0
[ 1205.750492][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1205.755957][T18899]  vfs_read+0x286/0x930
[ 1205.760103][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1205.764771][T18899]  ? __kasan_check_write+0x14/0x20
[ 1205.769868][T18899]  ? mutex_lock+0x93/0x1b0
[ 1205.774266][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1205.779101][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1205.783849][T18899]  ? ksys_read+0x70/0x260
[ 1205.788245][T18899]  ksys_read+0x14a/0x260
[ 1205.792653][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1205.797398][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1205.803034][T18899]  __x64_sys_read+0x7b/0x90
[ 1205.807520][T18899]  x64_sys_call+0x2f/0x9a0
[ 1205.811920][T18899]  do_syscall_64+0x4c/0xa0
[ 1205.816326][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.821017][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1205.825693][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1205.831581][T18899] RIP: 0033:0x7ff5e159fb19
[ 1205.835992][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1205.855669][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1205.864114][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1205.872076][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1205.880033][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1205.888000][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1205.895955][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1205.903916][T18899]  </TASK>
[ 1205.906919][T18899] ---[ end trace 0000000000000000 ]---
[ 1205.913295][T18899] ------------[ cut here ]------------
[ 1205.918754][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1205.929077][T18899] Modules linked in:
[ 1205.933128][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1205.942046][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1205.952109][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1205.957910][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1205.977501][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010002
[ 1205.983556][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1205.991517][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1205.999479][T18899] RBP: ffffc9000161fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1206.007438][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1206.015397][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1206.023374][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1206.032295][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1206.038862][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1206.046820][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1206.054862][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1206.062826][T18899] Call Trace:
[ 1206.066091][T18899]  <TASK>
[ 1206.069017][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1206.074650][T18899]  ? __kasan_check_write+0x14/0x20
[ 1206.079765][T18899]  ? _raw_spin_lock+0x94/0xf0
[ 1206.084466][T18899]  rb_buffer_peek+0x5f/0x930
[ 1206.089047][T18899]  ring_buffer_consume+0x1aa/0x370
[ 1206.094168][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1206.099789][T18899]  ? print_trace_line+0x393/0x6b0
[ 1206.104796][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1206.109723][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1206.115166][T18899]  vfs_read+0x286/0x930
[ 1206.119305][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1206.123968][T18899]  ? __kasan_check_write+0x14/0x20
[ 1206.129064][T18899]  ? mutex_lock+0x93/0x1b0
[ 1206.133490][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1206.138329][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1206.142903][T18899]  ? ksys_read+0x70/0x260
[ 1206.147220][T18899]  ksys_read+0x14a/0x260
[ 1206.151448][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1206.156198][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1206.161818][T18899]  __x64_sys_read+0x7b/0x90
[ 1206.166306][T18899]  x64_sys_call+0x2f/0x9a0
[ 1206.170796][T18899]  do_syscall_64+0x4c/0xa0
[ 1206.175196][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1206.179861][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1206.184524][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1206.190402][T18899] RIP: 0033:0x7ff5e159fb19
[ 1206.194817][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1206.214410][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1206.222807][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1206.230762][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1206.238851][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1206.246807][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1206.254765][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1206.262812][T18899]  </TASK>
[ 1206.265818][T18899] ---[ end trace 0000000000000000 ]---
[ 1206.271298][T18899] ------------[ cut here ]------------
[ 1206.276731][T18899] WARNING: CPU: 0 PID: 18899 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[ 1206.287132][T18899] Modules linked in:
[ 1206.291006][T18899] CPU: 0 PID: 18899 Comm: syz.5.5677 Tainted: G    B   W          syzkaller #0
[ 1206.299920][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1206.309957][T18899] RIP: 0010:rb_get_reader_page+0xada/0xc60
[ 1206.315752][T18899] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 bf 3d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 4a 40 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[ 1206.335340][T18899] RSP: 0018:ffffc9000161f940 EFLAGS: 00010006
[ 1206.341490][T18899] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173d0b6
[ 1206.349466][T18899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[ 1206.357431][T18899] RBP: ffffc9000161fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[ 1206.365475][T18899] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[ 1206.373955][T18899] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000160
[ 1206.381910][T18899] FS:  00007ff5e23ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1206.390855][T18899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1206.397420][T18899] CR2: 00007ffde4a4eb84 CR3: 0000000149985000 CR4: 00000000003506b0
[ 1206.405477][T18899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1206.413449][T18899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1206.421415][T18899] Call Trace:
[ 1206.424685][T18899]  <TASK>
[ 1206.427608][T18899]  ? ring_buffer_read_page+0x1260/0x1260
[ 1206.433236][T18899]  rb_advance_reader+0x2b/0x770
[ 1206.438082][T18899]  ring_buffer_consume+0x1e7/0x370
[ 1206.443188][T18899]  ? __cfi_ring_buffer_consume+0x10/0x10
[ 1206.448823][T18899]  ? print_trace_line+0x393/0x6b0
[ 1206.453835][T18899]  tracing_read_pipe+0x5b3/0xaf0
[ 1206.458791][T18899]  ? __cfi_tracing_read_pipe+0x10/0x10
[ 1206.464239][T18899]  vfs_read+0x286/0x930
[ 1206.468381][T18899]  ? __cfi_vfs_read+0x10/0x10
[ 1206.473041][T18899]  ? __kasan_check_write+0x14/0x20
[ 1206.478139][T18899]  ? mutex_lock+0x93/0x1b0
[ 1206.482541][T18899]  ? __cfi_mutex_lock+0x10/0x10
[ 1206.487378][T18899]  ? __fdget_pos+0x2cd/0x380
[ 1206.491954][T18899]  ? ksys_read+0x70/0x260
[ 1206.496270][T18899]  ksys_read+0x14a/0x260
[ 1206.500849][T18899]  ? __cfi_ksys_read+0x10/0x10
[ 1206.505602][T18899]  ? fpregs_restore_userregs+0x128/0x260
[ 1206.511235][T18899]  __x64_sys_read+0x7b/0x90
[ 1206.515743][T18899]  x64_sys_call+0x2f/0x9a0
[ 1206.520155][T18899]  do_syscall_64+0x4c/0xa0
[ 1206.524560][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1206.529224][T18899]  ? clear_bhb_loop+0x30/0x80
[ 1206.533886][T18899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1206.539776][T18899] RIP: 0033:0x7ff5e159fb19
[ 1206.544183][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1206.563774][T18899] RSP: 002b:00007ff5e23ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1206.572174][T18899] RAX: ffffffffffffffda RBX: 00007ff5e1825fa0 RCX: 00007ff5e159fb19
[ 1206.580218][T18899] RDX: 0000000000004000 RSI: 0000200000006300 RDI: 0000000000000004
[ 1206.588175][T18899] RBP: 00007ff5e1637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1206.596131][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1206.604088][T18899] R13: 00007ff5e1826038 R14: 00007ff5e1825fa0 R15: 00007ffdcb1ee9a8
[ 1206.612048][T18899]  </TASK>
[ 1206.615141][T18899] ---[ end trace 0000000000000000 ]---