last executing test programs: 31.144458247s ago: executing program 2 (id=11): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)="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", 0x1f8}], 0x1) 31.115417838s ago: executing program 2 (id=12): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000640)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) 28.917110112s ago: executing program 2 (id=15): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) 28.640499558s ago: executing program 2 (id=19): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x20000a, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESDEC=r0], 0x1, 0x39a, &(0x7f0000000300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000cc0), 0x4) inotify_init1(0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000000ac0)={0x0, 0x2, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys_mount\x00', &(0x7f0000000080)='sysfs\x00', 0x10000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bfq', 0x3) getrandom(&(0x7f0000000d00)=""/286, 0x11e, 0x100000000000001) 28.411798474s ago: executing program 2 (id=22): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)="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", 0x21c}], 0x1) 28.245991168s ago: executing program 2 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@noload}]}, 0x0, 0x5e5, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 28.245816568s ago: executing program 32 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@noload}]}, 0x0, 0x5e5, &(0x7f00000000c0)="$eJzs3c1vVFUbAPDn3k4Lpe/7ti8xKi5MoyGQKC0tYPBjAXtC8GPnxkoLQcpHaI0WTSwJbkyMGxckrlyI/4US3boyunDhxpUhQWNIDMboNXd6ZxjamXZaZnqx8/slw9xzzsycc0ufnnPPPXduAD1rNP8njdgVEReTiOGGskoUhaNLr7v927sn80cSWfbyr0kkRV7t9UnxPFS8+a/hiG+/SmJn38p65xYun52anZ25VKTH589dHJ9buLzvzLmp0zOnZ85PPjN5+NDBQ4cn9t/X/qUN28euvvHW8AfHX/3skz+Tic9/PJ7Ekfjl1FJZ4350ymiMxp0se295fv5zPdzpykrSV/89uStZnsEDq1LESH9EPBLD0dfwvzkc779YauOArsqSiAzoUYn4hx5VGwfUju3bOw5OuzwqATbDraNRPfpfGf+VpbnBGKnODexe9r4mU3obktfxzdfHr+aPaDkPt71DtQGNFq9sK7aWx39Sjc2RIvZ23E7vmefNRwAniuc8/6UN1j+6LN2NeXigucUrEfFos/H/2vH/WkP8v77B+sU/AAAAAAAAdM6NoxHxdLPzf2lxbm57PFE9/5csnf/7/u4Vgkc6UP/a5//Smx2oBmji1tGIF5qu/62v8R3pK1L/XVoNmJw6MzuzPyL+FxF7o39bnp5YpY59H+681qqscf1f/sjrr60FLNpxs7Lt3vdMT81P3c8+A0tuXYl4rNJ6/U/e/yeN/X8h/3twsc06du6+fqJV2drxD3RL9mnEnqb9f1J/TbL693OMV8cD47VRwUqPv/PRF63qF/9Qnrz/37F6/I8kjd/XM7e+zx+IiAMLlaxV+UbH/wPJK321z8+9PTU/f2kiYiA5tjJ/cn1thq2qFg+1eMnjf++Tq8//1cf/DXE4GBGLbdb58N9DP7UqG43Iio/V/8Mmy+N/ukn/P9iy/1//xuT1kS9b1d9e/3+w2qfvLXLM/8Hq2g3QstsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9GaUT8J5J0rL6dpmNjEUMR8VDsSGcvzM0/derCm+en87Lq/f/T2p1+h5fSSe3+/yMN6cll6QMR8f+I+LhvsJoeO3lhdrrsnQcAAAAAAAAAAAAAAAAAAIAHxFCL6/9zP/eV3Tqg6yrFs3iH3lMpuwFAacQ/9C7xD71L/EPvaiP+72xGO4DNt8H+3+kC2AKM/6FX9bf3su3dbgdQBv0/AAAAAABsKTeef/ZaEhGLzw1WH7mBoqx+YnCwrNYB3ZSW3QCgNNbwQu+y9Ad6V5uLf4EtLKlv/ZE1K2+9+j/pToMAAAAAAAAAAAAAgBX27Lrxw5rX/wNbUhpxpOw2AOVw/T/0Ltf/Q+9qcYzvmAB6yFpX8W/o+n+3DAQAAAAAAAAAAACAjppbuHx2qnYT8KnZ2ZlL1RwbW3Tju9+zbF3vyrLyfjf6I6L0n1gpGwON4bkZlUbE4oocAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggfBPAAAA//9wQh8o") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 9.847989388s ago: executing program 1 (id=226): setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000b80)={0x1, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$getown(r1, 0x9) setpgid(r4, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000c00), 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000d40)={0x0, 0x2000}, 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000100)='./cgroup\x00', 0x8011, &(0x7f0000000180)={[{@noacl}, {@acl}]}, 0x0, 0x66a, &(0x7f0000000ec0)="$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") 9.749273311s ago: executing program 4 (id=233): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000640)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) 9.739036881s ago: executing program 1 (id=234): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) 8.205866699s ago: executing program 1 (id=236): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.082223291s ago: executing program 4 (id=238): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x1) 7.983716054s ago: executing program 4 (id=243): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7.937747105s ago: executing program 4 (id=245): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r4, 0x0, 0x2000000008, 0x0) 7.536981185s ago: executing program 3 (id=250): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000640)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 7.252994292s ago: executing program 1 (id=254): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1dc) mount(0x0, &(0x7f0000000640)='./trace\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) sigaltstack(&(0x7f0000000700)={0x0, 0x3}, 0x0) write(r4, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000780), 0x1000) mkdir(0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/custom0\x00', 0x6, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) open(&(0x7f0000000840)='./bus\x00', 0x14927f, 0x1e9) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 5.432015186s ago: executing program 4 (id=255): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@noload}]}, 0x0, 0x5e5, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000009c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) r3 = syz_create_resource$futex(&(0x7f00000007c0)=0x1) futex(r3, 0xd, 0x2, &(0x7f00000009c0)={0x0, 0x3938700}, r3, 0x2) futex(0x0, 0x2, 0x1, 0x0, r3, 0x1) 5.350279688s ago: executing program 0 (id=257): setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000b80)={0x1, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$getown(r1, 0x9) setpgid(r4, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000c00), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000d40)={0x0, 0x2000}, 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000100)='./cgroup\x00', 0x8011, &(0x7f0000000180)={[{@noacl}, {@acl}]}, 0x0, 0x66a, &(0x7f0000000ec0)="$eJzs3c9vE9kdAPDvTJzfbR1Q1ZYeStSqAqklIQEqVFWCXCpVQoj+uPWUkoAohiCSqg1FaiLRS6Wqlx4q9dRD2dMe9h/YRdrLHvaw1z3sZU8rJLRacVhW7OLV2DPBceLEIbEdks9HcjLjsd/7GvzNe/P83jiAQ2s8+5FGHIuIO0lEueFYKfKD4/XHPf3s/tXslkS1+ttPk7j/t2Slsawk/z2aP/mrciQfpBFH+zbWu7h87+ZspTJ/N9+fXLp1Z3Jx+d6pG7dmr89fn789/bPp8+fOnjs/dXpXr+9C/deX2Y9LD/745/I/Lv/+//99nky98dHlJC7Gizy27HU1P3dwVzVn/2bjUa17tu5AGnF+l2XvF5+Xi/dJzWD2hkhKTQ8a6HZUtCvNc6Q/Ir4b5eiLl8lajr//uqfBAR1VTaLWRo1XgcMniXW7WYeg2L4xlP+R2GioG6EBHVX0A4pz+83OgzdKO9klAbrkyUx9rK6e+/0RUeR/qT42GEO1sYGRp0njOE9trG93I3N1WR3vv3v5QXaLFuNwQGesrBaj3M3tf1LLzbGonwOMPE3X5f9M3gtI888JftNccJuD5+NN+/IfumdlNSK+l7f/A9F2/qd57hb5/4d1pR5ru375DwAAAAAAAHvn0UxE/HSz+X/p2vyfgU3m/4xGxMU9qH/7z//Sx/lGsgfVAQ2ezET8opj/m93RkP+5sb5875u1+QD9ybUblfnTEfGtiDgZ/YPZ/lRTuY0zhE/98+h/WtXfOP8vu2VxFHMB85Iel5rmEs3NLs3u8mUDWf6vRny/Nv/3eH7P+vk/WfufbNL+Z/l9p806jv744ZVWx7bPf6BTqv+LOLHp+p+X3e1k6+tzTNb6A5NFr2CjH/z1X2+3ql/+Q+9k7f/I1vk/mDRer2dxZ+UPRMSZ5VK11fFX7f8PJL/ri4ZLy/xldmnp7lTEQHJp4/3TO4sZDqoiH4p8yfL/5I+2Hv9b6/835OFwRKy0Wed3Xox+3OqY9h96J8v/ua3b//L69n/nG9MPx95pVf+Vttr/s7U2/WR+j/E/aLTxehztJmhPwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA11waEd+IJJ1Y207TiYmI0Yj4doyklYXFpZ9cW/jT7bnsWO37/9Pim37L9f2k+P7/sYb96ab9MxFxJCL+3Tdc25+4ulCZ6/WLBwAAAAAAAAAAAAAAAAAAgH1itLbmvzrYvP4/80lfr6MDOq6U/5bvcPiUXvmZ1cE9DQToulfPf+B1trqj/O/vaCxA97XO/2fPqzVNd//yhx2PCegO/X84vHae/z4pgIOiVf4PdDkOoNvaHNMb6nQcQC84/wcAAAAAgAPlyPFHHyYRsfLz4dotGj72H+5pZECnpb0OAOgZE3nh8Cot9DoCoFcs6AeSta0vmhf717Se/Z90JiAAAAAAAAAAAAAAYIMTx1qv/7c2AA62rdf/m9sPB9kW6/83S36XC4ADpP7VHyubHNH2w0HnHB/YrrW3/h8AAAAAAAAAAAAA9oGhezdnK5X5u4vL224UM33benA3Ni7sjzB2trEyu7tyqoMtDr3Xu9f1ogMll/J3246fXqxR3R//3WsbWUiVyny1GrH9g4tLcGxb8ptvJb/KS97jmLv+lwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjh6wAAAP//hQUQKg==") 5.301611159s ago: executing program 3 (id=259): gettid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000680)={[{@norecovery}, {@stripe={'stripe', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@user_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x612, &(0x7f0000000a00)="$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") open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000740)={[{@bh}, {@nodelalloc}, {@journal_async_commit}, {@dax_inode}, {@noacl}, {@nogrpid}], [{@euid_gt}, {@fowner_eq}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt}, {@fowner_lt}]}, 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001440)="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", 0x8f9}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x1, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) flock(0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000600)=0x5, &(0x7f0000000640)=0x2) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 5.054058716s ago: executing program 0 (id=261): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) 4.839995941s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 4.777841042s ago: executing program 0 (id=264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)="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", 0x234}], 0x1) 4.772069943s ago: executing program 0 (id=265): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000140)={0x1}) 4.671633555s ago: executing program 0 (id=266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r4, 0x0, 0x2000000008, 0x0) 2.041500939s ago: executing program 4 (id=270): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 2.04067401s ago: executing program 1 (id=271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00000ad000/0x9000)=nil, 0x9000, 0x2000004, 0x12, 0xffffffffffffffff, 0xfe801000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000900)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000940)=0x17) 1.6147056s ago: executing program 3 (id=272): setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000b80)={0x1, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$getown(r1, 0x9) setpgid(r4, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000c00), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000d40)={0x0, 0x2000}, 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000100)='./cgroup\x00', 0x8011, &(0x7f0000000180)={[{@noacl}, {@acl}]}, 0x0, 0x66a, &(0x7f0000000ec0)="$eJzs3c9vE9kdAPDvTJzfbR1Q1ZYeStSqAqklIQEqVFWCXCpVQoj+uPWUkoAohiCSqg1FaiLRS6Wqlx4q9dRD2dMe9h/YRdrLHvaw1z3sZU8rJLRacVhW7OLV2DPBceLEIbEdks9HcjLjsd/7GvzNe/P83jiAQ2s8+5FGHIuIO0lEueFYKfKD4/XHPf3s/tXslkS1+ttPk7j/t2Slsawk/z2aP/mrciQfpBFH+zbWu7h87+ZspTJ/N9+fXLp1Z3Jx+d6pG7dmr89fn789/bPp8+fOnjs/dXpXr+9C/deX2Y9LD/745/I/Lv/+//99nky98dHlJC7Gizy27HU1P3dwVzVn/2bjUa17tu5AGnF+l2XvF5+Xi/dJzWD2hkhKTQ8a6HZUtCvNc6Q/Ir4b5eiLl8lajr//uqfBAR1VTaLWRo1XgcMniXW7WYeg2L4xlP+R2GioG6EBHVX0A4pz+83OgzdKO9klAbrkyUx9rK6e+/0RUeR/qT42GEO1sYGRp0njOE9trG93I3N1WR3vv3v5QXaLFuNwQGesrBaj3M3tf1LLzbGonwOMPE3X5f9M3gtI888JftNccJuD5+NN+/IfumdlNSK+l7f/A9F2/qd57hb5/4d1pR5ru375DwAAAAAAAHvn0UxE/HSz+X/p2vyfgU3m/4xGxMU9qH/7z//Sx/lGsgfVAQ2ezET8opj/m93RkP+5sb5875u1+QD9ybUblfnTEfGtiDgZ/YPZ/lRTuY0zhE/98+h/WtXfOP8vu2VxFHMB85Iel5rmEs3NLs3u8mUDWf6vRny/Nv/3eH7P+vk/WfufbNL+Z/l9p806jv744ZVWx7bPf6BTqv+LOLHp+p+X3e1k6+tzTNb6A5NFr2CjH/z1X2+3ql/+Q+9k7f/I1vk/mDRer2dxZ+UPRMSZ5VK11fFX7f8PJL/ri4ZLy/xldmnp7lTEQHJp4/3TO4sZDqoiH4p8yfL/5I+2Hv9b6/835OFwRKy0Wed3Xox+3OqY9h96J8v/ua3b//L69n/nG9MPx95pVf+Vttr/s7U2/WR+j/E/aLTxehztJmhPwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA11waEd+IJJ1Y207TiYmI0Yj4doyklYXFpZ9cW/jT7bnsWO37/9Pim37L9f2k+P7/sYb96ab9MxFxJCL+3Tdc25+4ulCZ6/WLBwAAAAAAAAAAAAAAAAAAgH1itLbmvzrYvP4/80lfr6MDOq6U/5bvcPiUXvmZ1cE9DQToulfPf+B1trqj/O/vaCxA97XO/2fPqzVNd//yhx2PCegO/X84vHae/z4pgIOiVf4PdDkOoNvaHNMb6nQcQC84/wcAAAAAgAPlyPFHHyYRsfLz4dotGj72H+5pZECnpb0OAOgZE3nh8Cot9DoCoFcs6AeSta0vmhf717Se/Z90JiAAAAAAAAAAAAAAYIMTx1qv/7c2AA62rdf/m9sPB9kW6/83S36XC4ADpP7VHyubHNH2w0HnHB/YrrW3/h8AAAAAAAAAAAAA9oGhezdnK5X5u4vL224UM33benA3Ni7sjzB2trEyu7tyqoMtDr3Xu9f1ogMll/J3246fXqxR3R//3WsbWUiVyny1GrH9g4tLcGxb8ptvJb/KS97jmLv+lwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjh6wAAAP//hQUQKg==") 361.461501ms ago: executing program 1 (id=274): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) 361.216621ms ago: executing program 5 (id=275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d}, {0x0, 0x81, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x4, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty, 0x2, 0x5}]}]}, 0x13c}}, 0x0) 361.018901ms ago: executing program 3 (id=276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)="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", 0x234}], 0x1) 342.665421ms ago: executing program 5 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1fd) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000740)='./proc/fs/nfsd\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.stat\x00', 0x275a, 0x0) 342.080401ms ago: executing program 3 (id=278): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x22040, &(0x7f0000000200)={[{@jqfmt_vfsold}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '%!'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise}]}, 0x1, 0xbb3, &(0x7f0000020400)="$eJzs3c9vVNUeAPDvvZ3+oOW9lpe3eLyYUOMCEsO0BRQkLsClujCRBF1h7Q/SMIDSmlhCYtmZuFGDK1eu1ESXujTEqHHhwuiK/8CQNKbwB9TcO3fK0M60FGZ6tXw+ye2cM2eG872TfOecO/dcbgCPrdHsTxqxPyI+TCKGi+fTiOjLSwMRS/XX3V25NpVtSayuvvpnEklE3Fm5NtX4t5LicSj7U8nfGb99H/Gfno39zi9evTBZq81cKepjCxffGptfvHp47uLk+ZnzM5eOPDt+dOK5YyeeOXbvTQOPtq+Lx9MPfn3xhS9unPv0l69PPPF+Eqdib9HWvB+dMhqja59Js0pEvN7pzkrSU+xPq/28X9+OxAMAwObSpjnc/hiOnrxUNxzVuVKDAwAAADrivYhYBQAAAHa5xPE/AAAA7HKNdQB3Vq5NNbZyVyQAO2X5dESM1PO/cX1/vaUSS/njQPRGxODdpOnKoPr13iMd6H80Ir765PiBbIsuXYcPtLZ0PSL+12r8T/L8Hyn+0431+Z9GxHgH+h9dV5f/sHNa5X/9uGDr/D/Vgf7lPwAAAAAAAHTOzdP1E/kbz/+na+t/osX5v54W5+4extbn/9LbHegGaGH5dMTzTff2uduU/4WRnqL2r3w9QG8yO1ebGY+If0fEoejtz+oTm/Tx+Tcnf2/X1rz+L9uy/htrAYs4blf673/P9OTC5KPsM1C3fD3i/5VW+Z+sjf/JuvG/r1j/+8oD9vHj2e9m27Vtnf9At6x+FnGw5fh/745uyeb35xvL5wNjjVnBRmef/OHLdv3LfyhPNv4Pbp7/I0nz/Trnt9/H+ODh8+3aHnb+35ecye8q2rir5LuTCwtXJiL6kpc3Pn9k+zHDbtTIh0a+ZPl/6KnWx//t5v9R/P73RvEtkUbEZPGY1d9c12f/uZ8+aheP8R/Ks/x2xPS2xv/tFz5+beVMu/4fbPw/lo/ph4pn/P4Hm3vQBC07TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg7SSNibyRpda2cptVqxFBE/DcG09rl+YWnZy+/c2k6a4sYid50dq42Mx4Rw/V6ktUn8vK9+pF19aMRsS8ibgzvyevVqcu16bJ3HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDVDEbE3krQaEWleTtNqtd72x3DZ0QEAAAAdM1J2AAAAAEDXOf4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BHtO3DzVhIRSyf35Fumr2jrLTUyoNvSiPi57CCAUvSUHQBQmkrZAQClcYwPJFu0D7RtMYMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJwc3H/zVhIRSyf35Fumr2jrLTUyoNvS7by4v3txADuvp+wAgNJUyg4AKE3bY/xvh3Y2EKA0yRbtA21bWswgTCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdq35xasXJmu1mSsKmxYqEdHdLgYiYkd256W07A9T4R9QKPubCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN3srwAAAP//YnT9VA==") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1e6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0xfffeffff, 0x4) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x4004c081) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000480)={0x8, 0x2, 0x9, 0xb, 0x7, 0xc}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) rename(0x0, &(0x7f00000002c0)='./file1\x00') 290.055453ms ago: executing program 5 (id=279): recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000400)=0x400000d2, 0x4) shutdown(0xffffffffffffffff, 0x1) 289.853562ms ago: executing program 5 (id=280): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)='B', 0x1}], 0x1}}, {{&(0x7f0000000780)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x0) 289.763993ms ago: executing program 5 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='mpol=interlReave:N-N']) 287.164353ms ago: executing program 5 (id=282): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1dc) mount(0x0, &(0x7f0000000640)='./trace\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) sigaltstack(&(0x7f0000000700)={0x0, 0x3}, 0x0) write(r4, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000780), 0x1000) mkdir(0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/custom0\x00', 0x6, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) open(&(0x7f0000000840)='./bus\x00', 0x14927f, 0x1e9) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 3 (id=283): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000640)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000680), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 21.227794][ T28] audit: type=1400 audit(1792039404.903:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.228829][ T279] cgroup: Unknown subsys name 'net' [ 21.250475][ T28] audit: type=1400 audit(1792039404.903:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.277905][ T28] audit: type=1400 audit(1792039404.933:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.278054][ T279] cgroup: Unknown subsys name 'devices' [ 21.393984][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.399618][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.531762][ T28] audit: type=1400 audit(1792039405.203:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.554930][ T28] audit: type=1400 audit(1792039405.203:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.579728][ T28] audit: type=1400 audit(1792039405.203:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.593071][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.611718][ T28] audit: type=1400 audit(1792039405.283:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.637148][ T28] audit: type=1400 audit(1792039405.283:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.671178][ T28] audit: type=1400 audit(1792039405.343:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.671603][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.697101][ T28] audit: type=1400 audit(1792039405.343:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.915189][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.922250][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.929835][ T287] device bridge_slave_0 entered promiscuous mode [ 22.938367][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.945524][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.952857][ T287] device bridge_slave_1 entered promiscuous mode [ 23.047828][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.054898][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.062377][ T289] device bridge_slave_0 entered promiscuous mode [ 23.069165][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.076307][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.083633][ T290] device bridge_slave_0 entered promiscuous mode [ 23.090843][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.097907][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.105250][ T290] device bridge_slave_1 entered promiscuous mode [ 23.115771][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.122863][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.130192][ T289] device bridge_slave_1 entered promiscuous mode [ 23.179531][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.186662][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.194189][ T291] device bridge_slave_0 entered promiscuous mode [ 23.200858][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.207924][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.215305][ T288] device bridge_slave_0 entered promiscuous mode [ 23.234526][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.241569][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248960][ T291] device bridge_slave_1 entered promiscuous mode [ 23.255515][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.262953][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.270252][ T288] device bridge_slave_1 entered promiscuous mode [ 23.359009][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.366088][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.373392][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.380408][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.450362][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.457433][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.464733][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471820][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.495586][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.502664][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.510106][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.517167][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.538496][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.546175][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.554472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.562130][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.569712][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.577137][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.584570][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.594547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.602913][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.609952][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.632424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.681736][ T289] device veth0_vlan entered promiscuous mode [ 23.689106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.697471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.706391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.714683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.722045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.729732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.738016][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.745151][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.752639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.760543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.768676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.776929][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.783971][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.791290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.799655][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.806713][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.814295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.822222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.830623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.838882][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.845939][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.853346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.863224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.872910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.881139][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.888202][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.911927][ T287] device veth0_vlan entered promiscuous mode [ 23.920680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.928866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.937273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.945705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.953925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.961378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.984039][ T289] device veth1_macvtap entered promiscuous mode [ 23.996485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.004357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.011822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.019703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.028273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.036590][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.043636][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.051144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.059504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.067757][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.074797][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.090661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.098798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.107029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.115071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.123120][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.131030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.139318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.147459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.165848][ T287] device veth1_macvtap entered promiscuous mode [ 24.174285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.183463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.191783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.200212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.208524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.216521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.224591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.232927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.240371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.247972][ T291] device veth0_vlan entered promiscuous mode [ 24.262756][ T291] device veth1_macvtap entered promiscuous mode [ 24.270267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.278660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.287254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.297794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.306208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.320786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.328594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.336209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.344823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.353340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.361651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.370175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.378535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.392085][ T288] device veth0_vlan entered promiscuous mode [ 24.402143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.410481][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.418764][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.425814][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.433853][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.442132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.450535][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.457604][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.465061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.472990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.481005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.488817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.516624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.525195][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.525500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.543477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.551893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.560901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.569446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.577672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.586317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.594625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.618911][ T288] device veth1_macvtap entered promiscuous mode [ 24.627468][ T311] loop3: detected capacity change from 0 to 7 [ 24.634938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.643447][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.649678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.652616][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.652778][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.666732][ T290] device veth0_vlan entered promiscuous mode [ 24.668647][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.684624][ T290] device veth1_macvtap entered promiscuous mode [ 24.699010][ T311] loop3: unable to read partition table [ 24.705005][ T311] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 24.713983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.726137][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.734389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.735028][ T317] loop1: detected capacity change from 0 to 1024 [ 24.743135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.756919][ T317] ======================================================= [ 24.756919][ T317] WARNING: The mand mount option has been deprecated and [ 24.756919][ T317] and is ignored by this kernel. Remove the mand [ 24.756919][ T317] option from the mount to silence this warning. [ 24.756919][ T317] ======================================================= [ 24.775786][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.793009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.808867][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.809628][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.818105][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.818608][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.827233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.833966][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.843642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.851791][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.860079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.866956][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.868158][ T317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.876290][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.876316][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.884559][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.896066][ T317] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.900692][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.937476][ T317] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 3) [ 24.945064][ T314] loop3: unable to read partition table [ 24.961363][ T317] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 24.966786][ T314] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 24.977082][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.989876][ T317] EXT4-fs (loop1): This should not happen!! Data will be lost [ 24.989876][ T317] [ 24.998452][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.001092][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.025358][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.034263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.044354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.057836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.072983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.081452][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.081564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.098332][ T326] FAULT_INJECTION: forcing a failure. [ 25.098332][ T326] name failslab, interval 1, probability 0, space 0, times 1 [ 25.104007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.117067][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.130464][ T326] CPU: 0 PID: 326 Comm: syz.2.7 Not tainted syzkaller #0 [ 25.138903][ T327] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm syz.1.2: lblock 8 mapped to illegal pblock 8 (length 8) [ 25.144976][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 25.145003][ T326] Call Trace: [ 25.145008][ T326] [ 25.145016][ T326] __dump_stack+0x21/0x24 [ 25.159136][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.168780][ T326] dump_stack_lvl+0x110/0x170 [ 25.168815][ T326] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.172578][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.175010][ T326] dump_stack+0x15/0x24 [ 25.179683][ T327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 25.193048][ T326] should_fail_ex+0x3bf/0x510 [ 25.193078][ T326] __should_failslab+0xac/0xf0 [ 25.193097][ T326] should_failslab+0x9/0x20 [ 25.193112][ T326] slab_pre_alloc_hook+0x30/0x1d0 [ 25.193133][ T326] kmem_cache_alloc_lru+0x49/0x280 [ 25.193154][ T326] ? __d_alloc+0x34/0x6d0 [ 25.193177][ T326] ? __cfi_get_random_u32+0x10/0x10 [ 25.193197][ T326] __d_alloc+0x34/0x6d0 [ 25.198829][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.202911][ T326] ? current_time+0x19b/0x2c0 [ 25.202939][ T326] d_alloc_pseudo+0x1d/0x70 [ 25.216695][ T327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 25.216695][ T327] [ 25.220766][ T326] alloc_file_pseudo+0xe0/0x200 [ 25.233547][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.237640][ T326] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 25.253167][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.256962][ T326] ? shmem_get_inode+0x7f3/0xba0 [ 25.256988][ T326] ? __kasan_check_write+0x14/0x20 [ 25.257004][ T326] ? clear_nlink+0x8a/0xe0 [ 25.257026][ T326] __shmem_file_setup+0x1df/0x2b0 [ 25.257045][ T326] shmem_file_setup+0x2f/0x40 [ 25.257064][ T326] __se_sys_memfd_create+0x1de/0x3c0 [ 25.257081][ T326] __x64_sys_memfd_create+0x5b/0x70 [ 25.257098][ T326] x64_sys_call+0x235/0x9a0 [ 25.261630][ T317] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 25.266581][ T326] do_syscall_64+0x4c/0xa0 [ 25.266608][ T326] ? clear_bhb_loop+0x30/0x80 [ 25.402749][ T326] ? clear_bhb_loop+0x30/0x80 [ 25.407446][ T326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.413352][ T326] RIP: 0033:0x7f0986f9e559 [ 25.417783][ T326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.437485][ T326] RSP: 002b:00007f0987e1fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 25.445915][ T326] RAX: ffffffffffffffda RBX: 00000000000005b1 RCX: 00007f0986f9e559 [ 25.453901][ T326] RDX: 00007f0987e1fee0 RSI: 0000000000000000 RDI: 00007f0987035a90 [ 25.461932][ T326] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 25.469921][ T326] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000540 [ 25.477998][ T326] R13: 00007f0987e1fee0 R14: 00007f0987e1fea0 R15: 0000200000000580 [ 25.486068][ T326] [ 25.573134][ T326] loop2: detected capacity change from 0 to 512 [ 25.593243][ T326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.610264][ T291] EXT4-fs (loop1): unmounting filesystem. [ 25.617969][ T326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.629211][ T326] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.645200][ T340] loop1: detected capacity change from 0 to 512 [ 25.663344][ T340] EXT4-fs: Ignoring removed orlov option [ 25.673837][ T289] EXT4-fs (loop2): unmounting filesystem. [ 25.685009][ T340] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.713888][ T340] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.10: Allocating blocks 41-42 which overlap fs metadata [ 25.728079][ T340] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.10: Allocating blocks 41-42 which overlap fs metadata [ 25.742558][ T340] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.10: Failed to acquire dquot type 1 [ 25.753971][ T340] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 25.770327][ T340] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.10: corrupted inode contents [ 25.783229][ T340] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #12: comm syz.1.10: mark_inode_dirty error [ 25.795958][ T340] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.10: corrupted inode contents [ 25.808909][ T340] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.10: mark_inode_dirty error [ 25.820922][ T340] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.10: corrupted inode contents [ 25.852412][ T340] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 25.862075][ T340] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.10: corrupted inode contents [ 25.873331][ T336] syz.4.5 (336) used greatest stack depth: 21928 bytes left [ 25.946829][ T340] EXT4-fs error (device loop1): ext4_truncate:4327: inode #12: comm syz.1.10: mark_inode_dirty error [ 25.965558][ T340] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 25.975364][ T340] EXT4-fs (loop1): 1 truncate cleaned up [ 25.981110][ T340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.914597][ T361] loop3: detected capacity change from 0 to 512 [ 27.918740][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 27.918758][ T28] audit: type=1400 audit(1792039411.573:127): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.965005][ T361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.965118][ T340] EXT4-fs error (device loop1): __ext4_remount:6637: comm syz.1.10: Abort forced by user [ 27.992539][ T340] EXT4-fs (loop1): Remounting filesystem read-only [ 27.999401][ T340] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 28.002705][ T361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 28.015060][ T361] System zones: 0-2, 18-18, 34-34 [ 28.021666][ T361] EXT4-fs (loop3): 1 orphan inode deleted [ 28.024692][ T28] audit: type=1400 audit(1792039411.703:128): avc: denied { remount } for pid=339 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.028388][ T361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.047189][ T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 28.066100][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 28.066148][ T361] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.078647][ T291] EXT4-fs (loop1): unmounting filesystem. [ 28.111193][ T28] audit: type=1400 audit(1792039411.783:129): avc: denied { read append open } for pid=360 comm="syz.3.25" path="/3/file1/cpuset.memory_pressure" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.164470][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.173661][ T369] loop4: detected capacity change from 0 to 1024 [ 28.180374][ T369] ext3: Unknown parameter 'noacl' [ 28.187551][ T28] audit: type=1400 audit(1792039411.823:130): avc: denied { ioctl } for pid=360 comm="syz.3.25" path="/3/file1/cpuset.memory_pressure" dev="loop3" ino=16 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.189203][ T373] loop2: detected capacity change from 0 to 512 [ 28.213406][ T28] audit: type=1400 audit(1792039411.833:131): avc: denied { name_bind } for pid=370 comm="syz.1.16" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.243149][ T28] audit: type=1400 audit(1792039411.833:132): avc: denied { node_bind } for pid=370 comm="syz.1.16" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.300404][ T28] audit: type=1400 audit(1792039411.833:133): avc: denied { create } for pid=368 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.325925][ T381] loop3: detected capacity change from 0 to 1024 [ 28.331884][ T28] audit: type=1400 audit(1792039411.833:134): avc: denied { create } for pid=368 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.352027][ T381] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 28.366309][ T28] audit: type=1400 audit(1792039411.833:135): avc: denied { setopt } for pid=368 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.368819][ T381] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 28.398542][ T381] EXT4-fs (loop3): invalid journal inode [ 28.404725][ T381] EXT4-fs (loop3): can't get journal size [ 28.406574][ T289] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 28.412107][ T381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.420749][ T289] FAT-fs (loop2): Filesystem has been set read-only [ 28.437924][ T289] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 28.519748][ T289] syz-executor (289) used greatest stack depth: 21696 bytes left [ 28.640101][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.647175][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.654711][ T387] device bridge_slave_0 entered promiscuous mode [ 28.662734][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.669890][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.677352][ T387] device bridge_slave_1 entered promiscuous mode [ 28.717183][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.724309][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.731561][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.738604][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.757839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.765524][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.773674][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.787453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.795703][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.802789][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.810532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.818854][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.825909][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.836695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.846255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.859999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.872195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.880363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.888288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.897217][ T387] device veth0_vlan entered promiscuous mode [ 28.911300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.920742][ T387] device veth1_macvtap entered promiscuous mode [ 28.937909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.947233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.010155][ T399] loop1: detected capacity change from 0 to 1024 [ 29.042212][ T399] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 29.066555][ T399] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 29.076616][ T399] EXT4-fs (loop1): invalid journal inode [ 29.082724][ T399] EXT4-fs (loop1): can't get journal size [ 29.090726][ T399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.125942][ T399] ptp ptp0: new virtual clock ptp1 [ 29.131141][ T399] ptp ptp0: guarantee physical clock free running [ 29.151935][ T403] FAULT_INJECTION: forcing a failure. [ 29.151935][ T403] name fail_futex, interval 1, probability 0, space 0, times 1 [ 29.165383][ T403] CPU: 0 PID: 403 Comm: syz.4.29 Not tainted syzkaller #0 [ 29.172521][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.182580][ T403] Call Trace: [ 29.185862][ T403] [ 29.188786][ T403] __dump_stack+0x21/0x24 [ 29.193109][ T403] dump_stack_lvl+0x110/0x170 [ 29.197777][ T403] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.202788][ T403] ? try_to_wake_up+0x6c6/0x1250 [ 29.207713][ T403] dump_stack+0x15/0x24 [ 29.211943][ T403] should_fail_ex+0x3bf/0x510 [ 29.216611][ T403] should_fail+0xb/0x10 [ 29.220795][ T403] get_futex_key+0x143/0xb10 [ 29.225390][ T403] ? __kmem_cache_free+0xb7/0x1b0 [ 29.230416][ T403] ? __cfi_get_futex_key+0x10/0x10 [ 29.235529][ T403] futex_wake+0x150/0x8e0 [ 29.239879][ T403] ? __cfi_futex_wake+0x10/0x10 [ 29.244716][ T403] ? device_release_driver+0x19/0x20 [ 29.250097][ T403] ? ktime_get_coarse_real_ts64+0x10f/0x120 [ 29.255983][ T403] do_futex+0x2bf/0x430 [ 29.260663][ T403] ? __cfi_current_time+0x10/0x10 [ 29.265770][ T403] ? __cfi_do_futex+0x10/0x10 [ 29.270434][ T403] __se_sys_futex+0x136/0x310 [ 29.275096][ T403] ? __x64_sys_futex+0x100/0x100 [ 29.280102][ T403] ? xfd_validate_state+0x70/0x150 [ 29.285205][ T403] ? __kasan_check_write+0x14/0x20 [ 29.290314][ T403] __x64_sys_futex+0xe5/0x100 [ 29.294984][ T403] x64_sys_call+0x7ec/0x9a0 [ 29.299478][ T403] do_syscall_64+0x4c/0xa0 [ 29.303893][ T403] ? clear_bhb_loop+0x30/0x80 [ 29.308561][ T403] ? clear_bhb_loop+0x30/0x80 [ 29.313319][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.319204][ T403] RIP: 0033:0x7f5da7b9e559 [ 29.323619][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.343239][ T403] RSP: 002b:00007f5da8a5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.351653][ T403] RAX: ffffffffffffffda RBX: 00007f5da7e25fa8 RCX: 00007f5da7b9e559 [ 29.359621][ T403] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5da7e25fac [ 29.367588][ T403] RBP: 00007f5da7e25fa0 R08: 0006890641a758d0 R09: 0000000000000000 [ 29.375651][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.383619][ T403] R13: 00007f5da7e26038 R14: 00007ffcf3954410 R15: 00007ffcf39544f8 [ 29.391620][ T403] [ 29.397043][ T288] EXT4-fs (loop3): unmounting filesystem. [ 29.398275][ T403] hub 6-0:1.0: USB hub found [ 29.408832][ T403] hub 6-0:1.0: 1 port detected [ 29.453304][ T417] loop4: detected capacity change from 0 to 4096 [ 29.464921][ T411] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 37: comm syz.1.28: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.487178][ T411] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.28: path /3/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 29.506822][ T417] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 29.614330][ T315] device bridge_slave_1 left promiscuous mode [ 29.620888][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.631242][ T315] device bridge_slave_0 left promiscuous mode [ 29.637651][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.648065][ T315] device veth1_macvtap left promiscuous mode [ 29.654324][ T315] device veth0_vlan left promiscuous mode [ 29.828562][ T433] loop3: detected capacity change from 0 to 1024 [ 29.855019][ T291] EXT4-fs (loop1): unmounting filesystem. [ 29.861424][ T437] loop4: detected capacity change from 0 to 4096 [ 29.872019][ T432] FAULT_INJECTION: forcing a failure. [ 29.872019][ T432] name failslab, interval 1, probability 0, space 0, times 0 [ 29.875596][ T433] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 29.898425][ T432] CPU: 1 PID: 432 Comm: syz.0.39 Not tainted syzkaller #0 [ 29.902628][ T433] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 29.905557][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.915336][ T433] EXT4-fs (loop3): invalid journal inode [ 29.925133][ T432] Call Trace: [ 29.925143][ T432] [ 29.925150][ T432] __dump_stack+0x21/0x24 [ 29.925181][ T432] dump_stack_lvl+0x110/0x170 [ 29.930935][ T433] EXT4-fs (loop3): can't get journal size [ 29.934083][ T432] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.934113][ T432] dump_stack+0x15/0x24 [ 29.960829][ T432] should_fail_ex+0x3bf/0x510 [ 29.965520][ T432] __should_failslab+0xac/0xf0 [ 29.970272][ T432] should_failslab+0x9/0x20 [ 29.974757][ T432] kmem_cache_alloc_node+0x42/0x330 [ 29.979939][ T432] ? __alloc_skb+0xe8/0x4a0 [ 29.984434][ T432] ? tipc_msg_build+0xce/0xf60 [ 29.989203][ T432] ? tipc_send_group_bcast+0x766/0xa90 [ 29.994673][ T432] __alloc_skb+0xe8/0x4a0 [ 29.998998][ T432] __pskb_copy_fclone+0xa7/0xf60 [ 30.003929][ T432] tipc_msg_reassemble+0x12e/0x440 [ 30.009028][ T432] tipc_mcast_xmit+0x1e8/0x1790 [ 30.013864][ T432] ? __cfi_tipc_mcast_xmit+0x10/0x10 [ 30.019131][ T432] ? __kasan_check_write+0x14/0x20 [ 30.024271][ T432] ? tipc_msg_build+0x3bf/0xf60 [ 30.029109][ T432] ? __check_object_size+0x90/0x600 [ 30.034293][ T432] ? memcpy+0x56/0x70 [ 30.038260][ T432] ? tipc_msg_build+0x440/0xf60 [ 30.043095][ T432] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.048979][ T432] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 30.054774][ T432] ? tipc_group_bc_cong+0x160/0x210 [ 30.059967][ T432] tipc_send_group_bcast+0x79e/0xa90 [ 30.065256][ T432] ? tipc_wait_for_connect+0x5d0/0x5d0 [ 30.070805][ T432] ? avc_update_node+0x2c6/0x8a0 [ 30.075840][ T432] ? __cfi_woken_wake_function+0x10/0x10 [ 30.081494][ T432] __tipc_sendmsg+0x336/0x2860 [ 30.086279][ T432] ? __cfi_slow_avc_audit+0x10/0x10 [ 30.091476][ T432] ? rht_lock+0x120/0x120 [ 30.095811][ T432] ? avc_has_perm+0x1fb/0x250 [ 30.100480][ T432] ? avc_has_perm+0x220/0x250 [ 30.105146][ T432] ? __cfi_avc_has_perm+0x10/0x10 [ 30.110156][ T432] ? __kasan_check_write+0x14/0x20 [ 30.115248][ T432] ? _raw_spin_lock_bh+0x94/0xf0 [ 30.120176][ T432] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 30.125637][ T432] ? __local_bh_enable_ip+0x58/0x80 [ 30.130847][ T432] ? lock_sock_nested+0x212/0x290 [ 30.135865][ T432] ? __cfi_lock_sock_nested+0x10/0x10 [ 30.141224][ T432] ? check_preempt_wakeup+0x619/0xbe0 [ 30.146578][ T432] tipc_sendmsg+0x55/0x70 [ 30.150889][ T432] ? __cfi_tipc_sendmsg+0x10/0x10 [ 30.155895][ T432] ____sys_sendmsg+0x5fb/0x9c0 [ 30.160654][ T432] ? __sys_sendmsg_sock+0x40/0x40 [ 30.165756][ T432] ? import_iovec+0x7c/0xb0 [ 30.170245][ T432] ___sys_sendmsg+0x2a2/0x360 [ 30.174915][ T432] ? __sys_sendmsg+0x290/0x290 [ 30.179668][ T432] ? _raw_spin_lock_bh+0x94/0xf0 [ 30.184603][ T432] ? __fdget+0x19c/0x220 [ 30.188936][ T432] __x64_sys_sendmsg+0x20d/0x2e0 [ 30.193900][ T432] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 30.199352][ T432] ? __kasan_check_write+0x14/0x20 [ 30.204449][ T432] ? fpregs_restore_userregs+0x128/0x260 [ 30.210069][ T432] ? switch_fpu_return+0xe/0x10 [ 30.214904][ T432] x64_sys_call+0x171/0x9a0 [ 30.219391][ T432] do_syscall_64+0x4c/0xa0 [ 30.223793][ T432] ? clear_bhb_loop+0x30/0x80 [ 30.228453][ T432] ? clear_bhb_loop+0x30/0x80 [ 30.233111][ T432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.238989][ T432] RIP: 0033:0x7f23f319e559 [ 30.243390][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.263004][ T432] RSP: 002b:00007f23f3fd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.271404][ T432] RAX: ffffffffffffffda RBX: 00007f23f3425fa0 RCX: 00007f23f319e559 [ 30.279362][ T432] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 30.287318][ T432] RBP: 00007f23f32358b0 R08: 0000000000000000 R09: 0000000000000000 [ 30.295279][ T432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.303249][ T432] R13: 00007f23f3426038 R14: 00007f23f3425fa0 R15: 00007ffcb559d388 [ 30.311214][ T432] [ 30.318300][ T437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.320225][ T443] loop5: detected capacity change from 0 to 512 [ 30.346147][ T443] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 30.349326][ T433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.372074][ T445] loop1: detected capacity change from 0 to 512 [ 30.387065][ T290] EXT4-fs (loop4): unmounting filesystem. [ 30.387143][ T445] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.403400][ T445] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.43: corrupted in-inode xattr [ 30.415815][ T445] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.43: couldn't read orphan inode 15 (err -117) [ 30.428390][ T445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.487324][ T454] random: crng reseeded on system resumption [ 30.487542][ T291] EXT4-fs (loop1): unmounting filesystem. [ 30.800375][ T458] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 37: comm syz.3.40: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.821915][ T458] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.40: path /10/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 30.911186][ T470] loop5: detected capacity change from 0 to 1024 [ 30.918368][ T470] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 30.929831][ T470] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 30.955163][ T470] EXT4-fs (loop5): invalid journal inode [ 30.973682][ T470] EXT4-fs (loop5): can't get journal size [ 31.176322][ T288] EXT4-fs (loop3): unmounting filesystem. [ 31.256626][ T470] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 31.272478][ T478] tipc: Started in network mode [ 31.279193][ T478] tipc: Node identity 9ed6d2724b3c, cluster identity 4711 [ 31.287356][ T478] tipc: Enabled bearer , priority 0 [ 31.296652][ T478] tipc: Resetting bearer [ 31.304406][ T477] tipc: Disabling bearer [ 31.848644][ T487] loop0: detected capacity change from 0 to 512 [ 31.856504][ T487] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.881887][ T481] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 37: comm syz.5.54: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.893474][ T487] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.59: corrupted in-inode xattr [ 31.908477][ T490] FAULT_INJECTION: forcing a failure. [ 31.908477][ T490] name failslab, interval 1, probability 0, space 0, times 0 [ 31.913993][ T481] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.54: path /6/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 31.926835][ T490] CPU: 0 PID: 490 Comm: syz.1.60 Not tainted syzkaller #0 [ 31.952482][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.962529][ T490] Call Trace: [ 31.965796][ T490] [ 31.968711][ T490] __dump_stack+0x21/0x24 [ 31.973033][ T490] dump_stack_lvl+0x110/0x170 [ 31.977795][ T490] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.982833][ T490] dump_stack+0x15/0x24 [ 31.986995][ T490] should_fail_ex+0x3bf/0x510 [ 31.991660][ T490] __should_failslab+0xac/0xf0 [ 31.996413][ T490] should_failslab+0x9/0x20 [ 32.000907][ T490] kmem_cache_alloc_node+0x42/0x330 [ 32.006102][ T490] ? __alloc_skb+0xe8/0x4a0 [ 32.010602][ T490] ? tipc_msg_build+0xce/0xf60 [ 32.015356][ T490] ? tipc_send_group_bcast+0x766/0xa90 [ 32.021163][ T490] __alloc_skb+0xe8/0x4a0 [ 32.025481][ T490] __pskb_copy_fclone+0xa7/0xf60 [ 32.030408][ T490] tipc_msg_reassemble+0x12e/0x440 [ 32.035596][ T490] tipc_mcast_xmit+0x1e8/0x1790 [ 32.040435][ T490] ? __cfi_tipc_mcast_xmit+0x10/0x10 [ 32.045709][ T490] ? __kasan_check_write+0x14/0x20 [ 32.050836][ T490] ? tipc_msg_build+0x3bf/0xf60 [ 32.055678][ T490] ? __check_object_size+0x90/0x600 [ 32.060864][ T490] ? memcpy+0x56/0x70 [ 32.064830][ T490] ? tipc_msg_build+0x440/0xf60 [ 32.069668][ T490] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 32.075553][ T490] ? __release_sock+0x154/0x380 [ 32.080390][ T490] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 32.086213][ T490] ? tipc_group_bc_cong+0x160/0x210 [ 32.091434][ T490] tipc_send_group_bcast+0x79e/0xa90 [ 32.096714][ T490] ? tipc_wait_for_connect+0x5d0/0x5d0 [ 32.102164][ T490] ? __cfi_woken_wake_function+0x10/0x10 [ 32.107888][ T490] ? __cfi____update_load_sum+0x10/0x10 [ 32.113423][ T490] __tipc_sendmsg+0x336/0x2860 [ 32.118191][ T490] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 32.123816][ T490] ? rht_lock+0x120/0x120 [ 32.128150][ T490] ? avc_has_perm+0x163/0x250 [ 32.132811][ T490] ? __cfi_avc_has_perm+0x10/0x10 [ 32.137819][ T490] ? __kasan_check_write+0x14/0x20 [ 32.142915][ T490] ? _raw_spin_lock_bh+0x94/0xf0 [ 32.147856][ T490] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 32.153303][ T490] ? __local_bh_enable_ip+0x58/0x80 [ 32.158489][ T490] ? lock_sock_nested+0x212/0x290 [ 32.163516][ T490] ? __cfi_lock_sock_nested+0x10/0x10 [ 32.168884][ T490] ? check_preempt_wakeup+0x619/0xbe0 [ 32.174272][ T490] tipc_sendmsg+0x55/0x70 [ 32.178597][ T490] ? __cfi_tipc_sendmsg+0x10/0x10 [ 32.183607][ T490] ____sys_sendmsg+0x5fb/0x9c0 [ 32.188362][ T490] ? __sys_sendmsg_sock+0x40/0x40 [ 32.193386][ T490] ? import_iovec+0x7c/0xb0 [ 32.197875][ T490] ___sys_sendmsg+0x2a2/0x360 [ 32.202549][ T490] ? __sys_sendmsg+0x290/0x290 [ 32.207304][ T490] ? __release_sock+0x323/0x380 [ 32.212144][ T490] ? __fdget+0x19c/0x220 [ 32.216373][ T490] __x64_sys_sendmsg+0x20d/0x2e0 [ 32.221303][ T490] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 32.226753][ T490] ? __kasan_check_write+0x14/0x20 [ 32.231848][ T490] ? fpregs_restore_userregs+0x128/0x260 [ 32.237467][ T490] ? switch_fpu_return+0xe/0x10 [ 32.242318][ T490] x64_sys_call+0x171/0x9a0 [ 32.246839][ T490] do_syscall_64+0x4c/0xa0 [ 32.251347][ T490] ? clear_bhb_loop+0x30/0x80 [ 32.256120][ T490] ? clear_bhb_loop+0x30/0x80 [ 32.260810][ T490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.266780][ T490] RIP: 0033:0x7f09fdf9e559 [ 32.271183][ T490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.290807][ T490] RSP: 002b:00007f09fedc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.299247][ T490] RAX: ffffffffffffffda RBX: 00007f09fe225fa0 RCX: 00007f09fdf9e559 [ 32.307242][ T490] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 32.315220][ T490] RBP: 00007f09fe0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 32.323182][ T490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.331139][ T490] R13: 00007f09fe226038 R14: 00007f09fe225fa0 R15: 00007ffe388c92a8 [ 32.339100][ T490] [ 32.343130][ T487] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.59: couldn't read orphan inode 15 (err -117) [ 32.355783][ T487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.392835][ T287] EXT4-fs (loop0): unmounting filesystem. [ 32.631031][ T387] EXT4-fs (loop5): unmounting filesystem. [ 32.661212][ T501] loop0: detected capacity change from 0 to 4096 [ 32.675899][ T507] loop1: detected capacity change from 0 to 1024 [ 32.681284][ T501] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 32.703149][ T507] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.714524][ T507] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 32.726253][ T507] EXT4-fs (loop1): invalid journal inode [ 32.732533][ T507] EXT4-fs (loop1): can't get journal size [ 32.739349][ T507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.756504][ T512] tipc: Enabled bearer , priority 0 [ 32.764461][ T512] tipc: Resetting bearer [ 32.771061][ T508] tipc: Disabling bearer [ 32.935958][ T518] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 37: comm syz.1.66: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 32.957845][ T518] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.66: path /10/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 33.167595][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 33.167609][ T28] audit: type=1400 audit(1792039416.843:185): avc: denied { sqpoll } for pid=527 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.270012][ T533] loop0: detected capacity change from 0 to 1024 [ 33.350331][ T533] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.577017][ T533] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 33.588419][ T291] EXT4-fs (loop1): unmounting filesystem. [ 33.595275][ T533] EXT4-fs (loop0): invalid journal inode [ 33.601231][ T533] EXT4-fs (loop0): can't get journal size [ 33.624531][ T533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.641089][ T545] loop5: detected capacity change from 0 to 4096 [ 33.663470][ T545] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 34.129371][ T554] device syzkaller0 entered promiscuous mode [ 34.136724][ T554] tipc: Started in network mode [ 34.141579][ T554] tipc: Node identity fa99e9a75bcc, cluster identity 4711 [ 34.148986][ T554] tipc: Enabled bearer , priority 0 [ 34.156460][ T547] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 37: comm syz.0.75: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 34.177376][ T547] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.75: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 34.197000][ T28] audit: type=1400 audit(1792039417.873:186): avc: denied { mmap_zero } for pid=551 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 34.199142][ T554] tipc: Resetting bearer [ 34.228694][ T553] tipc: Resetting bearer [ 34.235113][ T553] tipc: Disabling bearer [ 34.283219][ T28] audit: type=1400 audit(1792039417.963:187): avc: denied { create } for pid=561 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.302742][ T28] audit: type=1400 audit(1792039417.973:188): avc: denied { write } for pid=561 comm="syz.5.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.360102][ T287] EXT4-fs (loop0): unmounting filesystem. [ 34.439135][ T567] EXT4-fs (loop5): Test dummy encryption mode enabled [ 34.679346][ T567] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #11: comm syz.5.88: casefold flag without casefold feature [ 34.748031][ T567] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.88: couldn't read orphan inode 11 (err -117) [ 34.758603][ T580] netlink: 128 bytes leftover after parsing attributes in process `syz.1.91'. [ 34.771153][ T567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 34.846953][ T582] set_capacity_and_notify: 1 callbacks suppressed [ 34.847023][ T582] loop1: detected capacity change from 0 to 4096 [ 34.879965][ T582] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 35.112506][ T593] device syzkaller0 entered promiscuous mode [ 35.125413][ T593] tipc: Enabled bearer , priority 0 [ 35.175296][ T387] EXT4-fs (loop5): unmounting filesystem. [ 35.184138][ T593] tipc: Resetting bearer [ 35.190706][ T592] tipc: Resetting bearer [ 35.197573][ T592] tipc: Disabling bearer [ 35.213630][ T28] audit: type=1400 audit(1792039418.893:189): avc: denied { write } for pid=595 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.035447][ T28] audit: type=1400 audit(1792039419.373:190): avc: denied { write } for pid=598 comm="syz.4.100" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.075993][ T608] loop3: detected capacity change from 0 to 4096 [ 36.173831][ T28] audit: type=1400 audit(1792039419.853:191): avc: denied { write } for pid=618 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.180253][ T621] loop4: detected capacity change from 0 to 512 [ 36.209666][ T621] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.212358][ T28] audit: type=1400 audit(1792039419.873:192): avc: denied { nlmsg_write } for pid=618 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.218251][ T621] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #11: comm syz.4.108: casefold flag without casefold feature [ 36.239382][ T624] FAULT_INJECTION: forcing a failure. [ 36.239382][ T624] name failslab, interval 1, probability 0, space 0, times 0 [ 36.251507][ T621] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.108: couldn't read orphan inode 11 (err -117) [ 36.264185][ T624] CPU: 0 PID: 624 Comm: syz.3.109 Not tainted syzkaller #0 [ 36.276831][ T621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.281088][ T624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.299648][ T624] Call Trace: [ 36.302929][ T624] [ 36.305952][ T624] __dump_stack+0x21/0x24 [ 36.310298][ T624] dump_stack_lvl+0x110/0x170 [ 36.315014][ T624] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.320321][ T624] dump_stack+0x15/0x24 [ 36.324481][ T624] should_fail_ex+0x3bf/0x510 [ 36.329158][ T624] __should_failslab+0xac/0xf0 [ 36.333916][ T624] should_failslab+0x9/0x20 [ 36.338417][ T624] slab_pre_alloc_hook+0x30/0x1d0 [ 36.343424][ T624] ? ktime_get_coarse_real_ts64+0x10f/0x120 [ 36.349305][ T624] kmem_cache_alloc_lru+0x49/0x280 [ 36.354401][ T624] ? __d_alloc+0x34/0x6d0 [ 36.358735][ T624] __d_alloc+0x34/0x6d0 [ 36.362876][ T624] d_make_root+0x4a/0xe0 [ 36.367121][ T624] devpts_fill_super+0x3e6/0x900 [ 36.372040][ T624] ? sget+0x4f9/0x530 [ 36.376002][ T624] ? __cfi_set_anon_super+0x10/0x10 [ 36.381188][ T624] ? __cfi_devpts_fill_super+0x10/0x10 [ 36.386725][ T624] mount_nodev+0x6a/0x100 [ 36.391133][ T624] devpts_mount+0x2c/0x40 [ 36.395459][ T624] legacy_get_tree+0xfe/0x1a0 [ 36.400143][ T624] ? __cfi_devpts_mount+0x10/0x10 [ 36.405150][ T624] vfs_get_tree+0x9a/0x270 [ 36.409571][ T624] vfs_fsconfig_locked+0x236/0x3f0 [ 36.414663][ T624] __se_sys_fsconfig+0x69c/0x7e0 [ 36.419608][ T624] ? __x64_sys_fsconfig+0xd0/0xd0 [ 36.424644][ T624] ? __kasan_check_write+0x14/0x20 [ 36.429738][ T624] ? fpregs_restore_userregs+0x128/0x260 [ 36.435371][ T624] __x64_sys_fsconfig+0xbf/0xd0 [ 36.440224][ T624] x64_sys_call+0x5df/0x9a0 [ 36.444715][ T624] do_syscall_64+0x4c/0xa0 [ 36.449115][ T624] ? clear_bhb_loop+0x30/0x80 [ 36.453777][ T624] ? clear_bhb_loop+0x30/0x80 [ 36.458433][ T624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.464306][ T624] RIP: 0033:0x7ff38599e559 [ 36.468716][ T624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.488305][ T624] RSP: 002b:00007ff386893028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 36.496703][ T624] RAX: ffffffffffffffda RBX: 00007ff385c25fa0 RCX: 00007ff38599e559 [ 36.504786][ T624] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 36.512764][ T624] RBP: 00007ff385a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 36.520815][ T624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.528771][ T624] R13: 00007ff385c26038 R14: 00007ff385c25fa0 R15: 00007fff61308768 [ 36.536734][ T624] [ 36.541421][ T624] devpts: get root dentry failed [ 36.586085][ T640] device syzkaller0 entered promiscuous mode [ 36.595207][ T640] tipc: Enabled bearer , priority 0 [ 36.689493][ T640] tipc: Resetting bearer [ 36.697748][ T639] tipc: Resetting bearer [ 36.706852][ T639] tipc: Disabling bearer [ 37.498545][ T290] EXT4-fs (loop4): unmounting filesystem. [ 37.521984][ T28] audit: type=1400 audit(1792039421.193:193): avc: denied { read } for pid=654 comm="syz.5.120" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.538888][ T657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 37.571917][ T28] audit: type=1400 audit(1792039421.203:194): avc: denied { open } for pid=654 comm="syz.5.120" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.603923][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 37.674398][ T676] loop5: detected capacity change from 0 to 512 [ 37.684181][ T674] device syzkaller0 entered promiscuous mode [ 37.695510][ T676] EXT4-fs (loop5): Test dummy encryption mode enabled [ 37.703547][ T674] tipc: Started in network mode [ 37.708701][ T674] tipc: Node identity 263dcd7c0218, cluster identity 4711 [ 37.714807][ T676] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #11: comm syz.5.129: casefold flag without casefold feature [ 37.720781][ T674] tipc: Enabled bearer , priority 0 [ 37.728711][ T676] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.129: couldn't read orphan inode 11 (err -117) [ 37.749757][ T674] tipc: Resetting bearer [ 37.756427][ T673] tipc: Resetting bearer [ 37.763083][ T673] tipc: Disabling bearer [ 37.769177][ T676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 38.549087][ T700] netlink: 64 bytes leftover after parsing attributes in process `syz.0.137'. [ 38.604917][ T387] EXT4-fs (loop5): unmounting filesystem. [ 38.608855][ T702] FAULT_INJECTION: forcing a failure. [ 38.608855][ T702] name failslab, interval 1, probability 0, space 0, times 0 [ 38.716663][ T702] CPU: 1 PID: 702 Comm: syz.3.138 Not tainted syzkaller #0 [ 38.723907][ T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.733970][ T702] Call Trace: [ 38.737254][ T702] [ 38.740185][ T702] __dump_stack+0x21/0x24 [ 38.744530][ T702] dump_stack_lvl+0x110/0x170 [ 38.749316][ T702] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.754368][ T702] ? __kasan_check_write+0x14/0x20 [ 38.759619][ T702] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 38.765094][ T702] dump_stack+0x15/0x24 [ 38.769260][ T702] should_fail_ex+0x3bf/0x510 [ 38.773939][ T702] ? alloc_vfsmnt+0x27/0x4a0 [ 38.778546][ T702] __should_failslab+0xac/0xf0 [ 38.783320][ T702] should_failslab+0x9/0x20 [ 38.787835][ T702] kmem_cache_alloc+0x3b/0x320 [ 38.792609][ T702] alloc_vfsmnt+0x27/0x4a0 [ 38.797052][ T702] clone_mnt+0x6d/0xd00 [ 38.801217][ T702] ? rwsem_write_trylock+0x136/0x300 [ 38.806516][ T702] copy_tree+0xd9/0x790 [ 38.810772][ T702] ? __kasan_check_write+0x14/0x20 [ 38.815892][ T702] copy_mnt_ns+0x180/0x930 [ 38.820316][ T702] ? create_new_namespaces+0x34/0x660 [ 38.825709][ T702] ? create_new_namespaces+0x34/0x660 [ 38.831208][ T702] create_new_namespaces+0xd0/0x660 [ 38.836525][ T702] unshare_nsproxy_namespaces+0x120/0x170 [ 38.836623][ T708] device syzkaller0 entered promiscuous mode [ 38.842303][ T702] ksys_unshare+0x4d5/0x850 [ 38.842344][ T702] ? __cfi_ksys_unshare+0x10/0x10 [ 38.842368][ T702] ? fpregs_restore_userregs+0x128/0x260 [ 38.852209][ T708] tipc: Started in network mode [ 38.852835][ T702] __x64_sys_unshare+0x38/0x40 [ 38.852871][ T702] x64_sys_call+0x767/0x9a0 [ 38.852892][ T702] do_syscall_64+0x4c/0xa0 [ 38.862274][ T708] tipc: Node identity 7ea67b5104e, cluster identity 4711 [ 38.863560][ T702] ? clear_bhb_loop+0x30/0x80 [ 38.863589][ T702] ? clear_bhb_loop+0x30/0x80 [ 38.868824][ T708] tipc: Enabled bearer , priority 0 [ 38.873181][ T702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.873211][ T702] RIP: 0033:0x7ff38599e559 [ 38.873225][ T702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.873237][ T702] RSP: 002b:00007ff386893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.873254][ T702] RAX: ffffffffffffffda RBX: 00007ff385c25fa0 RCX: 00007ff38599e559 [ 38.873265][ T702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 38.885203][ T706] loop5: detected capacity change from 0 to 1024 [ 38.889179][ T702] RBP: 00007ff385a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 38.889195][ T702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.889204][ T702] R13: 00007ff385c26038 R14: 00007ff385c25fa0 R15: 00007fff61308768 [ 38.889220][ T702] [ 38.997806][ T706] ext3: Unknown parameter 'noacl' [ 39.038501][ T708] tipc: Resetting bearer [ 39.053515][ T704] tipc: Resetting bearer [ 39.060181][ T704] tipc: Disabling bearer [ 39.072375][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 39.072390][ T28] audit: type=1400 audit(1792039422.733:215): avc: denied { mount } for pid=705 comm="syz.4.142" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.155053][ T718] Zero length message leads to an empty skb [ 39.233089][ T28] audit: type=1400 audit(1792039422.823:216): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.364044][ T721] loop4: detected capacity change from 0 to 512 [ 39.386959][ T28] audit: type=1400 audit(1792039422.843:217): avc: denied { read } for pid=713 comm="syz.3.143" name="inject" dev="tracefs" ino=6504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.404802][ T721] EXT4-fs: Ignoring removed nobh option [ 39.444712][ T721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.453744][ T721] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.469892][ T28] audit: type=1400 audit(1792039423.143:218): avc: denied { create } for pid=720 comm="syz.4.145" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.529470][ T290] EXT4-fs (loop4): unmounting filesystem. [ 39.551745][ T740] loop1: detected capacity change from 0 to 1024 [ 39.561119][ T740] ext3: Unknown parameter 'noacl' [ 39.816447][ T378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.909172][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 40.039657][ T754] device syzkaller0 entered promiscuous mode [ 40.474357][ T754] tipc: Enabled bearer , priority 0 [ 40.498748][ T758] loop0: detected capacity change from 0 to 1024 [ 40.506506][ T754] tipc: Resetting bearer [ 40.513980][ T758] EXT4-fs: Ignoring removed oldalloc option [ 40.523932][ T753] tipc: Resetting bearer [ 40.530735][ T753] tipc: Disabling bearer [ 40.543807][ T758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.552426][ T758] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.575264][ T28] audit: type=1400 audit(1792039424.253:219): avc: denied { append } for pid=757 comm="syz.0.158" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.578522][ T769] loop3: detected capacity change from 0 to 1024 [ 40.604754][ T769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.625030][ T769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.637331][ T28] audit: type=1400 audit(1792039424.313:220): avc: denied { execute } for pid=768 comm="syz.3.162" path="/30/file1/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.699084][ T287] EXT4-fs (loop0): unmounting filesystem. [ 41.452126][ T288] EXT4-fs (loop3): unmounting filesystem. [ 41.538190][ T800] loop3: detected capacity change from 0 to 4096 [ 41.564884][ T800] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 41.729289][ T803] tipc: Started in network mode [ 41.734532][ T803] tipc: Node identity 6e311a2dfedc, cluster identity 4711 [ 41.738359][ T804] loop4: detected capacity change from 0 to 1024 [ 41.749385][ T803] tipc: Enabled bearer , priority 0 [ 41.796173][ T803] tipc: Resetting bearer [ 41.869202][ T804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.874154][ T801] tipc: Disabling bearer [ 41.884248][ T804] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.910578][ T806] loop3: detected capacity change from 0 to 8192 [ 41.914226][ T804] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.174: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.062702][ T804] EXT4-fs (loop4): Remounting filesystem read-only [ 42.314727][ T290] EXT4-fs (loop4): unmounting filesystem. [ 42.369525][ T28] audit: type=1400 audit(1792039426.043:221): avc: denied { read } for pid=821 comm="syz.5.182" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.414363][ T28] audit: type=1400 audit(1792039426.073:222): avc: denied { open } for pid=821 comm="syz.5.182" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.437876][ T28] audit: type=1400 audit(1792039426.073:223): avc: denied { ioctl } for pid=821 comm="syz.5.182" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.478110][ T830] loop4: detected capacity change from 0 to 4096 [ 42.535669][ T378] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.559888][ T830] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 42.616758][ T839] tipc: Enabled bearer , priority 0 [ 42.624864][ T839] tipc: Resetting bearer [ 42.631406][ T838] tipc: Disabling bearer [ 42.660156][ T28] audit: type=1400 audit(1792039426.333:224): avc: denied { ioctl } for pid=840 comm="syz.4.189" path="cgroup:[4026532557]" dev="nsfs" ino=4026532557 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.046891][ T852] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 43.643888][ T871] loop3: detected capacity change from 0 to 4096 [ 43.790104][ T871] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 44.375527][ T888] loop0: detected capacity change from 0 to 1024 [ 44.385544][ T888] ext3: Unknown parameter 'noacl' [ 44.413700][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 44.413755][ T28] audit: type=1400 audit(1792039428.093:231): avc: denied { unmount } for pid=387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.445676][ T378] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.475296][ T898] loop0: detected capacity change from 0 to 128 [ 44.522703][ T906] loop1: detected capacity change from 0 to 4096 [ 44.575090][ T313] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.590818][ T28] audit: type=1400 audit(1792039428.263:232): avc: denied { write } for pid=900 comm="syz.5.212" name="UDC" dev="configfs" ino=18469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 44.646514][ T906] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 44.653138][ T28] audit: type=1400 audit(1792039428.263:233): avc: denied { open } for pid=900 comm="syz.5.212" path="/43/config/usb_gadget/g1/UDC" dev="configfs" ino=18469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 46.995203][ T937] loop1: detected capacity change from 0 to 1024 [ 47.013104][ T937] ext3: Unknown parameter 'noacl' [ 48.746075][ T961] loop1: detected capacity change from 0 to 4096 [ 48.755173][ T961] EXT4-fs: Ignoring removed nobh option [ 48.755272][ T961] EXT4-fs: Ignoring removed bh option [ 48.766944][ T961] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.781739][ T961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.805780][ T975] loop0: detected capacity change from 0 to 4096 [ 48.854948][ T981] loop5: detected capacity change from 0 to 1024 [ 48.884305][ T981] ext3: Unknown parameter 'noacl' [ 48.890036][ T378] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.955232][ T961] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 48.963562][ T975] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 48.972660][ T28] audit: type=1400 audit(1792039432.653:234): avc: denied { write } for pid=993 comm="syz.5.248" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.218584][ T28] audit: type=1400 audit(1792039432.893:235): avc: denied { write } for pid=959 comm="syz.1.236" name="cpuacct.usage_percpu" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.344053][ T291] EXT4-fs (loop1): unmounting filesystem. [ 51.428809][ T1014] loop4: detected capacity change from 0 to 1024 [ 51.453683][ T1014] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.467145][ T1014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 51.477304][ T1014] EXT4-fs (loop4): invalid journal inode [ 51.480020][ T1020] loop0: detected capacity change from 0 to 1024 [ 51.489234][ T1014] EXT4-fs (loop4): can't get journal size [ 51.553295][ T1020] ext3: Unknown parameter 'noacl' [ 51.580145][ T1014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.679024][ T1027] loop3: detected capacity change from 0 to 1024 [ 51.713973][ T28] audit: type=1400 audit(1792039435.393:236): avc: denied { remount } for pid=1023 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.735986][ T378] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.968114][ T1027] loop3: detected capacity change from 0 to 2048 [ 51.986869][ T1033] loop5: detected capacity change from 0 to 4096 [ 52.001614][ T1027] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 52.027561][ T1033] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 52.835135][ T1052] netlink: 'syz.3.259': attribute type 9 has an invalid length. [ 52.842825][ T1052] netlink: 'syz.3.259': attribute type 7 has an invalid length. [ 52.850458][ T1052] netlink: 'syz.3.259': attribute type 8 has an invalid length. [ 53.030740][ T1055] ------------[ cut here ]------------ [ 53.036250][ T1055] fmt: 'level=%s [ 53.036250][ T1055] ' current_buffer: ' syz.0.27-395 [000] ...21 29.070013: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070015: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070017: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070020: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070022: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070025: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070028: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070030: bpf_trace_printk: u& [ 53.036250][ T1055] syz.0.27-395 [000] ...21 29.070033: bpf_trace_printk: u& [ 53.036409][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/trace.c:3890 trace_check_vprintf+0xd2c/0x1050 [ 53.128456][ T1055] Modules linked in: [ 53.132350][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Not tainted syzkaller #0 [ 53.139626][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.149831][ T1055] RIP: 0010:trace_check_vprintf+0xd2c/0x1050 [ 53.155922][ T1055] Code: ea ae fc ff c6 05 da e8 1a 06 01 48 8b 7d 88 e8 5a 04 00 00 48 c7 c7 e0 f2 aa 85 48 8b b5 60 ff ff ff 48 89 c2 e8 04 32 cd ff <0f> 0b e9 d6 fd ff ff 48 8b 4d 98 80 e1 07 38 c1 0f 8c d5 f7 ff ff [ 53.175581][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010246 [ 53.181652][ T1055] RAX: 6f87f4a1349a4f00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 53.189646][ T1055] RDX: ffffc900022bd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 53.197637][ T1055] RBP: ffffc9000592f650 R08: ffffc9000592f167 R09: 1ffff92000b25e2c [ 53.205618][ T1055] R10: dffffc0000000000 R11: fffff52000b25e2d R12: ffffffff87017250 [ 53.213599][ T1055] R13: ffff8881328d4078 R14: 0000000000000000 R15: 0000000000000002 [ 53.221568][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.230518][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.237116][ T1055] CR2: 00007f23f3fb2ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 53.245098][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.253080][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.261043][ T1055] Call Trace: [ 53.264326][ T1055] [ 53.267259][ T1055] trace_event_printf+0xea/0x140 [ 53.272203][ T1055] ? __cfi_trace_seq_printf+0x10/0x10 [ 53.277592][ T1055] ? __cfi_trace_event_printf+0x10/0x10 [ 53.283401][ T1055] ? trace_print_context+0x3a1/0x4d0 [ 53.288695][ T1055] ? trace_handle_return+0xa5/0xe0 [ 53.293849][ T1055] ? trace_raw_output_prep+0x1c9/0x240 [ 53.299330][ T1055] trace_raw_output_initcall_level+0x98/0xd0 [ 53.305338][ T1055] print_trace_fmt+0x4fe/0x720 [ 53.310197][ T1055] print_trace_line+0x393/0x6b0 [ 53.315053][ T1055] tracing_splice_read_pipe+0x6d1/0x1080 [ 53.320687][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 53.326773][ T1055] ? __kasan_check_read+0x11/0x20 [ 53.331790][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 53.337871][ T1055] ? security_file_permission+0x94/0xb0 [ 53.343428][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 53.348190][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 53.353323][ T1055] do_splice+0xff6/0x14c0 [ 53.357651][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 53.363725][ T1055] ? irqentry_exit+0x37/0x40 [ 53.368310][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 53.373597][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 53.379221][ T1055] ? __cfi_do_splice+0x10/0x10 [ 53.384022][ T1055] ? __se_sys_splice+0x31c/0x450 [ 53.388957][ T1055] __se_sys_splice+0x351/0x450 [ 53.393739][ T1055] ? __x64_sys_splice+0x100/0x100 [ 53.398761][ T1055] ? __kasan_check_write+0x14/0x20 [ 53.403877][ T1055] __x64_sys_splice+0xe5/0x100 [ 53.408640][ T1055] x64_sys_call+0x22e/0x9a0 [ 53.413157][ T1055] do_syscall_64+0x4c/0xa0 [ 53.417572][ T1055] ? clear_bhb_loop+0x30/0x80 [ 53.422241][ T1055] ? clear_bhb_loop+0x30/0x80 [ 53.426918][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.432815][ T1055] RIP: 0033:0x7f23f319e559 [ 53.437220][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.456844][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 53.465281][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 53.473267][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.481236][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 53.489232][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.497201][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 53.505188][ T1055] [ 53.508195][ T1055] ---[ end trace 0000000000000000 ]--- [ 53.513708][ T1055] ------------[ cut here ]------------ [ 53.519154][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 53.529482][ T1055] Modules linked in: [ 53.533373][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 53.542119][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.552159][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 53.557959][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 53.577568][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 53.583628][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 53.591587][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 53.599545][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 53.607506][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 53.615465][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 53.623426][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.632347][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.638917][ T1055] CR2: 00007f23f3fb2ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 53.646882][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.654841][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.662801][ T1055] Call Trace: [ 53.666072][ T1055] [ 53.668998][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 53.674625][ T1055] ? __kasan_check_write+0x14/0x20 [ 53.679725][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 53.684396][ T1055] rb_buffer_peek+0x5f/0x930 [ 53.688975][ T1055] ring_buffer_peek+0x184/0x3b0 [ 53.693819][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 53.699179][ T1055] ? __kasan_check_write+0x14/0x20 [ 53.704278][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 53.708954][ T1055] ? _find_next_bit+0x8a/0x130 [ 53.713712][ T1055] __find_next_entry+0x33c/0x6c0 [ 53.718647][ T1055] ? trace_find_next_entry+0x380/0x380 [ 53.724100][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 53.729724][ T1055] ? print_trace_line+0x393/0x6b0 [ 53.734738][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 53.740371][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 53.746439][ T1055] ? __kasan_check_read+0x11/0x20 [ 53.751462][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 53.757524][ T1055] ? security_file_permission+0x94/0xb0 [ 53.763082][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 53.767856][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 53.772982][ T1055] do_splice+0xff6/0x14c0 [ 53.777313][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 53.783374][ T1055] ? irqentry_exit+0x37/0x40 [ 53.788003][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 53.793302][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 53.798972][ T1055] ? __cfi_do_splice+0x10/0x10 [ 53.803752][ T1055] ? __se_sys_splice+0x31c/0x450 [ 53.808744][ T1055] __se_sys_splice+0x351/0x450 [ 53.813522][ T1055] ? __x64_sys_splice+0x100/0x100 [ 53.818577][ T1055] ? __kasan_check_write+0x14/0x20 [ 53.823702][ T1055] __x64_sys_splice+0xe5/0x100 [ 53.828483][ T1055] x64_sys_call+0x22e/0x9a0 [ 53.832993][ T1055] do_syscall_64+0x4c/0xa0 [ 53.837428][ T1055] ? clear_bhb_loop+0x30/0x80 [ 53.842108][ T1055] ? clear_bhb_loop+0x30/0x80 [ 53.846787][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.852687][ T1055] RIP: 0033:0x7f23f319e559 [ 53.857104][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.876798][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 53.885227][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 53.893201][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.901699][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 53.904224][ T1051] sched: RT throttling activated [ 53.914623][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.922580][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 53.930550][ T1055] [ 53.933551][ T1055] ---[ end trace 0000000000000000 ]--- [ 53.939115][ T1055] ------------[ cut here ]------------ [ 53.944557][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 53.954800][ T1055] Modules linked in: [ 53.958690][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 53.967451][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.977499][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 53.983307][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 54.002998][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010002 [ 54.009080][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 54.017055][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 54.025023][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 54.032993][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 54.040964][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 54.048940][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 54.057881][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.064460][ T1055] CR2: 00007f23f3fb2ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 54.072431][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.080414][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.088380][ T1055] Call Trace: [ 54.091654][ T1055] [ 54.094667][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 54.100306][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.105417][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 54.110097][ T1055] rb_buffer_peek+0x5f/0x930 [ 54.114682][ T1055] ? trace_seq_putc+0x158/0x220 [ 54.119531][ T1055] ring_buffer_consume+0x1aa/0x370 [ 54.124640][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 54.130358][ T1055] ? print_trace_line+0x393/0x6b0 [ 54.135392][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 54.141029][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 54.147104][ T1055] ? __kasan_check_read+0x11/0x20 [ 54.152130][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 54.158198][ T1055] ? security_file_permission+0x94/0xb0 [ 54.163843][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 54.168606][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 54.173727][ T1055] do_splice+0xff6/0x14c0 [ 54.178058][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 54.184217][ T1055] ? irqentry_exit+0x37/0x40 [ 54.188817][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 54.194107][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 54.199749][ T1055] ? __cfi_do_splice+0x10/0x10 [ 54.204527][ T1055] ? __se_sys_splice+0x31c/0x450 [ 54.209471][ T1055] __se_sys_splice+0x351/0x450 [ 54.214242][ T1055] ? __x64_sys_splice+0x100/0x100 [ 54.219273][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.224382][ T1055] __x64_sys_splice+0xe5/0x100 [ 54.229151][ T1055] x64_sys_call+0x22e/0x9a0 [ 54.233652][ T1055] do_syscall_64+0x4c/0xa0 [ 54.238072][ T1055] ? clear_bhb_loop+0x30/0x80 [ 54.242748][ T1055] ? clear_bhb_loop+0x30/0x80 [ 54.247426][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.253320][ T1055] RIP: 0033:0x7f23f319e559 [ 54.257741][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.277444][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.285869][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 54.293849][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.301818][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 54.309880][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.317854][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 54.325836][ T1055] [ 54.328859][ T1055] ---[ end trace 0000000000000000 ]--- [ 54.334357][ T1055] ------------[ cut here ]------------ [ 54.339804][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 54.350059][ T1055] Modules linked in: [ 54.353949][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 54.362707][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.372768][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 54.378581][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 54.398191][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 54.404263][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 54.412232][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 54.420196][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 54.428170][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 54.436180][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 54.444151][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 54.453083][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.459753][ T1055] CR2: 00007f23f3fb2ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 54.467734][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.475753][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.483732][ T1055] Call Trace: [ 54.487011][ T1055] [ 54.489942][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 54.495580][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.500694][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 54.505470][ T1055] rb_advance_reader+0x2b/0x770 [ 54.510317][ T1055] ring_buffer_consume+0x1e7/0x370 [ 54.515442][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 54.521073][ T1055] ? print_trace_line+0x393/0x6b0 [ 54.526182][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 54.531819][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 54.537897][ T1055] ? __kasan_check_read+0x11/0x20 [ 54.542917][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 54.548987][ T1055] ? security_file_permission+0x94/0xb0 [ 54.554537][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 54.559298][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 54.564421][ T1055] do_splice+0xff6/0x14c0 [ 54.568758][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 54.574827][ T1055] ? irqentry_exit+0x37/0x40 [ 54.579421][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 54.584711][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 54.590344][ T1055] ? __cfi_do_splice+0x10/0x10 [ 54.595111][ T1055] ? __se_sys_splice+0x31c/0x450 [ 54.600054][ T1055] __se_sys_splice+0x351/0x450 [ 54.604821][ T1055] ? __x64_sys_splice+0x100/0x100 [ 54.609852][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.614963][ T1055] __x64_sys_splice+0xe5/0x100 [ 54.619753][ T1055] x64_sys_call+0x22e/0x9a0 [ 54.624260][ T1055] do_syscall_64+0x4c/0xa0 [ 54.628680][ T1055] ? clear_bhb_loop+0x30/0x80 [ 54.633356][ T1055] ? clear_bhb_loop+0x30/0x80 [ 54.638041][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.643932][ T1055] RIP: 0033:0x7f23f319e559 [ 54.648340][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.668035][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.676454][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 54.684424][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.692388][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 54.700352][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.708446][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 54.716492][ T1055] [ 54.719495][ T1055] ---[ end trace 0000000000000000 ]--- [ 54.725802][ T1055] ------------[ cut here ]------------ [ 54.731262][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 54.741522][ T1055] Modules linked in: [ 54.745418][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 54.754177][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.764227][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 54.770018][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 54.789605][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 54.795667][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 54.803628][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 54.811604][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 54.819560][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 54.827515][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 54.835469][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.844381][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.850949][ T1055] CR2: 0000200000404030 CR3: 0000000135265000 CR4: 00000000003506b0 [ 54.858912][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.866868][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.875010][ T1055] Call Trace: [ 54.878284][ T1055] [ 54.881289][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.886431][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 54.892072][ T1055] ? __schedule+0xcbb/0x1700 [ 54.896674][ T1055] ? __kasan_check_write+0x14/0x20 [ 54.901785][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 54.906460][ T1055] rb_buffer_peek+0x5f/0x930 [ 54.911067][ T1055] ring_buffer_peek+0x184/0x3b0 [ 54.915914][ T1055] ? __kasan_check_read+0x11/0x20 [ 54.920935][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 54.926304][ T1055] ? asm_sysvec_call_function_single+0x1b/0x20 [ 54.932448][ T1055] ? _find_next_bit+0x8a/0x130 [ 54.937213][ T1055] __find_next_entry+0x33c/0x6c0 [ 54.942161][ T1055] ? trace_find_next_entry+0x380/0x380 [ 54.947620][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 54.953252][ T1055] ? print_trace_line+0x393/0x6b0 [ 54.958273][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 54.963898][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 54.970048][ T1055] ? __kasan_check_read+0x11/0x20 [ 54.975067][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 54.981120][ T1055] ? security_file_permission+0x94/0xb0 [ 54.986655][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 54.991401][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 54.996500][ T1055] do_splice+0xff6/0x14c0 [ 55.000824][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 55.006873][ T1055] ? irqentry_exit+0x37/0x40 [ 55.011447][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 55.016718][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 55.022341][ T1055] ? __cfi_do_splice+0x10/0x10 [ 55.027122][ T1055] ? __se_sys_splice+0x31c/0x450 [ 55.032049][ T1055] __se_sys_splice+0x351/0x450 [ 55.036803][ T1055] ? __x64_sys_splice+0x100/0x100 [ 55.041909][ T1055] ? __kasan_check_write+0x14/0x20 [ 55.047005][ T1055] __x64_sys_splice+0xe5/0x100 [ 55.051758][ T1055] x64_sys_call+0x22e/0x9a0 [ 55.056245][ T1055] do_syscall_64+0x4c/0xa0 [ 55.060679][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.065339][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.070003][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.075879][ T1055] RIP: 0033:0x7f23f319e559 [ 55.080283][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.099875][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.108364][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 55.116324][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.124293][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 55.132251][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.140204][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 55.148172][ T1055] [ 55.151193][ T1055] ---[ end trace 0000000000000000 ]--- [ 55.157728][ T1055] ------------[ cut here ]------------ [ 55.163187][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 55.173438][ T1055] Modules linked in: [ 55.177332][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 55.186090][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.196145][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 55.201968][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 55.221585][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 55.222310][ T1057] loop3: detected capacity change from 0 to 1024 [ 55.227660][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 55.227677][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.227688][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.227700][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 55.239458][ T1057] ext3: Unknown parameter 'noacl' [ 55.241979][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 55.241996][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.280970][ T28] audit: type=1400 audit(1792039438.943:237): avc: denied { create } for pid=1059 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.287908][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.287923][ T1055] CR2: 0000200000404030 CR3: 0000000135265000 CR4: 00000000003506b0 [ 55.287938][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.287948][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.337714][ T1055] Call Trace: [ 55.340994][ T1055] [ 55.343914][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 55.349543][ T1055] ? __kasan_check_write+0x14/0x20 [ 55.354637][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 55.359478][ T1055] rb_buffer_peek+0x5f/0x930 [ 55.364144][ T1055] ring_buffer_consume+0x1aa/0x370 [ 55.369240][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 55.374853][ T1055] ? print_trace_line+0x393/0x6b0 [ 55.379913][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 55.385534][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 55.391682][ T1055] ? __kasan_check_read+0x11/0x20 [ 55.396697][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 55.402747][ T1055] ? security_file_permission+0x94/0xb0 [ 55.408305][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 55.413050][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 55.418148][ T1055] do_splice+0xff6/0x14c0 [ 55.422465][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 55.428524][ T1055] ? irqentry_exit+0x37/0x40 [ 55.433096][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 55.438363][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 55.443984][ T1055] ? __cfi_do_splice+0x10/0x10 [ 55.448787][ T1055] ? __se_sys_splice+0x31c/0x450 [ 55.453810][ T1055] __se_sys_splice+0x351/0x450 [ 55.458570][ T1055] ? __x64_sys_splice+0x100/0x100 [ 55.463582][ T1055] ? __kasan_check_write+0x14/0x20 [ 55.468678][ T1055] __x64_sys_splice+0xe5/0x100 [ 55.473430][ T1055] x64_sys_call+0x22e/0x9a0 [ 55.477923][ T1055] do_syscall_64+0x4c/0xa0 [ 55.482341][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.487012][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.491762][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.497640][ T1055] RIP: 0033:0x7f23f319e559 [ 55.502038][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.521740][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.530138][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 55.538092][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.546044][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 55.554033][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.561994][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 55.569955][ T1055] [ 55.572964][ T1055] ---[ end trace 0000000000000000 ]--- [ 55.578443][ T1055] ------------[ cut here ]------------ [ 55.583895][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 55.594123][ T1055] Modules linked in: [ 55.598001][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 55.606738][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.616774][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 55.622580][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 55.642254][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 55.648305][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 55.656261][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.664216][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.672169][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 55.680122][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 55.688076][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.696991][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.703561][ T1055] CR2: 0000200000404030 CR3: 0000000135265000 CR4: 00000000003506b0 [ 55.711538][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.719493][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.727453][ T1055] Call Trace: [ 55.730724][ T1055] [ 55.733732][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 55.739355][ T1055] ? __kasan_check_write+0x14/0x20 [ 55.744452][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 55.749206][ T1055] rb_advance_reader+0x2b/0x770 [ 55.754042][ T1055] ring_buffer_consume+0x1e7/0x370 [ 55.759136][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 55.764752][ T1055] ? print_trace_line+0x393/0x6b0 [ 55.769758][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 55.775381][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 55.781443][ T1055] ? __kasan_check_read+0x11/0x20 [ 55.786459][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 55.792512][ T1055] ? security_file_permission+0x94/0xb0 [ 55.798050][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 55.802800][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 55.807906][ T1055] do_splice+0xff6/0x14c0 [ 55.812223][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 55.818296][ T1055] ? irqentry_exit+0x37/0x40 [ 55.822878][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 55.828157][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 55.833775][ T1055] ? __cfi_do_splice+0x10/0x10 [ 55.838530][ T1055] ? __se_sys_splice+0x31c/0x450 [ 55.843455][ T1055] __se_sys_splice+0x351/0x450 [ 55.848207][ T1055] ? __x64_sys_splice+0x100/0x100 [ 55.853218][ T1055] ? __kasan_check_write+0x14/0x20 [ 55.858313][ T1055] __x64_sys_splice+0xe5/0x100 [ 55.863067][ T1055] x64_sys_call+0x22e/0x9a0 [ 55.867556][ T1055] do_syscall_64+0x4c/0xa0 [ 55.871963][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.876631][ T1055] ? clear_bhb_loop+0x30/0x80 [ 55.881293][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.887168][ T1055] RIP: 0033:0x7f23f319e559 [ 55.891564][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.911155][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.919554][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 55.927594][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.935547][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 55.943500][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.951452][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 55.959410][ T1055] [ 55.962411][ T1055] ---[ end trace 0000000000000000 ]--- [ 55.968029][ T1055] ------------[ cut here ]------------ [ 55.972693][ T290] EXT4-fs (loop4): unmounting filesystem. [ 55.973512][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 55.989443][ T1055] Modules linked in: [ 55.993357][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 56.002116][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.012172][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 56.017995][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 56.037619][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 56.040068][ T28] audit: type=1400 audit(1792039439.703:238): avc: denied { create } for pid=1059 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.043692][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 56.043708][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.043720][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.043732][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 56.094974][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 56.102947][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.111868][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.118445][ T1055] CR2: 0000200000404030 CR3: 0000000135265000 CR4: 00000000003506b0 [ 56.126410][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.134371][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.142327][ T1055] Call Trace: [ 56.145592][ T1055] [ 56.148509][ T1055] ? plist_del+0x3ec/0x400 [ 56.152929][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 56.158550][ T1055] ? __schedule+0xdaa/0x1700 [ 56.163137][ T1055] ? __kasan_check_write+0x14/0x20 [ 56.168242][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 56.172930][ T1055] rb_buffer_peek+0x5f/0x930 [ 56.177518][ T1055] ring_buffer_peek+0x184/0x3b0 [ 56.182359][ T1055] ? __kasan_check_read+0x11/0x20 [ 56.187375][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 56.192906][ T1055] ? asm_sysvec_call_function_single+0x1b/0x20 [ 56.199045][ T1055] ? _find_next_bit+0x8a/0x130 [ 56.203795][ T1055] __find_next_entry+0x33c/0x6c0 [ 56.208811][ T1055] ? trace_find_next_entry+0x380/0x380 [ 56.214255][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 56.219877][ T1055] ? print_trace_line+0x393/0x6b0 [ 56.224882][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 56.230507][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 56.236569][ T1055] ? __kasan_check_read+0x11/0x20 [ 56.241582][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 56.247633][ T1055] ? security_file_permission+0x94/0xb0 [ 56.253185][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 56.257952][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 56.263064][ T1055] do_splice+0xff6/0x14c0 [ 56.267564][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 56.273639][ T1055] ? irqentry_exit+0x37/0x40 [ 56.278244][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 56.283534][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 56.289179][ T1055] ? __cfi_do_splice+0x10/0x10 [ 56.293944][ T1055] ? __se_sys_splice+0x31c/0x450 [ 56.298875][ T1055] __se_sys_splice+0x351/0x450 [ 56.303633][ T1055] ? __x64_sys_splice+0x100/0x100 [ 56.308650][ T1055] ? __kasan_check_write+0x14/0x20 [ 56.313746][ T1055] __x64_sys_splice+0xe5/0x100 [ 56.318505][ T1055] x64_sys_call+0x22e/0x9a0 [ 56.322995][ T1055] do_syscall_64+0x4c/0xa0 [ 56.327403][ T1055] ? clear_bhb_loop+0x30/0x80 [ 56.332158][ T1055] ? clear_bhb_loop+0x30/0x80 [ 56.336932][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.342815][ T1055] RIP: 0033:0x7f23f319e559 [ 56.347213][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.366801][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 56.375198][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 56.383153][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.391108][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 56.399063][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.407020][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 56.415066][ T1055] [ 56.418070][ T1055] ---[ end trace 0000000000000000 ]--- [ 56.490414][ T1077] loop3: detected capacity change from 0 to 4096 [ 56.511435][ T1083] tmpfs: Unsupported parameter 'mpol' [ 56.511494][ T1077] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 56.912599][ T1055] ------------[ cut here ]------------ [ 56.918084][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 56.928312][ T1055] Modules linked in: [ 56.932189][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 56.940960][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.951006][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 56.956806][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 56.976397][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010002 [ 56.982452][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 56.990507][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.998464][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.006506][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.014461][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 57.022418][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.031331][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.037929][ T1055] CR2: 0000200000048000 CR3: 0000000135265000 CR4: 00000000003506a0 [ 57.045891][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.053844][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.061794][ T1055] Call Trace: [ 57.065076][ T1055] [ 57.067995][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 57.073705][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.078799][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 57.083462][ T1055] rb_buffer_peek+0x5f/0x930 [ 57.088034][ T1055] ring_buffer_consume+0x1aa/0x370 [ 57.093130][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 57.098749][ T1055] ? print_trace_line+0x393/0x6b0 [ 57.103753][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 57.109376][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 57.115435][ T1055] ? __kasan_check_read+0x11/0x20 [ 57.120447][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 57.126499][ T1055] ? security_file_permission+0x94/0xb0 [ 57.132035][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 57.136783][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 57.141883][ T1055] do_splice+0xff6/0x14c0 [ 57.146201][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 57.152258][ T1055] ? irqentry_exit+0x37/0x40 [ 57.156837][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 57.162124][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 57.167744][ T1055] ? __cfi_do_splice+0x10/0x10 [ 57.172498][ T1055] ? __se_sys_splice+0x31c/0x450 [ 57.177435][ T1055] __se_sys_splice+0x351/0x450 [ 57.182202][ T1055] ? __x64_sys_splice+0x100/0x100 [ 57.187240][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.192342][ T1055] __x64_sys_splice+0xe5/0x100 [ 57.197111][ T1055] x64_sys_call+0x22e/0x9a0 [ 57.201615][ T1055] do_syscall_64+0x4c/0xa0 [ 57.206028][ T1055] ? clear_bhb_loop+0x30/0x80 [ 57.210699][ T1055] ? clear_bhb_loop+0x30/0x80 [ 57.215361][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.221242][ T1055] RIP: 0033:0x7f23f319e559 [ 57.225643][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.245233][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.253635][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 57.261594][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.269546][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 57.277499][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.285482][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 57.293439][ T1055] [ 57.296440][ T1055] ---[ end trace 0000000000000000 ]--- [ 57.301916][ T1055] ------------[ cut here ]------------ [ 57.307345][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 57.317573][ T1055] Modules linked in: [ 57.321444][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 57.330180][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.340216][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 57.346007][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 57.365596][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 57.371647][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 57.379600][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.387551][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.395504][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.403457][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 57.411434][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.420380][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.426949][ T1055] CR2: 0000200000048000 CR3: 0000000135265000 CR4: 00000000003506a0 [ 57.434906][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.442953][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.450921][ T1055] Call Trace: [ 57.454194][ T1055] [ 57.457121][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 57.462749][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.467846][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 57.472511][ T1055] rb_advance_reader+0x2b/0x770 [ 57.477345][ T1055] ring_buffer_consume+0x1e7/0x370 [ 57.482443][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 57.488063][ T1055] ? print_trace_line+0x393/0x6b0 [ 57.493070][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 57.498691][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 57.504754][ T1055] ? __kasan_check_read+0x11/0x20 [ 57.509789][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 57.515842][ T1055] ? security_file_permission+0x94/0xb0 [ 57.521381][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 57.526148][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 57.531253][ T1055] do_splice+0xff6/0x14c0 [ 57.535598][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 57.541654][ T1055] ? irqentry_exit+0x37/0x40 [ 57.546235][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 57.551506][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 57.557122][ T1055] ? __cfi_do_splice+0x10/0x10 [ 57.561873][ T1055] ? __se_sys_splice+0x31c/0x450 [ 57.566810][ T1055] __se_sys_splice+0x351/0x450 [ 57.571566][ T1055] ? __x64_sys_splice+0x100/0x100 [ 57.576587][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.581683][ T1055] __x64_sys_splice+0xe5/0x100 [ 57.586436][ T1055] x64_sys_call+0x22e/0x9a0 [ 57.590925][ T1055] do_syscall_64+0x4c/0xa0 [ 57.595330][ T1055] ? clear_bhb_loop+0x30/0x80 [ 57.599996][ T1055] ? clear_bhb_loop+0x30/0x80 [ 57.604660][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.610542][ T1055] RIP: 0033:0x7f23f319e559 [ 57.614939][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.634531][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.642934][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 57.650923][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.658877][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 57.666829][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.674873][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 57.682830][ T1055] [ 57.685834][ T1055] ---[ end trace 0000000000000000 ]--- [ 57.692047][ T1055] ------------[ cut here ]------------ [ 57.697516][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 57.707849][ T1055] Modules linked in: [ 57.711721][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 57.720465][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.730703][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 57.736521][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 57.756126][ T1055] RSP: 0000:ffffc9000592f460 EFLAGS: 00010006 [ 57.762182][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 57.770134][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.778092][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.786062][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.794031][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 57.802019][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.810940][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.817594][ T1055] CR2: 000000110c320591 CR3: 0000000135265000 CR4: 00000000003506b0 [ 57.825552][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.833593][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.841548][ T1055] Call Trace: [ 57.844833][ T1055] [ 57.847749][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.852850][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 57.858474][ T1055] ? __schedule+0xcbb/0x1700 [ 57.863049][ T1055] ? __kasan_check_write+0x14/0x20 [ 57.868141][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 57.872805][ T1055] rb_buffer_peek+0x5f/0x930 [ 57.877380][ T1055] ring_buffer_peek+0x184/0x3b0 [ 57.882210][ T1055] ? __kasan_check_read+0x11/0x20 [ 57.887220][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 57.892578][ T1055] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 57.898753][ T1055] ? _find_next_bit+0x8a/0x130 [ 57.903500][ T1055] __find_next_entry+0x33c/0x6c0 [ 57.908430][ T1055] ? trace_find_next_entry+0x380/0x380 [ 57.913886][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 57.919505][ T1055] ? print_trace_line+0x393/0x6b0 [ 57.924512][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 57.930135][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 57.936196][ T1055] ? __kasan_check_read+0x11/0x20 [ 57.941211][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 57.947261][ T1055] ? security_file_permission+0x94/0xb0 [ 57.952797][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 57.957635][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 57.962742][ T1055] do_splice+0xff6/0x14c0 [ 57.967079][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 57.973140][ T1055] ? irqentry_exit+0x37/0x40 [ 57.977725][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 57.982997][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 57.988616][ T1055] ? __cfi_do_splice+0x10/0x10 [ 57.993370][ T1055] ? __se_sys_splice+0x31c/0x450 [ 57.998294][ T1055] __se_sys_splice+0x351/0x450 [ 58.003046][ T1055] ? __x64_sys_splice+0x100/0x100 [ 58.008069][ T1055] ? __kasan_check_write+0x14/0x20 [ 58.013164][ T1055] __x64_sys_splice+0xe5/0x100 [ 58.017921][ T1055] x64_sys_call+0x22e/0x9a0 [ 58.022409][ T1055] do_syscall_64+0x4c/0xa0 [ 58.026814][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.031573][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.036236][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.042146][ T1055] RIP: 0033:0x7f23f319e559 [ 58.046573][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.066171][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.074578][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 58.082533][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.090491][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 58.098443][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.106399][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 58.114364][ T1055] [ 58.117363][ T1055] ---[ end trace 0000000000000000 ]--- [ 58.122823][ T1055] ================================================================== [ 58.130880][ T1055] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 58.138074][ T1055] Read of size 4 at addr ffff88816061de5d by task syz.0.266/1055 [ 58.145787][ T1055] [ 58.148100][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G W syzkaller #0 [ 58.156936][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 58.166985][ T1055] Call Trace: [ 58.170255][ T1055] [ 58.173174][ T1055] __dump_stack+0x21/0x24 [ 58.177505][ T1055] dump_stack_lvl+0x110/0x170 [ 58.182170][ T1055] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.187183][ T1055] ? rb_get_reader_page+0x9f6/0xc60 [ 58.192372][ T1055] ? rb_buffer_peek+0x88d/0x930 [ 58.197207][ T1055] print_address_description+0x71/0x200 [ 58.202747][ T1055] print_report+0x4a/0x60 [ 58.207076][ T1055] kasan_report+0x122/0x150 [ 58.211570][ T1055] ? rb_buffer_peek+0x88d/0x930 [ 58.216401][ T1055] ? __kasan_check_write+0x14/0x20 [ 58.221501][ T1055] __asan_report_load4_noabort+0x14/0x20 [ 58.227202][ T1055] rb_buffer_peek+0x88d/0x930 [ 58.231865][ T1055] ring_buffer_peek+0x184/0x3b0 [ 58.236696][ T1055] ? __kasan_check_read+0x11/0x20 [ 58.241713][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 58.247068][ T1055] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 58.253213][ T1055] ? _find_next_bit+0x8a/0x130 [ 58.257967][ T1055] __find_next_entry+0x33c/0x6c0 [ 58.262905][ T1055] ? trace_find_next_entry+0x380/0x380 [ 58.268436][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 58.274052][ T1055] ? print_trace_line+0x393/0x6b0 [ 58.279067][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 58.284708][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 58.290799][ T1055] ? __kasan_check_read+0x11/0x20 [ 58.295812][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 58.301870][ T1055] ? security_file_permission+0x94/0xb0 [ 58.307436][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 58.312206][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 58.317358][ T1055] do_splice+0xff6/0x14c0 [ 58.321691][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 58.327760][ T1055] ? irqentry_exit+0x37/0x40 [ 58.332361][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 58.337727][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 58.343359][ T1055] ? __cfi_do_splice+0x10/0x10 [ 58.348129][ T1055] ? __se_sys_splice+0x31c/0x450 [ 58.353068][ T1055] __se_sys_splice+0x351/0x450 [ 58.357835][ T1055] ? __x64_sys_splice+0x100/0x100 [ 58.362868][ T1055] ? __kasan_check_write+0x14/0x20 [ 58.368066][ T1055] __x64_sys_splice+0xe5/0x100 [ 58.372828][ T1055] x64_sys_call+0x22e/0x9a0 [ 58.377325][ T1055] do_syscall_64+0x4c/0xa0 [ 58.381731][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.386391][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.391053][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.396933][ T1055] RIP: 0033:0x7f23f319e559 [ 58.401331][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.420927][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.429330][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 58.437286][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.445245][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 58.453199][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.461241][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 58.469209][ T1055] [ 58.472212][ T1055] [ 58.474517][ T1055] The buggy address belongs to the physical page: [ 58.480922][ T1055] page:ffffea0005818740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16061d [ 58.491235][ T1055] flags: 0x4000000000000000(zone=1) [ 58.496433][ T1055] raw: 4000000000000000 ffffea0005818748 ffffea0005818748 0000000000000000 [ 58.504997][ T1055] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 58.513562][ T1055] page dumped because: kasan: bad access detected [ 58.519987][ T1055] page_owner info is not present (never set?) [ 58.526046][ T1055] [ 58.528368][ T1055] Memory state around the buggy address: [ 58.533989][ T1055] ffff88816061dd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.542040][ T1055] ffff88816061dd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.550088][ T1055] >ffff88816061de00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.558129][ T1055] ^ [ 58.565050][ T1055] ffff88816061de80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.573106][ T1055] ffff88816061df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.581154][ T1055] ================================================================== [ 58.589196][ T1055] Disabling lock debugging due to kernel taint [ 58.596658][ T1055] ------------[ cut here ]------------ [ 58.602130][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 58.612380][ T1055] Modules linked in: [ 58.616262][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 58.625004][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 58.635043][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 58.640842][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 58.660440][ T1055] RSP: 0000:ffffc9000592f580 EFLAGS: 00010002 [ 58.666511][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 58.674472][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 58.682431][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 58.690391][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 58.698350][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 58.706307][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.715218][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.721786][ T1055] CR2: 00007ff386850ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 58.729746][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.737702][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.745748][ T1055] Call Trace: [ 58.749018][ T1055] [ 58.751939][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 58.757566][ T1055] ? __kasan_check_write+0x14/0x20 [ 58.763012][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 58.767686][ T1055] rb_buffer_peek+0x5f/0x930 [ 58.772268][ T1055] ring_buffer_consume+0x1aa/0x370 [ 58.777370][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 58.782990][ T1055] ? print_trace_line+0x393/0x6b0 [ 58.788000][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 58.793634][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 58.799725][ T1055] ? __kasan_check_read+0x11/0x20 [ 58.804820][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 58.810872][ T1055] ? security_file_permission+0x94/0xb0 [ 58.816471][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 58.821308][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 58.826423][ T1055] do_splice+0xff6/0x14c0 [ 58.830743][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 58.836797][ T1055] ? irqentry_exit+0x37/0x40 [ 58.841378][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 58.846647][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 58.852266][ T1055] ? __cfi_do_splice+0x10/0x10 [ 58.857021][ T1055] ? __se_sys_splice+0x31c/0x450 [ 58.861958][ T1055] __se_sys_splice+0x351/0x450 [ 58.866714][ T1055] ? __x64_sys_splice+0x100/0x100 [ 58.871729][ T1055] ? __kasan_check_write+0x14/0x20 [ 58.876852][ T1055] __x64_sys_splice+0xe5/0x100 [ 58.881610][ T1055] x64_sys_call+0x22e/0x9a0 [ 58.886100][ T1055] do_syscall_64+0x4c/0xa0 [ 58.890520][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.895286][ T1055] ? clear_bhb_loop+0x30/0x80 [ 58.899969][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.905877][ T1055] RIP: 0033:0x7f23f319e559 [ 58.910300][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.929995][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.938488][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 58.946447][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.954402][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 58.962451][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.970406][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 58.978373][ T1055] [ 58.981476][ T1055] ---[ end trace 0000000000000000 ]--- [ 58.986990][ T1055] ------------[ cut here ]------------ [ 58.992439][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 59.002690][ T1055] Modules linked in: [ 59.006577][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 59.015322][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.025373][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.031184][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 59.050812][ T1055] RSP: 0000:ffffc9000592f580 EFLAGS: 00010006 [ 59.056875][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 59.064920][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.072875][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.080836][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.088788][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 59.096744][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.105770][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.112346][ T1055] CR2: 00007ff386850ff8 CR3: 0000000135265000 CR4: 00000000003506a0 [ 59.120404][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.128370][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.136332][ T1055] Call Trace: [ 59.139597][ T1055] [ 59.142518][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 59.148144][ T1055] rb_advance_reader+0x2b/0x770 [ 59.152976][ T1055] ring_buffer_consume+0x1e7/0x370 [ 59.158075][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.163691][ T1055] ? print_trace_line+0x393/0x6b0 [ 59.168697][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 59.174318][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 59.180388][ T1055] ? __kasan_check_read+0x11/0x20 [ 59.185419][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 59.191579][ T1055] ? security_file_permission+0x94/0xb0 [ 59.197128][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 59.201884][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 59.207001][ T1055] do_splice+0xff6/0x14c0 [ 59.211338][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 59.217402][ T1055] ? irqentry_exit+0x37/0x40 [ 59.221990][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 59.227262][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 59.232883][ T1055] ? __cfi_do_splice+0x10/0x10 [ 59.237636][ T1055] ? __se_sys_splice+0x31c/0x450 [ 59.242600][ T1055] __se_sys_splice+0x351/0x450 [ 59.247355][ T1055] ? __x64_sys_splice+0x100/0x100 [ 59.252385][ T1055] ? __kasan_check_write+0x14/0x20 [ 59.257498][ T1055] __x64_sys_splice+0xe5/0x100 [ 59.262266][ T1055] x64_sys_call+0x22e/0x9a0 [ 59.266766][ T1055] do_syscall_64+0x4c/0xa0 [ 59.271262][ T1055] ? clear_bhb_loop+0x30/0x80 [ 59.275923][ T1055] ? clear_bhb_loop+0x30/0x80 [ 59.281299][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.287266][ T1055] RIP: 0033:0x7f23f319e559 [ 59.291665][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.311262][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.319668][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 59.327626][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.335588][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 59.343547][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.351499][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 59.359472][ T1055] [ 59.362471][ T1055] ---[ end trace 0000000000000000 ]--- [ 59.368429][ T1055] ------------[ cut here ]------------ [ 59.373892][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 59.384229][ T1055] Modules linked in: [ 59.388114][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 59.396855][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.406904][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.412699][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 59.432291][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 59.438430][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 59.446386][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.454339][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.462292][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.470249][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 59.478203][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 59.487111][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.493685][ T1055] CR2: 000000110c3205bc CR3: 0000000135265000 CR4: 00000000003506b0 [ 59.501638][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.509608][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.517564][ T1055] Call Trace: [ 59.520831][ T1055] [ 59.523756][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 59.529505][ T1055] ? __schedule+0xcbb/0x1700 [ 59.534100][ T1055] ? __kasan_check_write+0x14/0x20 [ 59.539197][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 59.543872][ T1055] rb_buffer_peek+0x5f/0x930 [ 59.548483][ T1055] ring_buffer_peek+0x184/0x3b0 [ 59.553326][ T1055] ? __kasan_check_read+0x11/0x20 [ 59.558333][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 59.563686][ T1055] ? _find_next_bit+0x8a/0x130 [ 59.568437][ T1055] __find_next_entry+0x33c/0x6c0 [ 59.573362][ T1055] ? trace_find_next_entry+0x380/0x380 [ 59.578807][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.584430][ T1055] ? print_trace_line+0x393/0x6b0 [ 59.589435][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 59.595055][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 59.601114][ T1055] ? __kasan_check_read+0x11/0x20 [ 59.606126][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 59.612174][ T1055] ? security_file_permission+0x94/0xb0 [ 59.617705][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 59.622452][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 59.627550][ T1055] do_splice+0xff6/0x14c0 [ 59.631871][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 59.637930][ T1055] ? irqentry_exit+0x37/0x40 [ 59.642505][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 59.647776][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 59.653390][ T1055] ? __cfi_do_splice+0x10/0x10 [ 59.658140][ T1055] ? __se_sys_splice+0x31c/0x450 [ 59.663065][ T1055] __se_sys_splice+0x351/0x450 [ 59.667821][ T1055] ? __x64_sys_splice+0x100/0x100 [ 59.672833][ T1055] ? __kasan_check_write+0x14/0x20 [ 59.677925][ T1055] __x64_sys_splice+0xe5/0x100 [ 59.682678][ T1055] x64_sys_call+0x22e/0x9a0 [ 59.687164][ T1055] do_syscall_64+0x4c/0xa0 [ 59.691571][ T1055] ? clear_bhb_loop+0x30/0x80 [ 59.696229][ T1055] ? clear_bhb_loop+0x30/0x80 [ 59.700887][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.706761][ T1055] RIP: 0033:0x7f23f319e559 [ 59.711160][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.730835][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.739232][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 59.747276][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.755227][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 59.763281][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.771234][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 59.779192][ T1055] [ 59.782193][ T1055] ---[ end trace 0000000000000000 ]--- [ 59.787989][ T1055] ------------[ cut here ]------------ [ 59.793448][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 59.803693][ T1055] Modules linked in: [ 59.807571][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 59.816310][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.826522][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.832317][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 59.851905][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010002 [ 59.857956][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 59.865911][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.873949][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.881912][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.889950][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 59.897902][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.906816][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.913379][ T1055] CR2: 00007ff3859ebc40 CR3: 0000000135265000 CR4: 00000000003506a0 [ 59.921332][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.929284][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.937238][ T1055] Call Trace: [ 59.940499][ T1055] [ 59.943416][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 59.949035][ T1055] ? __kasan_check_write+0x14/0x20 [ 59.954130][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 59.958792][ T1055] rb_buffer_peek+0x5f/0x930 [ 59.963365][ T1055] ring_buffer_consume+0x1aa/0x370 [ 59.968458][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.974068][ T1055] ? print_trace_line+0x393/0x6b0 [ 59.979072][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 59.984699][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 59.990758][ T1055] ? __kasan_check_read+0x11/0x20 [ 59.995764][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 60.001815][ T1055] ? security_file_permission+0x94/0xb0 [ 60.007346][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 60.012093][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 60.017192][ T1055] do_splice+0xff6/0x14c0 [ 60.021508][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 60.027569][ T1055] ? irqentry_exit+0x37/0x40 [ 60.032145][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 60.037412][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 60.043029][ T1055] ? __cfi_do_splice+0x10/0x10 [ 60.047783][ T1055] ? __se_sys_splice+0x31c/0x450 [ 60.052706][ T1055] __se_sys_splice+0x351/0x450 [ 60.057457][ T1055] ? __x64_sys_splice+0x100/0x100 [ 60.062469][ T1055] ? __kasan_check_write+0x14/0x20 [ 60.067563][ T1055] __x64_sys_splice+0xe5/0x100 [ 60.072313][ T1055] x64_sys_call+0x22e/0x9a0 [ 60.076801][ T1055] do_syscall_64+0x4c/0xa0 [ 60.081209][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.085877][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.090560][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.096447][ T1055] RIP: 0033:0x7f23f319e559 [ 60.100851][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.120448][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.128861][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 60.136830][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.144782][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 60.152736][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.160688][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 60.168655][ T1055] [ 60.171655][ T1055] ---[ end trace 0000000000000000 ]--- [ 60.177140][ T1055] ------------[ cut here ]------------ [ 60.182572][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 60.192804][ T1055] Modules linked in: [ 60.196679][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 60.205427][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.215476][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 60.221285][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 60.240877][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 60.246930][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 60.254889][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.262846][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.270814][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 60.278787][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 60.286751][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.295755][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.302327][ T1055] CR2: 00007ff3859ebc40 CR3: 0000000135265000 CR4: 00000000003506a0 [ 60.310307][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.318262][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.326239][ T1055] Call Trace: [ 60.329517][ T1055] [ 60.332436][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 60.338061][ T1055] rb_advance_reader+0x2b/0x770 [ 60.342908][ T1055] ring_buffer_consume+0x1e7/0x370 [ 60.348094][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 60.353707][ T1055] ? print_trace_line+0x393/0x6b0 [ 60.358713][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 60.364357][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 60.370414][ T1055] ? __kasan_check_read+0x11/0x20 [ 60.375421][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 60.381473][ T1055] ? security_file_permission+0x94/0xb0 [ 60.387008][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 60.391765][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 60.396863][ T1055] do_splice+0xff6/0x14c0 [ 60.401269][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 60.407318][ T1055] ? irqentry_exit+0x37/0x40 [ 60.411894][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 60.417161][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 60.422785][ T1055] ? __cfi_do_splice+0x10/0x10 [ 60.427551][ T1055] ? __se_sys_splice+0x31c/0x450 [ 60.432514][ T1055] __se_sys_splice+0x351/0x450 [ 60.437276][ T1055] ? __x64_sys_splice+0x100/0x100 [ 60.442293][ T1055] ? __kasan_check_write+0x14/0x20 [ 60.447399][ T1055] __x64_sys_splice+0xe5/0x100 [ 60.452154][ T1055] x64_sys_call+0x22e/0x9a0 [ 60.456665][ T1055] do_syscall_64+0x4c/0xa0 [ 60.461068][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.465727][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.470392][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.476267][ T1055] RIP: 0033:0x7f23f319e559 [ 60.480663][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.500252][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.508650][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 60.516608][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.524561][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 60.532518][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.540471][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 60.548432][ T1055] [ 60.551449][ T1055] ---[ end trace 0000000000000000 ]--- [ 60.557191][ T1055] ------------[ cut here ]------------ [ 60.562654][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 60.572890][ T1055] Modules linked in: [ 60.576773][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 60.585516][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.595595][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 60.601391][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 60.620977][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010012 [ 60.627033][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 60.635106][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.643057][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.651010][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 60.658963][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 60.666917][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.675827][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.682391][ T1055] CR2: 0000555562a7e908 CR3: 0000000135265000 CR4: 00000000003506b0 [ 60.690347][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.698299][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.706288][ T1055] Call Trace: [ 60.709555][ T1055] [ 60.712470][ T1055] ? __kasan_check_write+0x14/0x20 [ 60.717574][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 60.723191][ T1055] ? __schedule+0xcbb/0x1700 [ 60.727765][ T1055] ? __kasan_check_write+0x14/0x20 [ 60.732873][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 60.737582][ T1055] rb_buffer_peek+0x5f/0x930 [ 60.742155][ T1055] ring_buffer_peek+0x184/0x3b0 [ 60.746989][ T1055] ? __kasan_check_read+0x11/0x20 [ 60.751999][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 60.757359][ T1055] ? _find_next_bit+0x8a/0x130 [ 60.762114][ T1055] __find_next_entry+0x33c/0x6c0 [ 60.767053][ T1055] ? trace_find_next_entry+0x380/0x380 [ 60.772618][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 60.778241][ T1055] ? print_trace_line+0x393/0x6b0 [ 60.783268][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 60.788891][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 60.794953][ T1055] ? __kasan_check_read+0x11/0x20 [ 60.799959][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 60.806034][ T1055] ? security_file_permission+0x94/0xb0 [ 60.811580][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 60.816326][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 60.821437][ T1055] do_splice+0xff6/0x14c0 [ 60.825760][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 60.831814][ T1055] ? irqentry_exit+0x37/0x40 [ 60.836406][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 60.841682][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 60.847300][ T1055] ? __cfi_do_splice+0x10/0x10 [ 60.852055][ T1055] ? __se_sys_splice+0x31c/0x450 [ 60.856987][ T1055] __se_sys_splice+0x351/0x450 [ 60.861745][ T1055] ? __x64_sys_splice+0x100/0x100 [ 60.866759][ T1055] ? __kasan_check_write+0x14/0x20 [ 60.871865][ T1055] __x64_sys_splice+0xe5/0x100 [ 60.876618][ T1055] x64_sys_call+0x22e/0x9a0 [ 60.881106][ T1055] do_syscall_64+0x4c/0xa0 [ 60.885510][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.890175][ T1055] ? clear_bhb_loop+0x30/0x80 [ 60.894837][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.900720][ T1055] RIP: 0033:0x7f23f319e559 [ 60.905130][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.924717][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.933114][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 60.941067][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.949022][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 60.956982][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.964937][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 60.972898][ T1055] [ 60.975899][ T1055] ---[ end trace 0000000000000000 ]--- [ 60.981655][ T1055] ------------[ cut here ]------------ [ 60.987161][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 60.997421][ T1055] Modules linked in: [ 61.001320][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 61.010212][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.020270][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.026089][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 61.045705][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 61.051780][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 61.059752][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.067725][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.075704][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 61.083678][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 61.091650][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.100584][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.107169][ T1055] CR2: 0000558eda71ce90 CR3: 0000000135265000 CR4: 00000000003506a0 [ 61.115151][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.123128][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.131106][ T1055] Call Trace: [ 61.134392][ T1055] [ 61.137335][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 61.143045][ T1055] ? __kasan_check_write+0x14/0x20 [ 61.147775][ T28] audit: type=1400 audit(1792039444.793:239): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.148165][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 61.171290][ T28] audit: type=1400 audit(1792039444.793:240): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.174608][ T1055] rb_buffer_peek+0x5f/0x930 [ 61.174633][ T1055] ring_buffer_consume+0x1aa/0x370 [ 61.174650][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 61.174666][ T1055] ? print_trace_line+0x393/0x6b0 [ 61.196514][ T28] audit: type=1400 audit(1792039444.793:241): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.200494][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 61.205797][ T28] audit: type=1400 audit(1792039444.793:242): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.211206][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 61.211240][ T1055] ? __kasan_check_read+0x11/0x20 [ 61.216498][ T28] audit: type=1400 audit(1792039444.793:243): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.237725][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 61.237755][ T1055] ? security_file_permission+0x94/0xb0 [ 61.237778][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 61.237794][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 61.237817][ T1055] do_splice+0xff6/0x14c0 [ 61.244118][ T28] audit: type=1400 audit(1792039444.793:244): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.263910][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 61.263939][ T1055] ? irqentry_exit+0x37/0x40 [ 61.263956][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 61.263974][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 61.263992][ T1055] ? __cfi_do_splice+0x10/0x10 [ 61.270801][ T28] audit: type=1400 audit(1792039444.793:245): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.275049][ T1055] ? __se_sys_splice+0x31c/0x450 [ 61.275080][ T1055] __se_sys_splice+0x351/0x450 [ 61.402461][ T1055] ? __x64_sys_splice+0x100/0x100 [ 61.407567][ T1055] ? __kasan_check_write+0x14/0x20 [ 61.412689][ T1055] __x64_sys_splice+0xe5/0x100 [ 61.417454][ T1055] x64_sys_call+0x22e/0x9a0 [ 61.421941][ T1055] do_syscall_64+0x4c/0xa0 [ 61.426341][ T1055] ? clear_bhb_loop+0x30/0x80 [ 61.430999][ T1055] ? clear_bhb_loop+0x30/0x80 [ 61.435656][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.441533][ T1055] RIP: 0033:0x7f23f319e559 [ 61.445931][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.465611][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 61.474046][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 61.482017][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.489997][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 61.497959][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.505917][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 61.513878][ T1055] [ 61.516901][ T1055] ---[ end trace 0000000000000000 ]--- [ 61.522373][ T1055] ------------[ cut here ]------------ [ 61.527839][ T1055] WARNING: CPU: 1 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 61.538090][ T1055] Modules linked in: [ 61.541962][ T1055] CPU: 1 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 61.550701][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.560744][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.566562][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 61.586158][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 61.592213][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 61.600181][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.608143][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.616127][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 61.624084][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 61.632071][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.640986][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.647573][ T1055] CR2: 0000558eda71ce90 CR3: 0000000135265000 CR4: 00000000003506a0 [ 61.655546][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.663514][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.671478][ T1055] Call Trace: [ 61.674749][ T1055] [ 61.677668][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 61.683300][ T1055] rb_advance_reader+0x2b/0x770 [ 61.688173][ T1055] ring_buffer_consume+0x1e7/0x370 [ 61.693270][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 61.698893][ T1055] ? print_trace_line+0x393/0x6b0 [ 61.703919][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 61.709541][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 61.715610][ T1055] ? __kasan_check_read+0x11/0x20 [ 61.720620][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 61.726673][ T1055] ? security_file_permission+0x94/0xb0 [ 61.732206][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 61.737047][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 61.742155][ T1055] do_splice+0xff6/0x14c0 [ 61.746497][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 61.752562][ T1055] ? irqentry_exit+0x37/0x40 [ 61.757146][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 61.762419][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 61.768039][ T1055] ? __cfi_do_splice+0x10/0x10 [ 61.772798][ T1055] ? __se_sys_splice+0x31c/0x450 [ 61.777723][ T1055] __se_sys_splice+0x351/0x450 [ 61.782476][ T1055] ? __x64_sys_splice+0x100/0x100 [ 61.787487][ T1055] ? __kasan_check_write+0x14/0x20 [ 61.792582][ T1055] __x64_sys_splice+0xe5/0x100 [ 61.797334][ T1055] x64_sys_call+0x22e/0x9a0 [ 61.801818][ T1055] do_syscall_64+0x4c/0xa0 [ 61.806224][ T1055] ? clear_bhb_loop+0x30/0x80 [ 61.810887][ T1055] ? clear_bhb_loop+0x30/0x80 [ 61.815550][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.821426][ T1055] RIP: 0033:0x7f23f319e559 [ 61.825823][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.845411][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 61.853813][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 61.861765][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.869717][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 61.877769][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.885723][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 61.893682][ T1055] [ 61.896685][ T1055] ---[ end trace 0000000000000000 ]--- [ 61.902537][ T1055] ------------[ cut here ]------------ [ 61.907997][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 61.918249][ T1055] Modules linked in: [ 61.922132][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 61.930869][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.940910][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.946704][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 61.966291][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 61.972341][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 61.980293][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.988267][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.996222][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 62.004180][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 62.012144][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.021059][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.027624][ T1055] CR2: 0000555587b7d4e8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 62.035577][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.043546][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.051501][ T1055] Call Trace: [ 62.054764][ T1055] [ 62.057685][ T1055] ? plist_del+0x3ec/0x400 [ 62.062087][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 62.067701][ T1055] ? __schedule+0xcbb/0x1700 [ 62.072273][ T1055] ? __kasan_check_write+0x14/0x20 [ 62.077370][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 62.082039][ T1055] rb_buffer_peek+0x5f/0x930 [ 62.086616][ T1055] ring_buffer_peek+0x184/0x3b0 [ 62.091453][ T1055] ? __kasan_check_read+0x11/0x20 [ 62.096465][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 62.101824][ T1055] ? _find_next_bit+0x8a/0x130 [ 62.106576][ T1055] __find_next_entry+0x33c/0x6c0 [ 62.111503][ T1055] ? trace_find_next_entry+0x380/0x380 [ 62.116949][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.122576][ T1055] ? print_trace_line+0x393/0x6b0 [ 62.127604][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 62.133244][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 62.139310][ T1055] ? __kasan_check_read+0x11/0x20 [ 62.144321][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 62.150382][ T1055] ? security_file_permission+0x94/0xb0 [ 62.155921][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 62.160669][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 62.166380][ T1055] do_splice+0xff6/0x14c0 [ 62.170700][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 62.176754][ T1055] ? irqentry_exit+0x37/0x40 [ 62.181331][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 62.186613][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 62.192247][ T1055] ? __cfi_do_splice+0x10/0x10 [ 62.197013][ T1055] ? __se_sys_splice+0x31c/0x450 [ 62.201955][ T1055] __se_sys_splice+0x351/0x450 [ 62.206726][ T1055] ? __x64_sys_splice+0x100/0x100 [ 62.211741][ T1055] ? __kasan_check_write+0x14/0x20 [ 62.216839][ T1055] __x64_sys_splice+0xe5/0x100 [ 62.221590][ T1055] x64_sys_call+0x22e/0x9a0 [ 62.226105][ T1055] do_syscall_64+0x4c/0xa0 [ 62.230596][ T1055] ? clear_bhb_loop+0x30/0x80 [ 62.235254][ T1055] ? clear_bhb_loop+0x30/0x80 [ 62.239911][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.245804][ T1055] RIP: 0033:0x7f23f319e559 [ 62.250201][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.269792][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 62.278191][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 62.286240][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.294191][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 62.302142][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.310090][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 62.318047][ T1055] [ 62.321046][ T1055] ---[ end trace 0000000000000000 ]--- [ 62.327797][ T1055] ------------[ cut here ]------------ [ 62.333256][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 62.343497][ T1055] Modules linked in: [ 62.347374][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 62.356118][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.366156][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 62.371950][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 62.391624][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 62.397675][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 62.405629][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.413579][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.421531][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 62.429484][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 62.437440][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.446354][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.452922][ T1055] CR2: 0000555587b7d4e8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 62.460877][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.468829][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.476787][ T1055] Call Trace: [ 62.480068][ T1055] [ 62.483002][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 62.489083][ T1055] ? __kasan_check_write+0x14/0x20 [ 62.494183][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 62.498940][ T1055] rb_buffer_peek+0x5f/0x930 [ 62.503514][ T1055] ring_buffer_consume+0x1aa/0x370 [ 62.508612][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.514226][ T1055] ? print_trace_line+0x393/0x6b0 [ 62.519245][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 62.524891][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 62.530968][ T1055] ? __kasan_check_read+0x11/0x20 [ 62.535993][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 62.542076][ T1055] ? security_file_permission+0x94/0xb0 [ 62.547621][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 62.552381][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 62.557485][ T1055] do_splice+0xff6/0x14c0 [ 62.561806][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 62.567860][ T1055] ? irqentry_exit+0x37/0x40 [ 62.572442][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 62.577714][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 62.583332][ T1055] ? __cfi_do_splice+0x10/0x10 [ 62.588082][ T1055] ? __se_sys_splice+0x31c/0x450 [ 62.593008][ T1055] __se_sys_splice+0x351/0x450 [ 62.597765][ T1055] ? __x64_sys_splice+0x100/0x100 [ 62.602777][ T1055] ? __kasan_check_write+0x14/0x20 [ 62.607871][ T1055] __x64_sys_splice+0xe5/0x100 [ 62.612624][ T1055] x64_sys_call+0x22e/0x9a0 [ 62.617111][ T1055] do_syscall_64+0x4c/0xa0 [ 62.621513][ T1055] ? clear_bhb_loop+0x30/0x80 [ 62.626183][ T1055] ? clear_bhb_loop+0x30/0x80 [ 62.630879][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.636763][ T1055] RIP: 0033:0x7f23f319e559 [ 62.641167][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.660763][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 62.669185][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 62.677170][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.685123][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 62.693083][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.701038][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 62.709007][ T1055] [ 62.712008][ T1055] ---[ end trace 0000000000000000 ]--- [ 62.717506][ T1055] ------------[ cut here ]------------ [ 62.722938][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 62.733166][ T1055] Modules linked in: [ 62.737060][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 62.745815][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.755886][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 62.761699][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 62.781303][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010002 [ 62.787365][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 62.795320][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.803276][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.811231][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 62.819213][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 62.827181][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.836094][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.842664][ T1055] CR2: 0000555587b7d4e8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 62.850623][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.858580][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.866534][ T1055] Call Trace: [ 62.869796][ T1055] [ 62.872715][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 62.878339][ T1055] rb_advance_reader+0x2b/0x770 [ 62.883174][ T1055] ring_buffer_consume+0x1e7/0x370 [ 62.888273][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.893918][ T1055] ? print_trace_line+0x393/0x6b0 [ 62.898928][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 62.904553][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 62.910617][ T1055] ? __kasan_check_read+0x11/0x20 [ 62.915639][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 62.921694][ T1055] ? security_file_permission+0x94/0xb0 [ 62.927238][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 62.931984][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 62.937092][ T1055] do_splice+0xff6/0x14c0 [ 62.941411][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 62.947472][ T1055] ? irqentry_exit+0x37/0x40 [ 62.952050][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 62.957339][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 62.962959][ T1055] ? __cfi_do_splice+0x10/0x10 [ 62.967795][ T1055] ? __se_sys_splice+0x31c/0x450 [ 62.972720][ T1055] __se_sys_splice+0x351/0x450 [ 62.977562][ T1055] ? __x64_sys_splice+0x100/0x100 [ 62.982587][ T1055] ? __kasan_check_write+0x14/0x20 [ 62.987682][ T1055] __x64_sys_splice+0xe5/0x100 [ 62.992438][ T1055] x64_sys_call+0x22e/0x9a0 [ 62.996927][ T1055] do_syscall_64+0x4c/0xa0 [ 63.001346][ T1055] ? clear_bhb_loop+0x30/0x80 [ 63.006033][ T1055] ? clear_bhb_loop+0x30/0x80 [ 63.010700][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.016590][ T1055] RIP: 0033:0x7f23f319e559 [ 63.021034][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.040717][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 63.049128][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 63.057101][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 63.065069][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 63.073028][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.080982][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 63.088951][ T1055] [ 63.091955][ T1055] ---[ end trace 0000000000000000 ]--- [ 63.097510][ T1055] ------------[ cut here ]------------ [ 63.103474][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 63.113800][ T1055] Modules linked in: [ 63.117684][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 63.126573][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.136622][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 63.142682][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 63.162292][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 63.168445][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 63.176424][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.184382][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.192338][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 63.200298][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 63.208251][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.217168][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.223733][ T1055] CR2: 0000555587b7d4e8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 63.231698][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.239669][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.247637][ T1055] Call Trace: [ 63.250900][ T1055] [ 63.253816][ T1055] ? rb_get_reader_page+0xada/0xc60 [ 63.259019][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 63.264642][ T1055] ? __kasan_check_write+0x14/0x20 [ 63.270176][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 63.274847][ T1055] rb_buffer_peek+0x5f/0x930 [ 63.279534][ T1055] ring_buffer_peek+0x184/0x3b0 [ 63.284386][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 63.289749][ T1055] ? _find_next_bit+0x8a/0x130 [ 63.294501][ T1055] __find_next_entry+0x33c/0x6c0 [ 63.299433][ T1055] ? trace_find_next_entry+0x380/0x380 [ 63.304880][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 63.310499][ T1055] ? print_trace_line+0x393/0x6b0 [ 63.315504][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 63.321126][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 63.327188][ T1055] ? __kasan_check_read+0x11/0x20 [ 63.332204][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 63.338258][ T1055] ? security_file_permission+0x94/0xb0 [ 63.343794][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 63.348636][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 63.353930][ T1055] do_splice+0xff6/0x14c0 [ 63.358250][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 63.364310][ T1055] ? irqentry_exit+0x37/0x40 [ 63.368888][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 63.374163][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 63.379872][ T1055] ? __cfi_do_splice+0x10/0x10 [ 63.384626][ T1055] ? __se_sys_splice+0x31c/0x450 [ 63.389554][ T1055] __se_sys_splice+0x351/0x450 [ 63.394308][ T1055] ? __x64_sys_splice+0x100/0x100 [ 63.399325][ T1055] ? __kasan_check_write+0x14/0x20 [ 63.404433][ T1055] __x64_sys_splice+0xe5/0x100 [ 63.409187][ T1055] x64_sys_call+0x22e/0x9a0 [ 63.413676][ T1055] do_syscall_64+0x4c/0xa0 [ 63.418084][ T1055] ? clear_bhb_loop+0x30/0x80 [ 63.422745][ T1055] ? clear_bhb_loop+0x30/0x80 [ 63.427405][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.433277][ T1055] RIP: 0033:0x7f23f319e559 [ 63.437673][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.457267][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 63.465664][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 63.473620][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 63.481572][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 63.489535][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.497974][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 63.505951][ T1055] [ 63.508971][ T1055] ---[ end trace 0000000000000000 ]--- [ 63.912475][ T1055] ------------[ cut here ]------------ [ 63.917967][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 63.928201][ T1055] Modules linked in: [ 63.932076][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 63.940816][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.950866][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 63.956663][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 63.976432][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 63.982490][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 63.990443][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.998406][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 64.006362][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 64.014364][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 64.022322][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.031274][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.037845][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 64.045812][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.053797][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.061772][ T1055] Call Trace: [ 64.065039][ T1055] [ 64.067974][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 64.073592][ T1055] ? __kasan_check_write+0x14/0x20 [ 64.078687][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 64.083364][ T1055] rb_buffer_peek+0x5f/0x930 [ 64.087935][ T1055] ring_buffer_consume+0x1aa/0x370 [ 64.093035][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 64.098647][ T1055] ? print_trace_line+0x393/0x6b0 [ 64.103654][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 64.109281][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 64.115342][ T1055] ? __kasan_check_read+0x11/0x20 [ 64.120372][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 64.126431][ T1055] ? security_file_permission+0x94/0xb0 [ 64.131986][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 64.136738][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 64.141847][ T1055] do_splice+0xff6/0x14c0 [ 64.146164][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 64.152241][ T1055] ? irqentry_exit+0x37/0x40 [ 64.156844][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 64.162163][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 64.167791][ T1055] ? __cfi_do_splice+0x10/0x10 [ 64.172548][ T1055] ? __se_sys_splice+0x31c/0x450 [ 64.177495][ T1055] __se_sys_splice+0x351/0x450 [ 64.182244][ T1055] ? __x64_sys_splice+0x100/0x100 [ 64.187251][ T1055] ? __kasan_check_write+0x14/0x20 [ 64.192348][ T1055] __x64_sys_splice+0xe5/0x100 [ 64.197093][ T1055] x64_sys_call+0x22e/0x9a0 [ 64.201576][ T1055] do_syscall_64+0x4c/0xa0 [ 64.205972][ T1055] ? clear_bhb_loop+0x30/0x80 [ 64.210627][ T1055] ? clear_bhb_loop+0x30/0x80 [ 64.215281][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.221241][ T1055] RIP: 0033:0x7f23f319e559 [ 64.225638][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.245324][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 64.253742][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 64.261726][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.269765][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 64.277717][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.285669][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 64.293713][ T1055] [ 64.296715][ T1055] ---[ end trace 0000000000000000 ]--- [ 64.302184][ T1055] ------------[ cut here ]------------ [ 64.307611][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 64.317839][ T1055] Modules linked in: [ 64.321711][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 64.330446][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.340501][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 64.346383][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 64.365971][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 64.372028][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 64.380008][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 64.387963][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 64.395920][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 64.403875][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 64.411834][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.420748][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.427329][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 64.435289][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.443264][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.451217][ T1055] Call Trace: [ 64.454476][ T1055] [ 64.457398][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 64.463057][ T1055] rb_advance_reader+0x2b/0x770 [ 64.467904][ T1055] ring_buffer_consume+0x1e7/0x370 [ 64.473011][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 64.478726][ T1055] ? print_trace_line+0x393/0x6b0 [ 64.483855][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 64.489476][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 64.495568][ T1055] ? __kasan_check_read+0x11/0x20 [ 64.500607][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 64.506935][ T1055] ? security_file_permission+0x94/0xb0 [ 64.512470][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 64.517295][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 64.522404][ T1055] do_splice+0xff6/0x14c0 [ 64.526725][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 64.532780][ T1055] ? irqentry_exit+0x37/0x40 [ 64.537379][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 64.542650][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 64.548267][ T1055] ? __cfi_do_splice+0x10/0x10 [ 64.553028][ T1055] ? __se_sys_splice+0x31c/0x450 [ 64.557953][ T1055] __se_sys_splice+0x351/0x450 [ 64.562710][ T1055] ? __x64_sys_splice+0x100/0x100 [ 64.567719][ T1055] ? __kasan_check_write+0x14/0x20 [ 64.572842][ T1055] __x64_sys_splice+0xe5/0x100 [ 64.577591][ T1055] x64_sys_call+0x22e/0x9a0 [ 64.582093][ T1055] do_syscall_64+0x4c/0xa0 [ 64.586550][ T1055] ? clear_bhb_loop+0x30/0x80 [ 64.591218][ T1055] ? clear_bhb_loop+0x30/0x80 [ 64.595886][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.601768][ T1055] RIP: 0033:0x7f23f319e559 [ 64.606198][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.625791][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 64.634194][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 64.642147][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.650098][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 64.658051][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.666018][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 64.673979][ T1055] [ 64.676983][ T1055] ---[ end trace 0000000000000000 ]--- [ 64.912413][ T1055] ------------[ cut here ]------------ [ 64.917892][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 64.928128][ T1055] Modules linked in: [ 64.932001][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 64.940739][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.950774][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 64.956567][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 64.976164][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 64.982244][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 64.990206][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 64.998156][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 65.006122][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 65.014104][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 65.022082][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.031047][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.037622][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 65.045604][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.053645][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.061618][ T1055] Call Trace: [ 65.064906][ T1055] [ 65.067832][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 65.073556][ T1055] ? __schedule+0xcbb/0x1700 [ 65.078143][ T1055] ? __kasan_check_write+0x14/0x20 [ 65.083256][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 65.087934][ T1055] rb_buffer_peek+0x5f/0x930 [ 65.092505][ T1055] ring_buffer_peek+0x184/0x3b0 [ 65.097399][ T1055] ? __kasan_check_read+0x11/0x20 [ 65.102441][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 65.107819][ T1055] ? _find_next_bit+0x8a/0x130 [ 65.112575][ T1055] __find_next_entry+0x33c/0x6c0 [ 65.117501][ T1055] ? trace_find_next_entry+0x380/0x380 [ 65.122965][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 65.128583][ T1055] ? print_trace_line+0x393/0x6b0 [ 65.133599][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 65.139312][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 65.145386][ T1055] ? __kasan_check_read+0x11/0x20 [ 65.150428][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 65.156482][ T1055] ? security_file_permission+0x94/0xb0 [ 65.162022][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 65.166764][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 65.171860][ T1055] do_splice+0xff6/0x14c0 [ 65.176198][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 65.182242][ T1055] ? irqentry_exit+0x37/0x40 [ 65.186806][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 65.192082][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 65.197691][ T1055] ? __cfi_do_splice+0x10/0x10 [ 65.202432][ T1055] ? __se_sys_splice+0x31c/0x450 [ 65.207360][ T1055] __se_sys_splice+0x351/0x450 [ 65.212123][ T1055] ? __x64_sys_splice+0x100/0x100 [ 65.217126][ T1055] ? __kasan_check_write+0x14/0x20 [ 65.222213][ T1055] __x64_sys_splice+0xe5/0x100 [ 65.226958][ T1055] x64_sys_call+0x22e/0x9a0 [ 65.231439][ T1055] do_syscall_64+0x4c/0xa0 [ 65.235835][ T1055] ? clear_bhb_loop+0x30/0x80 [ 65.240493][ T1055] ? clear_bhb_loop+0x30/0x80 [ 65.245157][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.251027][ T1055] RIP: 0033:0x7f23f319e559 [ 65.255442][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.275027][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 65.283445][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 65.291415][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 65.299376][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 65.307344][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.315325][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 65.323310][ T1055] [ 65.326358][ T1055] ---[ end trace 0000000000000000 ]--- [ 65.331999][ T1055] ------------[ cut here ]------------ [ 65.337484][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 65.347724][ T1055] Modules linked in: [ 65.351600][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 65.360352][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.370393][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 65.376196][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 65.395789][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010002 [ 65.401846][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 65.410323][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 65.418290][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 65.426272][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 65.434246][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 65.442220][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.451167][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.457757][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 65.465722][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.473766][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.481790][ T1055] Call Trace: [ 65.485058][ T1055] [ 65.487987][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 65.493712][ T1055] ? __kasan_check_write+0x14/0x20 [ 65.498842][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 65.503599][ T1055] rb_buffer_peek+0x5f/0x930 [ 65.508274][ T1055] ring_buffer_consume+0x1aa/0x370 [ 65.513390][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 65.519027][ T1055] ? print_trace_line+0x393/0x6b0 [ 65.524759][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 65.532314][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 65.538412][ T1055] ? __kasan_check_read+0x11/0x20 [ 65.543438][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 65.549524][ T1055] ? security_file_permission+0x94/0xb0 [ 65.555112][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 65.559863][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 65.564985][ T1055] do_splice+0xff6/0x14c0 [ 65.569322][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 65.575393][ T1055] ? irqentry_exit+0x37/0x40 [ 65.579986][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 65.585266][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 65.590940][ T1055] ? __cfi_do_splice+0x10/0x10 [ 65.595745][ T1055] ? __se_sys_splice+0x31c/0x450 [ 65.600674][ T1055] __se_sys_splice+0x351/0x450 [ 65.605427][ T1055] ? __x64_sys_splice+0x100/0x100 [ 65.610440][ T1055] ? __kasan_check_write+0x14/0x20 [ 65.615624][ T1055] __x64_sys_splice+0xe5/0x100 [ 65.620390][ T1055] x64_sys_call+0x22e/0x9a0 [ 65.624908][ T1055] do_syscall_64+0x4c/0xa0 [ 65.629318][ T1055] ? clear_bhb_loop+0x30/0x80 [ 65.634025][ T1055] ? clear_bhb_loop+0x30/0x80 [ 65.638691][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.644570][ T1055] RIP: 0033:0x7f23f319e559 [ 65.648976][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.668565][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 65.677058][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 65.685041][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 65.693011][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 65.700970][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.709023][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 65.717001][ T1055] [ 65.720010][ T1055] ---[ end trace 0000000000000000 ]--- [ 65.725498][ T1055] ------------[ cut here ]------------ [ 65.730943][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 65.741225][ T1055] Modules linked in: [ 65.745109][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 65.753857][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.763924][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 65.769727][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 65.789424][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 65.795495][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 65.803483][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 65.811709][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 65.819672][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 65.827632][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 65.835712][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.844637][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.851219][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 65.859184][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.867141][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.875098][ T1055] Call Trace: [ 65.878363][ T1055] [ 65.881281][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 65.886909][ T1055] rb_advance_reader+0x2b/0x770 [ 65.891745][ T1055] ring_buffer_consume+0x1e7/0x370 [ 65.896953][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 65.902577][ T1055] ? print_trace_line+0x393/0x6b0 [ 65.907679][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 65.913306][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 65.919367][ T1055] ? __kasan_check_read+0x11/0x20 [ 65.924378][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 65.930433][ T1055] ? security_file_permission+0x94/0xb0 [ 65.936180][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 65.940943][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 65.946143][ T1055] do_splice+0xff6/0x14c0 [ 65.950473][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 65.956700][ T1055] ? irqentry_exit+0x37/0x40 [ 65.962156][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 65.967450][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 65.973101][ T1055] ? __cfi_do_splice+0x10/0x10 [ 65.977889][ T1055] ? __se_sys_splice+0x31c/0x450 [ 65.982836][ T1055] __se_sys_splice+0x351/0x450 [ 65.987601][ T1055] ? __x64_sys_splice+0x100/0x100 [ 65.992622][ T1055] ? __kasan_check_write+0x14/0x20 [ 65.997719][ T1055] __x64_sys_splice+0xe5/0x100 [ 66.002472][ T1055] x64_sys_call+0x22e/0x9a0 [ 66.006970][ T1055] do_syscall_64+0x4c/0xa0 [ 66.011377][ T1055] ? clear_bhb_loop+0x30/0x80 [ 66.016045][ T1055] ? clear_bhb_loop+0x30/0x80 [ 66.020806][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.026720][ T1055] RIP: 0033:0x7f23f319e559 [ 66.031128][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.050732][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 66.059144][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 66.067106][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 66.075065][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 66.083022][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.091071][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 66.099042][ T1055] [ 66.102049][ T1055] ---[ end trace 0000000000000000 ]--- [ 66.107735][ T1055] ------------[ cut here ]------------ [ 66.113336][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 66.124012][ T1055] Modules linked in: [ 66.127896][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 66.136638][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.146684][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 66.152580][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 66.172181][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 66.178244][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 66.186207][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 66.194165][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 66.202138][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 66.210095][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 66.218060][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.227004][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.233593][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 66.241560][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.249531][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.257494][ T1055] Call Trace: [ 66.260860][ T1055] [ 66.263775][ T1055] ? rb_get_reader_page+0xada/0xc60 [ 66.268972][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 66.274699][ T1055] ? __kasan_check_write+0x14/0x20 [ 66.279891][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 66.284598][ T1055] rb_buffer_peek+0x5f/0x930 [ 66.289284][ T1055] ring_buffer_peek+0x184/0x3b0 [ 66.294145][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 66.299519][ T1055] ? _find_next_bit+0x8a/0x130 [ 66.304276][ T1055] __find_next_entry+0x33c/0x6c0 [ 66.309216][ T1055] ? trace_find_next_entry+0x380/0x380 [ 66.314671][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 66.320304][ T1055] ? print_trace_line+0x393/0x6b0 [ 66.325335][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 66.330973][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 66.337048][ T1055] ? __kasan_check_read+0x11/0x20 [ 66.342067][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 66.348124][ T1055] ? security_file_permission+0x94/0xb0 [ 66.353670][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 66.358456][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 66.363839][ T1055] do_splice+0xff6/0x14c0 [ 66.368178][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 66.374247][ T1055] ? irqentry_exit+0x37/0x40 [ 66.379094][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 66.384411][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 66.390036][ T1055] ? __cfi_do_splice+0x10/0x10 [ 66.394796][ T1055] ? __se_sys_splice+0x31c/0x450 [ 66.399733][ T1055] __se_sys_splice+0x351/0x450 [ 66.404502][ T1055] ? __x64_sys_splice+0x100/0x100 [ 66.409531][ T1055] ? __kasan_check_write+0x14/0x20 [ 66.414648][ T1055] __x64_sys_splice+0xe5/0x100 [ 66.419421][ T1055] x64_sys_call+0x22e/0x9a0 [ 66.423929][ T1055] do_syscall_64+0x4c/0xa0 [ 66.428336][ T1055] ? clear_bhb_loop+0x30/0x80 [ 66.433003][ T1055] ? clear_bhb_loop+0x30/0x80 [ 66.437667][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.443545][ T1055] RIP: 0033:0x7f23f319e559 [ 66.447946][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.467537][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 66.475949][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 66.483916][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 66.491870][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 66.499823][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.507786][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 66.515747][ T1055] [ 66.518756][ T1055] ---[ end trace 0000000000000000 ]--- [ 66.912472][ T1055] ------------[ cut here ]------------ [ 66.917952][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 66.928180][ T1055] Modules linked in: [ 66.932059][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 66.940801][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.950845][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 66.956642][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 66.976233][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 66.982287][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 66.990259][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 66.998226][ T1055] RBP: ffffc9000592f6f0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 67.006183][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 67.014138][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 67.022093][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.031023][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.037604][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 67.045573][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.053538][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.061524][ T1055] Call Trace: [ 67.064802][ T1055] [ 67.067737][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 67.073380][ T1055] ? __kasan_check_write+0x14/0x20 [ 67.078497][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 67.083177][ T1055] rb_buffer_peek+0x5f/0x930 [ 67.087791][ T1055] ring_buffer_consume+0x1aa/0x370 [ 67.092919][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 67.098544][ T1055] ? print_trace_line+0x393/0x6b0 [ 67.103562][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 67.109183][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 67.115247][ T1055] ? __kasan_check_read+0x11/0x20 [ 67.120264][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 67.126322][ T1055] ? security_file_permission+0x94/0xb0 [ 67.131861][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 67.136607][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 67.141712][ T1055] do_splice+0xff6/0x14c0 [ 67.146037][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 67.152358][ T1055] ? irqentry_exit+0x37/0x40 [ 67.156942][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 67.162208][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 67.167825][ T1055] ? __cfi_do_splice+0x10/0x10 [ 67.172577][ T1055] ? __se_sys_splice+0x31c/0x450 [ 67.177510][ T1055] __se_sys_splice+0x351/0x450 [ 67.182288][ T1055] ? __x64_sys_splice+0x100/0x100 [ 67.187319][ T1055] ? __kasan_check_write+0x14/0x20 [ 67.192415][ T1055] __x64_sys_splice+0xe5/0x100 [ 67.197259][ T1055] x64_sys_call+0x22e/0x9a0 [ 67.201760][ T1055] do_syscall_64+0x4c/0xa0 [ 67.206162][ T1055] ? clear_bhb_loop+0x30/0x80 [ 67.210836][ T1055] ? clear_bhb_loop+0x30/0x80 [ 67.215497][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.221385][ T1055] RIP: 0033:0x7f23f319e559 [ 67.225781][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.245381][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 67.253806][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 67.261874][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.269993][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 67.277968][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.285966][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 67.293937][ T1055] [ 67.296965][ T1055] ---[ end trace 0000000000000000 ]--- [ 67.302443][ T1055] ------------[ cut here ]------------ [ 67.307890][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 67.318131][ T1055] Modules linked in: [ 67.322016][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 67.330769][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.340809][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 67.346717][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 67.366311][ T1055] RSP: 0018:ffffc9000592f580 EFLAGS: 00010006 [ 67.372459][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 67.380553][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 67.388522][ T1055] RBP: ffffc9000592f6f8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 67.396493][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 67.404814][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 67.412775][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.421690][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.428286][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 67.436273][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.444228][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.452187][ T1055] Call Trace: [ 67.455455][ T1055] [ 67.458375][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 67.464172][ T1055] rb_advance_reader+0x2b/0x770 [ 67.469017][ T1055] ring_buffer_consume+0x1e7/0x370 [ 67.474114][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 67.479738][ T1055] ? print_trace_line+0x393/0x6b0 [ 67.484749][ T1055] tracing_splice_read_pipe+0x83b/0x1080 [ 67.490390][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 67.496477][ T1055] ? __kasan_check_read+0x11/0x20 [ 67.501509][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 67.507591][ T1055] ? security_file_permission+0x94/0xb0 [ 67.513142][ T1055] ? rw_verify_area+0xa7/0x1c0 [ 67.517897][ T1055] splice_file_to_pipe+0x1e0/0x340 [ 67.523040][ T1055] do_splice+0xff6/0x14c0 [ 67.527362][ T1055] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 67.533453][ T1055] ? irqentry_exit+0x37/0x40 [ 67.538059][ T1055] ? sysvec_reschedule_ipi+0x78/0x80 [ 67.543349][ T1055] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 67.549004][ T1055] ? __cfi_do_splice+0x10/0x10 [ 67.553761][ T1055] ? __se_sys_splice+0x31c/0x450 [ 67.558696][ T1055] __se_sys_splice+0x351/0x450 [ 67.563457][ T1055] ? __x64_sys_splice+0x100/0x100 [ 67.568501][ T1055] ? __kasan_check_write+0x14/0x20 [ 67.573616][ T1055] __x64_sys_splice+0xe5/0x100 [ 67.578378][ T1055] x64_sys_call+0x22e/0x9a0 [ 67.582872][ T1055] do_syscall_64+0x4c/0xa0 [ 67.587278][ T1055] ? clear_bhb_loop+0x30/0x80 [ 67.591940][ T1055] ? clear_bhb_loop+0x30/0x80 [ 67.596618][ T1055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.602506][ T1055] RIP: 0033:0x7f23f319e559 [ 67.606906][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.626584][ T1055] RSP: 002b:00007f23f3f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 67.634990][ T1055] RAX: ffffffffffffffda RBX: 00007f23f3426180 RCX: 00007f23f319e559 [ 67.642952][ T1055] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.650920][ T1055] RBP: 00007f23f32358b0 R08: 0000002000000008 R09: 0000000000000000 [ 67.658884][ T1055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.666842][ T1055] R13: 00007f23f3426218 R14: 00007f23f3426180 R15: 00007ffcb559d388 [ 67.674896][ T1055] [ 67.677904][ T1055] ---[ end trace 0000000000000000 ]--- [ 67.912460][ T1055] ------------[ cut here ]------------ [ 67.917952][ T1055] WARNING: CPU: 0 PID: 1055 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 67.928194][ T1055] Modules linked in: [ 67.932095][ T1055] CPU: 0 PID: 1055 Comm: syz.0.266 Tainted: G B W syzkaller #0 [ 67.940858][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.950993][ T1055] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 67.956809][ T1055] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 8f 3a 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 1a 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 67.976482][ T1055] RSP: 0018:ffffc9000592f460 EFLAGS: 00010002 [ 67.982543][ T1055] RAX: 1ffff1102002ed01 RBX: ffff888100052600 RCX: ffffffff8173ccd6 [ 67.990505][ T1055] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 67.998461][ T1055] RBP: ffffc9000592f5d0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 68.006429][ T1055] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 68.014390][ T1055] R13: 1ffff11020073f86 R14: 1ffff11020073f83 R15: 0000000000000900 [ 68.022351][ T1055] FS: 00007f23f3f926c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.031267][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.037836][ T1055] CR2: 00007f09fe1f22f8 CR3: 0000000135265000 CR4: 00000000003506b0 [ 68.045838][ T1055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.054056][ T1055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.062126][ T1055] Call Trace: [ 68.065498][ T1055] [ 68.068424][ T1055] ? ring_buffer_read_page+0x1260/0x1260 [ 68.074055][ T1055] ? __schedule+0xcbb/0x1700 [ 68.078654][ T1055] ? __kasan_check_write+0x14/0x20 [ 68.083752][ T1055] ? _raw_spin_lock+0x94/0xf0 [ 68.088419][ T1055] rb_buffer_peek+0x5f/0x930 [ 68.093001][ T1055] ring_buffer_peek+0x184/0x3b0 [ 68.097925][ T1055] ? __kasan_check_read+0x11/0x20 [ 68.102935][ T1055] ? __cfi_ring_buffer_peek+0x10/0x10 [ 68.108305][ T1055] ? _find_next_bit+0x8a/0x130 [ 68.113052][ T1055] __find_next_entry+0x33c/0x6c0 [ 68.117975][ T1055] ? trace_find_next_entry+0x380/0x380 [ 68.123424][ T1055] ? __cfi_ring_buffer_consume+0x10/0x10 [ 68.129137][ T1055] ? print_trace_line+0x393/0x6b0 [ 68.134206][ T1055] tracing_splice_read_pipe+0x84c/0x1080 [ 68.139856][ T1055] ? __cfi_tracing_splice_read_pipe+0x10/0x10 [ 68.146025][ T1055] ? __kasan_check_read+0x11/0x20 [ 68.151225][ T1055] ? __cfi_tracing_spd_release_pipe+0x10/0x10 [ 68.157304][ T1055] ? security_file_permission+0x94/0xb0