last executing test programs: 1m2.404190011s ago: executing program 2 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000001240)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000014c0)={0x1, 0x0, [{0x9, 0x3, 0x0, 0x0, @irqchip={0xfff, 0x2000}}]}) 1m2.294188525s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_b}, 0x0, @default, 0xbb2c, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) 1m2.267853049s ago: executing program 2 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="33e8191e0a896801403b", 0xa}], 0x1) 1m2.220610595s ago: executing program 2 (id=91): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@acl}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") mount$incfs(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x80, 0x0) 1m2.074766305s ago: executing program 2 (id=99): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0x0) 1m1.964379099s ago: executing program 2 (id=104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) 1m1.932734193s ago: executing program 32 (id=104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) 2.072477162s ago: executing program 5 (id=1633): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000780)=@chain={'key_or_keyring:', r1}) keyctl$link(0x8, r0, r2) 2.004339702s ago: executing program 5 (id=1634): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.003280612s ago: executing program 5 (id=1635): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000000, 0xf3, 0x5, 0xfffff7e2, 0x7, 0xffffff5d, 0x3ff}]}) 1.823905826s ago: executing program 5 (id=1643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000011200), 0x60202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000011240)='clear_refs\x00') writev(r2, &(0x7f0000011280)=[{&(0x7f00000112c0)='4', 0x1}], 0x1) 1.650606279s ago: executing program 5 (id=1651): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file3\x00', 0x4010, &(0x7f0000000140), 0x2, 0xbd8, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 1.560242911s ago: executing program 4 (id=1653): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8ad41, 0x11b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) 1.560074881s ago: executing program 0 (id=1654): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x400042cc, 0x1, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x5}}], 0x1, 0x0, 0x0) 1.430951788s ago: executing program 0 (id=1656): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x10000) iopl(0x3) 1.390950304s ago: executing program 3 (id=1657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000009c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000ac0)=0x40) 1.332380632s ago: executing program 3 (id=1658): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000180)='7', 0x1) socket(0x2, 0x80805, 0x106) 996.585357ms ago: executing program 5 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 851.950056ms ago: executing program 3 (id=1662): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x68ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x86a1, 0x5}, {0x1, 0x800}]}, 0x14, 0x0) 777.487646ms ago: executing program 4 (id=1664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000001780)=0xfffffffe, 0x4) bind$inet6(r0, &(0x7f00000017c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000001800)=0xc, 0x4) listen(r0, 0xfffffffd) 723.479243ms ago: executing program 4 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') read$char_usb(r0, 0x0, 0x0) 686.050578ms ago: executing program 4 (id=1667): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x400042cc, 0x1, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x5}}], 0x1, 0x0, 0x0) 652.836883ms ago: executing program 3 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000700)={0x20080522}, &(0x7f0000000740)) listxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=""/146, 0x92) 591.659971ms ago: executing program 3 (id=1670): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0x13}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x8, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 517.639301ms ago: executing program 3 (id=1671): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)) 505.286983ms ago: executing program 0 (id=1672): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 474.994656ms ago: executing program 1 (id=1673): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000600)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000780)={r1, 0x1, 0x6, @random="1acbf47afb69"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000014c0)={r1}, 0x10) 442.754431ms ago: executing program 0 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000680)={r2, 0x0, 0x0}, 0x10) 406.260976ms ago: executing program 4 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb, 0x29, 0x1, {0x9}}, 0xb) 403.481246ms ago: executing program 0 (id=1676): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 16384) [ 44.005874][ T763] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.021193][ T763] F2FS-fs (loop4): invalid crc value [ 44.063318][ T763] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.152792][ T763] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.159898][ T763] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.255798][ T763] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 44.269071][ T793] loop1: detected capacity change from 0 to 40427 [ 44.292389][ T793] F2FS-fs (loop1): invalid crc value [ 44.312635][ T793] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.392559][ T793] F2FS-fs (loop1): Start checkpoint disabled! [ 44.404590][ T793] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 44.419107][ T793] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.504708][ T39] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.515130][ T39] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.540033][ T39] usb 6-1: USB disconnect, device number 2 [ 44.553848][ T825] loop5: detected capacity change from 0 to 1024 [ 44.576064][ T43] kworker/u4:2: attempt to access beyond end of device [ 44.576064][ T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 44.610421][ T825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.670866][ T825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.686243][ T825] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.750992][ T575] EXT4-fs (loop5): unmounting filesystem. [ 44.789076][ T844] kvm [842]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008f) = 0x3 [ 44.794274][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.909233][ T871] loop3: detected capacity change from 0 to 1024 [ 44.925810][ T871] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 44.936180][ T871] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 44.950128][ T871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.965304][ T876] loop5: detected capacity change from 0 to 256 [ 44.992581][ T289] EXT4-fs (loop3): unmounting filesystem. [ 45.030799][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.131864][ T890] SELinux: failed to load policy [ 45.226934][ T914] loop1: detected capacity change from 0 to 2048 [ 45.236274][ T919] netlink: 'syz.4.261': attribute type 2 has an invalid length. [ 45.259126][ T921] loop3: detected capacity change from 0 to 1024 [ 45.286013][ T930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.264'. [ 45.296707][ T914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.305835][ T914] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.341726][ T921] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.377172][ T288] EXT4-fs (loop1): unmounting filesystem. [ 45.383573][ T289] EXT4-fs (loop3): unmounting filesystem. [ 45.431208][ T946] tipc: Started in network mode [ 45.443003][ T946] tipc: Node identity ac14140f, cluster identity 4711 [ 45.451132][ T946] tipc: New replicast peer: 255.255.255.255 [ 45.458818][ T946] tipc: Enabled bearer , priority 10 [ 45.623979][ T948] loop0: detected capacity change from 0 to 40427 [ 45.634236][ T948] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 45.643463][ T948] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 45.669658][ T948] F2FS-fs (loop0): invalid crc value [ 45.699831][ T948] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 45.741682][ T948] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 45.748946][ T948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.770269][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 45.770284][ T28] audit: type=1400 audit(1792731387.611:255): avc: denied { bind } for pid=997 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.798789][ T28] audit: type=1400 audit(1792731387.631:256): avc: denied { map } for pid=947 comm="syz.0.271" path="/63/file1/memory.events.local" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.822663][ T28] audit: type=1400 audit(1792731387.641:257): avc: denied { name_bind } for pid=997 comm="syz.3.294" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 45.822797][ T290] syz-executor: attempt to access beyond end of device [ 45.822797][ T290] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.857503][ T28] audit: type=1400 audit(1792731387.641:258): avc: denied { node_bind } for pid=997 comm="syz.3.294" saddr=fe80::3d src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.969320][ T1011] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 47.603397][ T382] tipc: Node number set to 2886997007 [ 47.612731][ T28] audit: type=1326 audit(1792731389.451:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 48.593781][ T28] audit: type=1326 audit(1792731389.451:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 48.618494][ T28] audit: type=1326 audit(1792731389.451:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 49.602865][ T28] audit: type=1326 audit(1792731389.451:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 49.634464][ T28] audit: type=1326 audit(1792731389.451:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 49.659143][ T28] audit: type=1326 audit(1792731389.451:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=933 comm="syz.5.266" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7fc00000 [ 49.752732][ T1038] IPv6: addrconf: prefix option has invalid lifetime [ 49.768024][ T1042] loop3: detected capacity change from 0 to 2048 [ 49.808404][ T1042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.817041][ T1042] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.852590][ T289] EXT4-fs (loop3): unmounting filesystem. [ 49.874464][ T1063] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 49.973214][ T1072] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 50.099798][ T1086] loop5: detected capacity change from 0 to 256 [ 50.146695][ T1086] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 50.172015][ T1060] loop0: detected capacity change from 0 to 40427 [ 50.190848][ T1060] F2FS-fs (loop0): invalid crc value [ 50.226378][ T1060] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.321201][ T1060] F2FS-fs (loop0): Start checkpoint disabled! [ 50.337539][ T1060] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 50.371993][ T1060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 50.771274][ T388] kworker/u4:4: attempt to access beyond end of device [ 50.771274][ T388] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 50.835549][ T388] kworker/u4:4: attempt to access beyond end of device [ 50.835549][ T388] loop0: rw=1, sector=77832, nr_sectors = 4088 limit=40427 [ 50.861308][ T388] kworker/u4:4: attempt to access beyond end of device [ 50.861308][ T388] loop0: rw=1, sector=49152, nr_sectors = 8 limit=40427 [ 50.891434][ T1149] loop5: detected capacity change from 0 to 8192 [ 50.922775][ T1149] syz.5.363: attempt to access beyond end of device [ 50.922775][ T1149] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 50.947252][ T388] kworker/u4:4: attempt to access beyond end of device [ 50.947252][ T388] loop0: rw=1, sector=49160, nr_sectors = 4088 limit=40427 [ 50.962684][ T1149] Buffer I/O error on dev loop5, logical block 57847, async page read [ 50.986816][ T1162] netlink: 'syz.4.369': attribute type 12 has an invalid length. [ 50.995108][ T388] kworker/u4:4: attempt to access beyond end of device [ 50.995108][ T388] loop0: rw=1, sector=57344, nr_sectors = 8 limit=40427 [ 50.995980][ T1148] syz.5.363: attempt to access beyond end of device [ 50.995980][ T1148] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.016781][ T1162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 51.049350][ T388] kworker/u4:4: attempt to access beyond end of device [ 51.049350][ T388] loop0: rw=1, sector=57352, nr_sectors = 4064 limit=40427 [ 51.062703][ T1148] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.079267][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 51.079282][ T28] audit: type=1400 audit(1792731392.921:333): avc: denied { nlmsg_read } for pid=1163 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.092275][ T1149] syz.5.363: attempt to access beyond end of device [ 51.092275][ T1149] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.106069][ T1164] netlink: 272 bytes leftover after parsing attributes in process `syz.4.370'. [ 51.130431][ T388] kworker/u4:4: attempt to access beyond end of device [ 51.130431][ T388] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 51.158166][ T28] audit: type=1400 audit(1792731393.001:334): avc: denied { read } for pid=1163 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.175882][ T1149] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.212781][ T1148] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.232346][ T1148] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.240617][ T1149] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.259257][ T1168] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.270407][ T1171] netem: change failed [ 51.282452][ T1149] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.307172][ T1168] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.325383][ T1149] Buffer I/O error on dev loop5, logical block 57847, async page read [ 51.345475][ T28] audit: type=1400 audit(1792731393.191:335): avc: denied { lock } for pid=1172 comm="syz.4.373" path="socket:[19166]" dev="sockfs" ino=19166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 51.653360][ T1198] loop4: detected capacity change from 0 to 128 [ 51.663589][ T28] audit: type=1400 audit(1792731393.511:336): avc: denied { setopt } for pid=1199 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.719608][ T28] audit: type=1400 audit(1792731393.531:337): avc: denied { read } for pid=1199 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.892306][ T1229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.400'. [ 51.927145][ T1241] mmap: syz.4.404 (1241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.064047][ T28] audit: type=1400 audit(1792731393.911:338): avc: denied { read write } for pid=1270 comm="syz.4.418" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.138567][ T28] audit: type=1400 audit(1792731393.911:339): avc: denied { open } for pid=1270 comm="syz.4.418" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.173307][ T1283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 52.213623][ T28] audit: type=1400 audit(1792731393.981:340): avc: denied { ioctl } for pid=1270 comm="syz.4.418" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.243772][ T1289] tipc: Started in network mode [ 52.248697][ T1289] tipc: Node identity ac14142f, cluster identity 4711 [ 52.272521][ T1289] tipc: New replicast peer: 127.0.0.1 [ 52.281364][ T1289] tipc: Enabled bearer , priority 10 [ 52.307166][ T315] smpboot: CPU 1 is now offline [ 52.352685][ T1297] tipc: New replicast peer: 255.255.255.255 [ 52.567581][ T28] audit: type=1400 audit(1792731394.411:341): avc: denied { listen } for pid=1316 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.742180][ T315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.757565][ T28] audit: type=1400 audit(1792731394.601:342): avc: denied { read write } for pid=1332 comm="syz.1.446" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.782267][ T1331] device macsec0 entered promiscuous mode [ 52.831137][ T1339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.448'. [ 52.871392][ T1344] loop5: detected capacity change from 0 to 512 [ 52.896196][ T1344] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.913224][ T1344] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.935390][ T1352] loop1: detected capacity change from 0 to 512 [ 52.946299][ T1344] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.451: bad orphan inode 131083 [ 52.962163][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 52.973252][ T315] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 52.984768][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.996059][ T1344] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.005756][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.019082][ T1352] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.038227][ T1344] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 53.045772][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.065240][ T1352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 53.080454][ T1341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input4 [ 53.102247][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 53.114118][ T575] EXT4-fs (loop5): unmounting filesystem. [ 53.142897][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.164960][ T1352] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 53.194037][ T315] usb 5-1: config 0 descriptor?? [ 53.225631][ T1352] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.225631][ T1352] [ 53.264371][ T1352] EXT4-fs (loop1): Total free blocks count 0 [ 53.290590][ T1352] EXT4-fs (loop1): Free/Dirty block details [ 53.312167][ T1352] EXT4-fs (loop1): free_blocks=65280 [ 53.340381][ T1352] EXT4-fs (loop1): dirty_blocks=33 [ 53.345867][ T1352] EXT4-fs (loop1): Block reservation details [ 53.365859][ T1352] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 53.392165][ T6] tipc: Node number set to 2886997039 [ 53.437580][ T288] EXT4-fs (loop1): unmounting filesystem. [ 53.495155][ T1382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 53.524446][ T1382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 53.596118][ T1367] loop3: detected capacity change from 0 to 40427 [ 53.617848][ T315] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 53.641237][ T315] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 53.679008][ T315] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 53.719355][ T315] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 53.732162][ T1397] netlink: 32 bytes leftover after parsing attributes in process `syz.5.473'. [ 53.751217][ T315] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 53.771895][ T1397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 53.782975][ T315] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 53.927224][ T1404] netlink: 'syz.3.476': attribute type 7 has an invalid length. [ 53.956259][ T1404] netlink: 'syz.3.476': attribute type 5 has an invalid length. [ 53.982510][ T1404] netlink: 17 bytes leftover after parsing attributes in process `syz.3.476'. [ 54.034493][ T315] logitech 0003:046D:C29C.0001: no inputs found [ 54.076275][ T315] usb 5-1: USB disconnect, device number 2 [ 54.209651][ T1413] fido_id[1413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 54.235922][ T1424] tipc: Started in network mode [ 54.262209][ T1424] tipc: Node identity 1001001, cluster identity 4711 [ 54.285185][ T1424] tipc: Node number set to 16781313 [ 54.379065][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.435341][ T1444] loop1: detected capacity change from 0 to 512 [ 54.461379][ T1444] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.496846][ T1444] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 54.515359][ T1444] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.549830][ T1444] EXT4-fs (loop1): mount failed [ 54.913094][ T1473] SELinux: failed to load policy [ 55.000482][ T1492] tipc: Started in network mode [ 55.012680][ T1492] tipc: Node identity ac14142f, cluster identity 4711 [ 55.029256][ T1492] tipc: New replicast peer: 127.0.0.1 [ 55.047524][ T1492] tipc: Enabled bearer , priority 10 [ 55.063657][ T1495] tipc: New replicast peer: 255.255.255.255 [ 55.160836][ T1503] xt_hashlimit: size too large, truncated to 1048576 [ 55.719310][ T1516] capability: warning: `syz.0.531' uses deprecated v2 capabilities in a way that may be insecure [ 55.769694][ T1521] loop3: detected capacity change from 0 to 512 [ 55.823478][ T1521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.854090][ T1521] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.957722][ T1519] SELinux: failed to load policy [ 55.971512][ T1521] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.005471][ T1533] loop4: detected capacity change from 0 to 1024 [ 56.034873][ T1521] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 56.062941][ T1533] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.092335][ T1521] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.092335][ T1521] [ 56.132769][ T1521] EXT4-fs (loop3): Total free blocks count 0 [ 56.145924][ T1533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.162192][ T315] tipc: Node number set to 2886997039 [ 56.169026][ T1521] EXT4-fs (loop3): Free/Dirty block details [ 56.192332][ T1521] EXT4-fs (loop3): free_blocks=65280 [ 56.213336][ T1533] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.228017][ T1521] EXT4-fs (loop3): dirty_blocks=33 [ 56.242384][ T1521] EXT4-fs (loop3): Block reservation details [ 56.277136][ T1521] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 56.339273][ T289] EXT4-fs (loop3): unmounting filesystem. [ 56.346236][ T292] EXT4-fs (loop4): unmounting filesystem. [ 56.676242][ T1605] loop1: detected capacity change from 0 to 1024 [ 56.748394][ T1609] netlink: 'syz.3.561': attribute type 2 has an invalid length. [ 56.756653][ T1605] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 56.803064][ T1605] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 56.810652][ T1605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.906811][ T288] EXT4-fs (loop1): unmounting filesystem. [ 56.976758][ T1634] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 57.255634][ T1673] loop0: detected capacity change from 0 to 256 [ 57.310000][ T1673] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 57.443574][ T1687] loop1: detected capacity change from 0 to 128 [ 57.472949][ T1687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.496712][ T1687] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.564054][ T288] EXT4-fs (loop1): unmounting filesystem. [ 57.798512][ T1715] __nla_validate_parse: 1 callbacks suppressed [ 57.798526][ T1715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.606'. [ 57.857083][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 58.138799][ T1717] loop1: detected capacity change from 0 to 40427 [ 58.169978][ T1717] F2FS-fs (loop1): invalid crc value [ 58.197125][ T1717] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.215471][ T1743] loop3: detected capacity change from 0 to 512 [ 58.231240][ T1743] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.267364][ T1743] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 58.278075][ T1748] loop0: detected capacity change from 0 to 256 [ 58.287206][ T1717] F2FS-fs (loop1): Start checkpoint disabled! [ 58.296125][ T1743] __quota_error: 22 callbacks suppressed [ 58.296137][ T1743] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 58.321407][ T1717] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 58.342065][ T1717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 58.350333][ T1743] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.380360][ T1751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.619'. [ 58.399383][ T1743] EXT4-fs (loop3): mount failed [ 58.418435][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 58.613433][ T28] audit: type=1326 audit(1792731912.461:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 58.650557][ T388] bio_check_eod: 7535 callbacks suppressed [ 58.650570][ T388] kworker/u4:4: attempt to access beyond end of device [ 58.650570][ T388] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 58.706447][ T28] audit: type=1326 audit(1792731912.491:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 58.747297][ T388] kworker/u4:4: attempt to access beyond end of device [ 58.747297][ T388] loop1: rw=1, sector=77832, nr_sectors = 2048 limit=40427 [ 58.813892][ T28] audit: type=1326 audit(1792731912.491:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 58.838935][ T388] kworker/u4:4: attempt to access beyond end of device [ 58.838935][ T388] loop1: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 58.887865][ T388] kworker/u4:4: attempt to access beyond end of device [ 58.887865][ T388] loop1: rw=1, sector=49152, nr_sectors = 8 limit=40427 [ 58.926239][ T28] audit: type=1326 audit(1792731912.491:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 58.988646][ T388] kworker/u4:4: attempt to access beyond end of device [ 58.988646][ T388] loop1: rw=1, sector=49160, nr_sectors = 4088 limit=40427 [ 59.056915][ T28] audit: type=1326 audit(1792731912.491:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 59.084422][ T388] kworker/u4:4: attempt to access beyond end of device [ 59.084422][ T388] loop1: rw=1, sector=57344, nr_sectors = 8 limit=40427 [ 59.161915][ T388] kworker/u4:4: attempt to access beyond end of device [ 59.161915][ T388] loop1: rw=1, sector=57352, nr_sectors = 4064 limit=40427 [ 59.204014][ T28] audit: type=1326 audit(1792731912.491:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 59.258199][ T1780] loop3: detected capacity change from 0 to 512 [ 59.279722][ T388] kworker/u4:4: attempt to access beyond end of device [ 59.279722][ T388] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 59.316539][ T1780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.334300][ T28] audit: type=1326 audit(1792731912.491:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 59.379546][ T1780] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.642156][ T28] audit: type=1326 audit(1792731912.491:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 63.642955][ T289] EXT4-fs (loop3): unmounting filesystem. [ 63.732140][ T28] audit: type=1326 audit(1792731912.491:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 63.863492][ T28] audit: type=1326 audit(1792731912.491:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 63.982416][ T28] audit: type=1326 audit(1792731912.491:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 64.100106][ T1817] loop4: detected capacity change from 0 to 128 [ 64.113486][ T28] audit: type=1326 audit(1792731912.491:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 64.265386][ T28] audit: type=1326 audit(1792731912.491:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 64.402390][ T28] audit: type=1326 audit(1792731912.491:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1761 comm="syz.4.624" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb9c39f559 code=0x7ffc0000 [ 64.465320][ T1843] loop4: detected capacity change from 0 to 256 [ 64.515516][ T1843] netlink: 112 bytes leftover after parsing attributes in process `syz.4.658'. [ 64.539617][ T28] audit: type=1400 audit(1792731917.901:378): avc: denied { getopt } for pid=1811 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.624460][ T28] audit: type=1400 audit(1792731918.001:379): avc: denied { ioctl } for pid=1819 comm="syz.1.649" path="socket:[22530]" dev="sockfs" ino=22530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.732244][ T28] audit: type=1400 audit(1792731918.201:380): avc: denied { write } for pid=1832 comm="syz.1.655" path="socket:[22575]" dev="sockfs" ino=22575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.140627][ T1879] input: syz0 as /devices/virtual/input/input5 [ 65.291291][ T28] audit: type=1400 audit(1792731919.131:381): avc: denied { mount } for pid=1892 comm="syz.0.682" name="/" dev="configfs" ino=14314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.340942][ T1894] loop0: detected capacity change from 0 to 1024 [ 65.411175][ T1894] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 65.468605][ T1894] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 65.625859][ T1919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 65.663803][ T1923] loop1: detected capacity change from 0 to 512 [ 65.693845][ T1923] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 66.264050][ T1960] loop0: detected capacity change from 0 to 1024 [ 66.311097][ T1960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.337136][ T1965] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.715'. [ 66.366287][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 66.376920][ T1960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.572979][ T1983] loop3: detected capacity change from 0 to 512 [ 66.602452][ T1983] EXT4-fs: Ignoring removed nobh option [ 66.613636][ T290] EXT4-fs (loop0): unmounting filesystem. [ 66.638058][ T1983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.682215][ T1983] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.736534][ T1983] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.722: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.776372][ T1997] loop1: detected capacity change from 0 to 256 [ 66.823955][ T1997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 66.847643][ T1983] EXT4-fs (loop3): Remounting filesystem read-only [ 66.895431][ T289] EXT4-fs (loop3): unmounting filesystem. [ 67.057868][ T2014] loop1: detected capacity change from 0 to 1024 [ 67.092371][ T2014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.145398][ T2014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.257835][ T288] EXT4-fs (loop1): unmounting filesystem. [ 67.526851][ T2033] loop0: detected capacity change from 0 to 512 [ 67.560915][ T2033] EXT4-fs: Ignoring removed nobh option [ 67.599449][ T2033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.638699][ T2033] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.698122][ T2033] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.742: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.780175][ T2033] EXT4-fs (loop0): Remounting filesystem read-only [ 67.842760][ T290] EXT4-fs (loop0): unmounting filesystem. [ 67.873279][ T2039] loop4: detected capacity change from 0 to 256 [ 67.926636][ T2039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 68.264674][ T2056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.348387][ T2056] EXT4-fs (loop1): shut down requested (1) [ 68.376697][ T2065] syz.3.756 (2065) used greatest stack depth: 19816 bytes left [ 68.426375][ T288] EXT4-fs (loop1): unmounting filesystem. [ 68.567607][ T2086] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.626669][ T2086] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.735814][ T43] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.799875][ T43] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.852140][ T43] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.852140][ T43] [ 68.915909][ T575] EXT4-fs (loop5): unmounting filesystem. [ 68.961017][ T2122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 69.165874][ T2141] set_capacity_and_notify: 3 callbacks suppressed [ 69.165888][ T2141] loop1: detected capacity change from 0 to 128 [ 69.294796][ T2141] syz.1.797: attempt to access beyond end of device [ 69.294796][ T2141] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 69.400107][ T2140] syz.1.797: attempt to access beyond end of device [ 69.400107][ T2140] loop1: rw=2049, sector=146, nr_sectors = 64 limit=128 [ 69.415707][ T2159] loop5: detected capacity change from 0 to 256 [ 69.424746][ T2161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 69.447725][ T2161] device erspan0 entered promiscuous mode [ 69.470671][ T2159] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 69.617564][ T2165] SELinux: failed to load policy [ 69.668293][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 69.668304][ T28] audit: type=1400 audit(1792731923.511:402): avc: denied { search } for pid=2172 comm="syz.3.803" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.697118][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 69.755893][ T2177] netlink: 1056 bytes leftover after parsing attributes in process `syz.3.805'. [ 69.810153][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 70.131390][ T28] audit: type=1400 audit(1792731923.971:403): avc: denied { connect } for pid=2210 comm="syz.4.820" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.323559][ T2217] syz.4.822 (2217) used greatest stack depth: 18760 bytes left [ 70.345936][ T28] audit: type=1400 audit(1792731924.191:404): avc: denied { bind } for pid=2218 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.389399][ T2221] loop4: detected capacity change from 0 to 1024 [ 70.403196][ T2221] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 70.413196][ T2221] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 70.420804][ T2221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.450336][ T292] EXT4-fs (loop4): unmounting filesystem. [ 70.522166][ T204] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.555774][ T2233] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 70.622333][ T2234] ------------[ cut here ]------------ [ 70.627837][ T2234] memcpy: detected field-spanning write (size 128) of single field "&entry->caller" at kernel/trace/trace.c:3090 (size 64) [ 70.640699][ T2234] WARNING: CPU: 0 PID: 2234 at kernel/trace/trace.c:3090 __ftrace_trace_stack+0x3e0/0x550 [ 70.650653][ T2234] Modules linked in: [ 70.654580][ T2234] CPU: 0 PID: 2234 Comm: syz.5.830 Not tainted syzkaller #0 [ 70.661856][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.672004][ T2234] RIP: 0010:__ftrace_trace_stack+0x3e0/0x550 [ 70.678026][ T2234] Code: fe ff ff e8 f2 da fc ff c6 05 d4 17 1b 06 01 b9 40 00 00 00 48 c7 c7 60 eb aa 85 48 89 de 48 c7 c2 00 01 ab 85 e8 80 5d cd ff <0f> 0b e9 25 fe ff ff e8 c4 da fc ff 48 8b 7d c8 4c 89 f6 e8 18 83 [ 70.697667][ T2234] RSP: 0000:ffffc9000b44f7b8 EFLAGS: 00010246 [ 70.703777][ T2234] RAX: ff60d65a7d784800 RBX: 0000000000000080 RCX: ffff8881355b6540 [ 70.711749][ T2234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 70.719740][ T2234] RBP: ffffc9000b44f800 R08: ffffc9000b44f3a7 R09: 1ffff92001689e74 [ 70.727723][ T2234] R10: dffffc0000000000 R11: fffff52001689e75 R12: ffff88810006b06c [ 70.735710][ T2234] R13: ffff8881355b6b30 R14: ffff88810006b04c R15: ffff88810006b05c [ 70.743708][ T2234] FS: 00005555594cc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 70.752660][ T2234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.759236][ T2234] CR2: 00007ffdb6080a38 CR3: 00000001144d4000 CR4: 00000000003526b0 [ 70.767221][ T2234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.775215][ T2234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.783208][ T2234] Call Trace: [ 70.786499][ T2234] [ 70.789439][ T2234] __trace_stack+0x5b/0xb0 [ 70.793877][ T2234] stacktrace_trigger+0xf0/0x140 [ 70.798831][ T2234] ? __cfi_stacktrace_trigger+0x10/0x10 [ 70.804393][ T2234] ? ring_buffer_event_data+0x9d/0x100 [ 70.809854][ T2234] event_triggers_post_call+0x113/0x1a0 [ 70.815407][ T2234] trace_event_buffer_commit+0x24b/0x8a0 [ 70.821044][ T2234] trace_event_raw_event_kvm_hv_stimer_cleanup+0x154/0x230 [ 70.828267][ T2234] ? __cfi_trace_event_raw_event_kvm_hv_stimer_cleanup+0x10/0x10 [ 70.836007][ T2234] ? vunmap+0x60/0x60 [ 70.839985][ T2234] ? __kasan_slab_free+0x11/0x20 [ 70.844941][ T2234] stimer_cleanup+0x298/0x2f0 [ 70.849630][ T2234] kvm_hv_vcpu_uninit+0x53/0xb0 [ 70.854510][ T2234] kvm_arch_vcpu_destroy+0xb6/0x220 [ 70.859708][ T2234] kvm_destroy_vcpus+0xdd/0x250 [ 70.864603][ T2234] ? __cfi_kvm_destroy_vcpus+0x10/0x10 [ 70.870069][ T2234] ? kvm_ioapic_destroy+0xaa/0xc0 [ 70.875110][ T2234] kvm_arch_destroy_vm+0x310/0x3f0 [ 70.880307][ T2234] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 70.885967][ T2234] ? __kasan_check_write+0x14/0x20 [ 70.891079][ T2234] kvm_put_kvm+0xa6a/0x13f0 [ 70.895608][ T2234] kvm_vm_release+0x46/0x50 [ 70.900128][ T2234] ? __cfi_kvm_vm_release+0x10/0x10 [ 70.905341][ T2234] __fput+0x1fd/0x8f0 [ 70.909330][ T2234] ____fput+0x15/0x20 [ 70.913325][ T2234] task_work_run+0x1e1/0x250 [ 70.917928][ T2234] ? __cfi_task_work_run+0x10/0x10 [ 70.923050][ T2234] ? __cfi___close_range+0x10/0x10 [ 70.928172][ T2234] exit_to_user_mode_loop+0x9b/0xb0 [ 70.933387][ T2234] exit_to_user_mode_prepare+0x87/0xd0 [ 70.938853][ T2234] syscall_exit_to_user_mode+0x1a/0x30 [ 70.944477][ T2234] do_syscall_64+0x58/0xa0 [ 70.948894][ T2234] ? clear_bhb_loop+0x30/0x80 [ 70.953587][ T2234] ? clear_bhb_loop+0x30/0x80 [ 70.958263][ T2234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.964168][ T2234] RIP: 0033:0x7f2605b9f559 [ 70.968593][ T2234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.988222][ T2234] RSP: 002b:00007ffd51a8dce8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 70.996652][ T2234] RAX: 0000000000000000 RBX: 00007ffd51a8ddd0 RCX: 00007f2605b9f559 [ 71.004632][ T2234] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 71.012626][ T2234] RBP: 00000000000113af R08: 0000000000000001 R09: 0000000000000000 [ 71.020605][ T2234] R10: 0000001b2ec20000 R11: 0000000000000246 R12: 00007ffd51a8de10 [ 71.028628][ T2234] R13: 00007f2605e25fac R14: 00000000000113e6 R15: 00007f2605e25fa0 [ 71.036619][ T2234] [ 71.039633][ T2234] ---[ end trace 0000000000000000 ]--- [ 71.054759][ T28] audit: type=1400 audit(1792731924.901:405): avc: denied { write } for pid=2237 comm="syz.4.831" name="ptype" dev="proc" ino=4026532677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.077494][ T204] usb 4-1: Using ep0 maxpacket: 8 [ 71.089835][ T204] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 71.119257][ T204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.142368][ T204] usb 4-1: Product: syz [ 71.146551][ T204] usb 4-1: Manufacturer: syz [ 71.161291][ T204] usb 4-1: SerialNumber: syz [ 71.177459][ T204] usb 4-1: config 0 descriptor?? [ 71.395659][ T204] usb 4-1: USB disconnect, device number 2 [ 71.630752][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 71.653395][ T2279] device erspan0 entered promiscuous mode [ 72.357250][ T2309] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 72.583400][ T2253] loop4: detected capacity change from 0 to 131072 [ 72.648360][ T2253] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 5) [ 72.722155][ T2253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.782339][ T2253] F2FS-fs (loop4): Test dummy encryption mode enabled [ 72.832443][ T2253] F2FS-fs (loop4): invalid crc value [ 72.889911][ T2253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.989608][ T28] audit: type=1400 audit(1792731926.831:406): avc: denied { map } for pid=2340 comm="syz.0.877" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.082729][ T2347] loop0: detected capacity change from 0 to 16 [ 73.112785][ T28] audit: type=1400 audit(1792731926.921:407): avc: denied { create } for pid=2345 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.132436][ T2253] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.139643][ T2253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.180453][ T2347] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.233124][ T2347] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-95] [ 73.245650][ T28] audit: type=1400 audit(1792731926.921:408): avc: denied { getopt } for pid=2345 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.680988][ T2305] loop3: detected capacity change from 0 to 131072 [ 73.743486][ T2305] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 73.797756][ T2305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.843641][ T2305] F2FS-fs (loop3): invalid crc value [ 73.877285][ T2305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.998145][ T2305] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.036299][ T2305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 74.296684][ T2389] loop5: detected capacity change from 0 to 256 [ 74.352297][ T2389] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 74.532367][ T28] audit: type=1400 audit(1792731928.381:409): avc: denied { execute } for pid=2387 comm="syz.5.898" name="file0" dev="loop5" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.642332][ T28] audit: type=1400 audit(1792731928.411:410): avc: denied { execute_no_trans } for pid=2387 comm="syz.5.898" path=2F3135352FE91F7189591E9233614B2F66696C6530 dev="loop5" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.768109][ T2404] ip_tables: iptables: counters copy to user failed while replacing table [ 74.962337][ T28] audit: type=1400 audit(1792731928.811:411): avc: denied { sys_module } for pid=2422 comm="syz.1.911" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.012733][ T2427] netlink: 36 bytes leftover after parsing attributes in process `syz.5.912'. [ 75.078705][ T2435] loop1: detected capacity change from 0 to 256 [ 75.111158][ T2435] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 75.187605][ T2441] loop5: detected capacity change from 0 to 1024 [ 75.245137][ T2441] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 75.282537][ T2441] EXT4-fs (loop5): orphan cleanup on readonly fs [ 75.315211][ T2441] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.919: Invalid inode table block 0 in block_group 0 [ 75.347226][ T2454] input: syz1 as /devices/virtual/input/input6 [ 75.378587][ T2441] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 75.420545][ T2441] EXT4-fs error (device loop5): ext4_quota_write:7240: inode #3: comm syz.5.919: mark_inode_dirty error [ 75.463580][ T2441] Quota error (device loop5): write_blk: dquota write failed [ 75.501266][ T2441] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 75.550407][ T2441] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.919: Failed to acquire dquot type 0 [ 75.565138][ T2470] loop3: detected capacity change from 0 to 512 [ 75.599385][ T2470] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.606349][ T28] audit: type=1400 audit(1792731929.461:412): avc: denied { wake_alarm } for pid=2471 comm="syz.1.934" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.632533][ T2441] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.919: Invalid inode table block 0 in block_group 0 [ 75.672708][ T2470] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #11: comm syz.3.933: casefold flag without casefold feature [ 75.690879][ T2441] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 75.718060][ T2470] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.933: couldn't read orphan inode 11 (err -117) [ 75.740456][ T2441] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.919: mark_inode_dirty error [ 75.772347][ T2470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.786767][ T2441] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.919: Invalid inode table block 0 in block_group 0 [ 75.831177][ T28] audit: type=1400 audit(1792731929.671:413): avc: denied { bind } for pid=2482 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.862528][ T289] EXT4-fs (loop3): unmounting filesystem. [ 75.873350][ T2441] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 75.886234][ T2485] loop1: detected capacity change from 0 to 512 [ 75.906823][ T2441] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 75.927869][ T2485] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ0177777777777777777777718446744073709551615" or missing value [ 75.966898][ T2441] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.919: Invalid inode table block 0 in block_group 0 [ 76.006724][ T2441] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 76.028957][ T2383] loop0: detected capacity change from 0 to 131072 [ 76.040511][ T28] audit: type=1400 audit(1792731929.891:414): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 76.082251][ T2441] EXT4-fs error (device loop5): ext4_truncate:4327: inode #15: comm syz.5.919: mark_inode_dirty error [ 76.121340][ T2383] F2FS-fs (loop0): Test dummy encryption mode enabled [ 76.158228][ T2441] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 76.184262][ T2383] F2FS-fs (loop0): invalid crc value [ 76.196372][ T2441] EXT4-fs (loop5): 1 truncate cleaned up [ 76.202072][ T2441] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.214080][ T2383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.262467][ T2441] EXT4-fs (loop5): shut down requested (1) [ 76.308684][ T575] EXT4-fs (loop5): unmounting filesystem. [ 76.371818][ T2517] netem: change failed [ 76.413482][ T2383] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 76.490038][ T2383] F2FS-fs (loop0): Start checkpoint disabled! [ 76.531796][ T2383] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 76.566489][ T28] audit: type=1400 audit(1792731930.411:415): avc: denied { mounton } for pid=2530 comm="syz.5.959" path="/proc/363/cgroup" dev="proc" ino=25345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 76.607252][ T2535] loop1: detected capacity change from 0 to 512 [ 76.622665][ T2383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 76.640629][ T2539] loop3: detected capacity change from 0 to 512 [ 76.698051][ T2539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.715920][ T2541] device bridge_slave_0 left promiscuous mode [ 76.762863][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.781425][ T2539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.798234][ T2541] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.822475][ T2383] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 76.830609][ T2539] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.856572][ T2511] loop4: detected capacity change from 0 to 40427 [ 76.864451][ T2383] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 76.864467][ T2383] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=100004, run fsck to fix. [ 76.904758][ T289] EXT4-fs (loop3): unmounting filesystem. [ 76.935322][ T2511] F2FS-fs (loop4): invalid crc value [ 76.946693][ T2558] loop3: detected capacity change from 0 to 256 [ 76.975511][ T2511] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.034948][ T308] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 77.091253][ T2567] exFAT-fs (loop5): failed to load upcase table (idx : 0x000120ea, chksum : 0xcff16ea1, utbl_chksum : 0xe619d30d) [ 77.131863][ T2567] exFAT-fs (loop5): failed to load alloc-bitmap [ 77.144838][ T2511] F2FS-fs (loop4): Start checkpoint disabled! [ 77.155310][ T2567] exFAT-fs (loop5): failed to recognize exfat type [ 77.181259][ T2511] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 77.213724][ T2567] netlink: 220 bytes leftover after parsing attributes in process `syz.5.975'. [ 77.227071][ T2511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 77.244769][ T2567] netlink: 120 bytes leftover after parsing attributes in process `syz.5.975'. [ 77.274144][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 77.337829][ T2511] syz.4.951: attempt to access beyond end of device [ 77.337829][ T2511] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.356189][ T2571] xt_hashlimit: size too large, truncated to 1048576 [ 77.409198][ T2511] syz.4.951: attempt to access beyond end of device [ 77.409198][ T2511] loop4: rw=2049, sector=45104, nr_sectors = 40 limit=40427 [ 77.477400][ T2511] syz.4.951: attempt to access beyond end of device [ 77.477400][ T2511] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.601842][ T308] kworker/u4:3: attempt to access beyond end of device [ 77.601842][ T308] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 77.862467][ T2601] netlink: 68 bytes leftover after parsing attributes in process `syz.0.973'. [ 77.912695][ T28] audit: type=1400 audit(1792731931.761:416): avc: denied { cmd } for pid=2602 comm="syz.3.990" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 78.042148][ T204] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.232176][ T204] usb 6-1: Using ep0 maxpacket: 16 [ 78.243491][ T204] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 78.265632][ T204] usb 6-1: config 0 has no interface number 0 [ 78.285318][ T204] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 78.312202][ T2649] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.1008'. [ 78.322416][ T204] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 78.350286][ T204] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 78.377729][ T204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.406094][ T204] usb 6-1: Product: syz [ 78.418877][ T204] usb 6-1: Manufacturer: syz [ 78.431031][ T204] usb 6-1: SerialNumber: syz [ 78.442057][ T2661] xt_hashlimit: size too large, truncated to 1048576 [ 78.452481][ T204] usb 6-1: config 0 descriptor?? [ 78.462176][ T2594] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.477952][ T2594] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.508758][ T2659] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.638666][ T28] audit: type=1400 audit(1792731932.481:417): avc: denied { bind } for pid=2666 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.710477][ T2594] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.729424][ T2594] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 78.951584][ T204] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 79.027949][ T2697] EXT4-fs: Ignoring removed nobh option [ 79.045531][ T2697] EXT4-fs: Ignoring removed bh option [ 79.067324][ T2697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 79.086458][ T2697] System zones: 0-1, 3-12 [ 79.098741][ T2697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.145956][ T289] EXT4-fs (loop3): unmounting filesystem. [ 79.152146][ T204] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 168 [ 79.250055][ T28] audit: type=1400 audit(1792731939.103:418): avc: denied { mount } for pid=2712 comm="syz.1.1037" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 79.363156][ T204] usb 6-1: USB disconnect, device number 3 syzkaller syzkaller login: [ 79.576979][ T2736] No source specified [ 79.668833][ T2746] set_capacity_and_notify: 4 callbacks suppressed [ 79.668847][ T2746] loop4: detected capacity change from 0 to 512 [ 79.691848][ T2748] loop1: detected capacity change from 0 to 256 [ 79.717301][ T2748] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 79.731332][ T2746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.755490][ T2746] ext4 filesystem being mounted at (unknown) supports timestamps until 2038-01-19 (0x7fffffff) [ 79.926145][ T2767] device batadv_slave_0 entered promiscuous mode [ 79.954685][ T2766] device batadv_slave_0 left promiscuous mode [ 79.999695][ T2775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1064'. [ 80.150954][ T2785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.534806][ T2788] loop5: detected capacity change from 0 to 40427 [ 80.562538][ T2788] F2FS-fs (loop5): invalid crc value [ 80.594232][ T2788] F2FS-fs (loop5): Found nat_bits in checkpoint [ 80.683418][ T2788] F2FS-fs (loop5): Start checkpoint disabled! [ 80.707494][ T2788] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 80.729949][ T2788] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 80.767975][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 80.767987][ T28] audit: type=1400 audit(1792731940.613:428): avc: denied { create } for pid=2787 comm="syz.5.1070" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.796836][ T2788] syz.5.1070: attempt to access beyond end of device [ 80.796836][ T2788] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.825710][ T2788] syz.5.1070: attempt to access beyond end of device [ 80.825710][ T2788] loop5: rw=2049, sector=45104, nr_sectors = 40 limit=40427 [ 80.854671][ T28] audit: type=1400 audit(1792731940.643:429): avc: denied { read write open } for pid=2787 comm="syz.5.1070" path="/190/file0/file2" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.896739][ T2788] syz.5.1070: attempt to access beyond end of device [ 80.896739][ T2788] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.930243][ T2815] loop1: detected capacity change from 0 to 512 [ 80.953047][ T28] audit: type=1400 audit(1792731940.663:430): avc: denied { mount } for pid=2772 comm="syz.4.1063" name="/" dev="pstore" ino=12991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 80.980402][ T2815] EXT4-fs (loop1): 1 truncate cleaned up [ 81.004856][ T2815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.024310][ T308] kworker/u4:3: attempt to access beyond end of device [ 81.024310][ T308] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 81.050559][ T2814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1080: bg 0: block 465: padding at end of block bitmap is not set [ 81.070363][ T28] audit: type=1400 audit(1792731940.893:431): avc: denied { map } for pid=2814 comm="syz.1.1080" path="/248/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.125708][ T2822] device bridge0 entered promiscuous mode [ 81.144542][ T288] EXT4-fs (loop1): unmounting filesystem. [ 81.383169][ T28] audit: type=1326 audit(1792731941.233:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 81.417258][ T2839] loop0: detected capacity change from 0 to 512 [ 81.505042][ T2839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.522760][ T28] audit: type=1326 audit(1792731941.263:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 81.597101][ T2839] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.634817][ T2852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 81.651237][ T28] audit: type=1326 audit(1792731941.263:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 81.747570][ T290] EXT4-fs (loop0): unmounting filesystem. [ 81.770957][ T28] audit: type=1326 audit(1792731941.263:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 81.897641][ T28] audit: type=1326 audit(1792731941.263:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 82.024308][ T28] audit: type=1326 audit(1792731941.263:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2838 comm="syz.0.1092" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0001b9f559 code=0x7ffc0000 [ 82.424000][ T2881] loop1: detected capacity change from 0 to 256 [ 82.468870][ T2881] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.509358][ T2881] FAT-fs (loop1): Filesystem has been set read-only [ 82.536875][ T2881] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.577991][ T2881] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.410604][ T2943] netpci0: tun_chr_ioctl cmd 1074812117 [ 83.621525][ T2966] netlink: 'syz.3.1146': attribute type 3 has an invalid length. [ 83.851875][ T2998] loop0: detected capacity change from 0 to 2048 [ 83.932608][ T2998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.052404][ T388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 84.105536][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.171959][ T388] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.171959][ T388] [ 84.217174][ T388] EXT4-fs (loop0): Total free blocks count 0 [ 84.237266][ T3046] capability: warning: `syz.5.1181' uses 32-bit capabilities (legacy support in use) [ 84.251342][ T388] EXT4-fs (loop0): Free/Dirty block details [ 84.274426][ T388] EXT4-fs (loop0): free_blocks=4096 [ 84.279652][ T388] EXT4-fs (loop0): dirty_blocks=32 [ 84.327585][ T388] EXT4-fs (loop0): Block reservation details [ 84.362209][ T388] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 84.390150][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 84.483768][ T3065] loop3: detected capacity change from 0 to 16 [ 84.519969][ T3065] erofs: (device loop3): mounted with root inode @ nid 36. [ 84.604088][ T3070] loop0: detected capacity change from 0 to 512 [ 84.658818][ T3070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.734539][ T3070] EXT4-fs (loop0): 1 truncate cleaned up [ 84.740208][ T3070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.882939][ T290] EXT4-fs (loop0): unmounting filesystem. [ 85.122039][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 85.154828][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 85.222120][ T315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.413355][ T315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 85.423255][ T315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 85.434682][ T315] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 85.447630][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.460095][ T315] usb 5-1: Product: syz [ 85.474458][ T315] usb 5-1: Manufacturer: syz [ 85.489192][ T315] usb 5-1: SerialNumber: syz [ 85.507100][ T315] usb 5-1: config 0 descriptor?? [ 85.523255][ T3098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.558482][ T3098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.668769][ T3178] loop3: detected capacity change from 0 to 512 [ 85.683584][ T3178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.703490][ T289] EXT4-fs (loop3): unmounting filesystem. [ 85.748096][ T3186] tun0: tun_chr_ioctl cmd 1074025677 [ 85.754183][ T3186] tun0: linktype set to 778 [ 85.801860][ T3098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.809354][ T3098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.842402][ T3190] loop6: detected capacity change from 0 to 8 [ 86.083053][ T3204] loop3: detected capacity change from 0 to 40427 [ 86.095171][ T3204] F2FS-fs (loop3): invalid crc value [ 86.122874][ T3204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.181850][ T3204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.223061][ T315] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 86.244414][ T3204] syz.3.1252: attempt to access beyond end of device [ 86.244414][ T3204] loop3: rw=2049, sector=45096, nr_sectors = 72 limit=40427 [ 86.338114][ T289] syz-executor: attempt to access beyond end of device [ 86.338114][ T289] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 86.424116][ T315] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 86.492062][ T315] usb 5-1: USB disconnect, device number 3 [ 86.544221][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 86.544244][ T28] audit: type=1326 audit(1792731946.393:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 86.711073][ T28] audit: type=1326 audit(1792731946.433:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 86.806698][ T28] audit: type=1326 audit(1792731946.433:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 86.957250][ T28] audit: type=1326 audit(1792731946.433:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.072072][ T3265] loop5: detected capacity change from 0 to 1024 [ 87.084470][ T28] audit: type=1326 audit(1792731946.433:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.152087][ T3265] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 87.171768][ T3265] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.212411][ T28] audit: type=1326 audit(1792731946.433:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.249254][ T3264] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.1278: Freeing blocks not in datazone - block = 0, count = 16 [ 87.301358][ T3264] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1278: bg 0: block 112: padding at end of block bitmap is not set [ 87.336054][ T28] audit: type=1326 audit(1792731946.433:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.381566][ T3264] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 87.436329][ T575] EXT4-fs (loop5): unmounting filesystem. [ 87.455261][ T28] audit: type=1326 audit(1792731946.433:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.575959][ T28] audit: type=1326 audit(1792731946.433:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.688615][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 87.702252][ T28] audit: type=1326 audit(1792731946.433:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3223 comm="syz.5.1260" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 87.752699][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 87.781894][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 87.813385][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 87.978559][ T3339] loop1: detected capacity change from 0 to 128 [ 88.008739][ T3339] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.039987][ T3339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.068834][ T3339] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.149925][ T3351] 9pnet: p9_errstr2errno: server reported unknown error [ 88.190724][ T288] EXT4-fs (loop1): unmounting filesystem. [ 88.317240][ T3367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 88.494671][ T3373] loop0: detected capacity change from 0 to 4096 [ 88.578635][ T3373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.647994][ T3389] loop5: detected capacity change from 0 to 2048 [ 88.666237][ T3373] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1324: corrupted inode contents [ 88.715861][ T3389] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 88.764460][ T3389] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.778356][ T3373] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #15: comm syz.0.1324: mark_inode_dirty error [ 88.824953][ T3389] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 88.843393][ T3373] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1324: corrupted inode contents [ 88.865567][ T3389] EXT4-fs (loop5): group descriptors corrupted! [ 88.903607][ T3373] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1324: mark_inode_dirty error [ 88.975529][ T3373] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1324: corrupted inode contents [ 89.047217][ T3373] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1324: mark_inode_dirty error [ 89.101511][ T3395] loop1: detected capacity change from 0 to 40427 [ 89.120554][ T3373] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1324: corrupted inode contents [ 89.155600][ T3395] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 89.184031][ T3419] loop5: detected capacity change from 0 to 512 [ 89.204838][ T3395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.213430][ T3373] EXT4-fs error (device loop0): ext4_truncate:4327: inode #15: comm syz.0.1324: mark_inode_dirty error [ 89.234190][ T3419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.262509][ T3395] F2FS-fs (loop1): invalid crc value [ 89.273927][ T3373] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem [ 89.283460][ T3395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.292885][ T3419] EXT4-fs (loop5): 1 truncate cleaned up [ 89.298544][ T3419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 89.362174][ T3398] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1324: corrupted inode contents [ 89.390218][ T575] EXT4-fs (loop5): unmounting filesystem. [ 89.409150][ T3395] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.420846][ T3411] loop3: detected capacity change from 0 to 40427 [ 89.460584][ T3395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.486675][ T3411] F2FS-fs (loop3): invalid crc value [ 89.500722][ T290] EXT4-fs (loop0): unmounting filesystem. [ 89.522735][ T3411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.626238][ T3411] F2FS-fs (loop3): Start checkpoint disabled! [ 89.658497][ T3411] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 89.683536][ T3452] tap0: tun_chr_ioctl cmd 1074812118 [ 89.705155][ T3411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 89.810103][ T308] kworker/u4:3: attempt to access beyond end of device [ 89.810103][ T308] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 89.834728][ T3463] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1363'. [ 89.863008][ T3463] netem: unknown loss type 4 [ 89.879110][ T3463] netem: change failed [ 90.047327][ T3481] xt_hashlimit: size too large, truncated to 1048576 [ 90.119943][ T3487] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.160274][ T3487] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.197910][ T3487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.241585][ T3498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.251807][ T3487] fs-verity (loop3, inode 15): Unknown hash algorithm number: 3 [ 90.278309][ T3498] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 90.293160][ T289] EXT4-fs (loop3): unmounting filesystem. [ 90.398451][ T288] EXT4-fs (loop1): unmounting filesystem. [ 90.468401][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 90.831175][ T3555] set_capacity_and_notify: 2 callbacks suppressed [ 90.831189][ T3555] loop3: detected capacity change from 0 to 256 [ 90.865840][ T3555] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.901251][ T3555] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 90.922219][ T3555] FAT-fs (loop3): Filesystem has been set read-only [ 90.937145][ T3555] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 91.682697][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 91.682709][ T28] audit: type=1400 audit(1792731951.533:511): avc: denied { setopt } for pid=3629 comm="syz.3.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.752959][ T3635] loop1: detected capacity change from 0 to 512 [ 91.809915][ T3635] EXT4-fs: Ignoring removed nobh option [ 91.836606][ T28] audit: type=1400 audit(1792731951.593:512): avc: denied { getopt } for pid=3634 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.899028][ T3635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.001956][ T3635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 92.061393][ T3635] System zones: 1-12 [ 92.112689][ T3635] EXT4-fs (loop1): 1 truncate cleaned up [ 92.202148][ T3635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.311762][ T288] EXT4-fs (loop1): unmounting filesystem. [ 92.476583][ T3656] loop3: detected capacity change from 0 to 40427 [ 92.518311][ T3656] F2FS-fs (loop3): invalid crc value [ 92.563394][ T3656] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.669060][ T3656] F2FS-fs (loop3): Start checkpoint disabled! [ 92.696829][ T3656] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 92.733884][ T3656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 92.781362][ T28] audit: type=1400 audit(1792731952.623:513): avc: denied { append } for pid=3655 comm="syz.3.1446" path="/348/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.866416][ T3656] F2FS-fs (loop3): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 92.913814][ T28] audit: type=1400 audit(1792731952.663:514): avc: denied { ioctl } for pid=3655 comm="syz.3.1446" path="/348/file0/file0" dev="loop3" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.977262][ T308] kworker/u4:3: attempt to access beyond end of device [ 92.977262][ T308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.214816][ T3710] bridge0: port 1(vlan2) entered blocking state [ 93.244438][ T3710] bridge0: port 1(vlan2) entered disabled state [ 93.260867][ T3712] kvm [3711]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x1 [ 93.403263][ T28] audit: type=1400 audit(1792731953.253:515): avc: denied { set_context_mgr } for pid=3723 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.425263][ T3724] binder: BINDER_SET_CONTEXT_MGR already set [ 93.431264][ T3724] binder: 3723:3724 ioctl 40046207 0 returned -16 [ 93.469185][ T3680] loop1: detected capacity change from 0 to 40427 [ 93.497122][ T28] audit: type=1400 audit(1792731953.293:516): avc: denied { read } for pid=3725 comm="syz.5.1475" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 93.550799][ T3680] F2FS-fs (loop1): invalid crc value [ 93.592231][ T3680] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.830747][ T3680] F2FS-fs (loop1): Start checkpoint disabled! [ 93.862895][ T3680] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 93.886295][ T3759] loop0: detected capacity change from 0 to 256 [ 93.922314][ T3759] FAT-fs (loop0): Directory bread(block 64) failed [ 93.931900][ T3680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 93.945817][ T3759] FAT-fs (loop0): Directory bread(block 65) failed [ 93.979522][ T3759] FAT-fs (loop0): Directory bread(block 66) failed [ 93.997676][ T390] kworker/u4:5: attempt to access beyond end of device [ 93.997676][ T390] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.011927][ T3759] FAT-fs (loop0): Directory bread(block 67) failed [ 94.018597][ T315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.030539][ T3759] FAT-fs (loop0): Directory bread(block 68) failed [ 94.042225][ T328] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 94.065450][ T3759] FAT-fs (loop0): Directory bread(block 69) failed [ 94.105261][ T3759] FAT-fs (loop0): Directory bread(block 70) failed [ 94.111909][ T3759] FAT-fs (loop0): Directory bread(block 71) failed [ 94.148983][ T3759] FAT-fs (loop0): Directory bread(block 72) failed [ 94.171363][ T3759] FAT-fs (loop0): Directory bread(block 73) failed [ 94.218472][ T3759] syz.0.1490: attempt to access beyond end of device [ 94.218472][ T3759] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 94.232269][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 94.241081][ T315] usb 4-1: config 0 has no interfaces? [ 94.248725][ T328] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.263078][ T315] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 94.282186][ T328] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 94.298429][ T315] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 94.307388][ T3759] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 324) [ 94.321845][ T3781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.321913][ T315] usb 4-1: Product: syz [ 94.336270][ T328] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 94.352342][ T3759] FAT-fs (loop0): Filesystem has been set read-only [ 94.365548][ T328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.377590][ T28] audit: type=1326 audit(1792731954.223:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.1500" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f955899f559 code=0x0 [ 94.412224][ T315] usb 4-1: Manufacturer: syz [ 94.417261][ T3759] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 324) [ 94.425665][ T328] usb 6-1: Product: syz [ 94.433456][ T315] usb 4-1: config 0 descriptor?? [ 94.438514][ T328] usb 6-1: Manufacturer: syz [ 94.443373][ T328] usb 6-1: SerialNumber: syz [ 94.462203][ T3753] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 94.469564][ T3753] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 94.560750][ T3791] device veth0 entered promiscuous mode [ 94.573143][ T3790] device veth0 left promiscuous mode [ 94.653192][ T328] usb 4-1: USB disconnect, device number 3 [ 94.732427][ T28] audit: type=1400 audit(1792731954.583:518): avc: denied { read } for pid=3805 comm="syz.0.1510" path="socket:[30898]" dev="sockfs" ino=30898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.776704][ T3810] loop0: detected capacity change from 0 to 128 [ 94.795458][ T3810] EXT4-fs: Ignoring removed nobh option [ 94.812949][ T3810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.830282][ T3810] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.878136][ T28] audit: type=1400 audit(1792731954.723:519): avc: denied { bind } for pid=3817 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.908152][ T3820] device-mapper: ioctl: invalid device name [ 94.940794][ T290] EXT4-fs (loop0): unmounting filesystem. [ 95.147385][ T3834] loop0: detected capacity change from 0 to 40427 [ 95.158787][ T3834] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 95.174291][ T3834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.183819][ T3834] F2FS-fs (loop0): invalid crc value [ 95.190115][ T3834] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.262402][ T3834] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.296160][ T3834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.399702][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 95.424369][ T3834] syz.0.1521: attempt to access beyond end of device [ 95.424369][ T3834] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.445710][ T3858] IPv6: sit1: Disabled Multicast RS [ 95.494241][ T3866] loop1: detected capacity change from 0 to 256 [ 95.517250][ T3866] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 95.538999][ T3834] syz.0.1521: attempt to access beyond end of device [ 95.538999][ T3834] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 95.675301][ T3883] loop3: detected capacity change from 0 to 1024 [ 95.694817][ T290] syz-executor: attempt to access beyond end of device [ 95.694817][ T290] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 95.714845][ T3883] EXT4-fs: Ignoring removed orlov option [ 95.757849][ T3883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.789174][ T28] audit: type=1400 audit(1792731955.633:520): avc: denied { setattr } for pid=3882 comm="syz.3.1542" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.852789][ T289] EXT4-fs (loop3): unmounting filesystem. [ 96.220078][ T3913] loop0: detected capacity change from 0 to 512 [ 96.285243][ T3913] EXT4-fs (loop0): 1 orphan inode deleted [ 96.302181][ T390] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 1 [ 96.337498][ T3913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.385613][ T3913] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.474083][ T290] EXT4-fs (loop0): unmounting filesystem. [ 96.675094][ T3919] loop3: detected capacity change from 0 to 40427 [ 96.690495][ T3919] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 96.713313][ T3919] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 96.728401][ T3919] F2FS-fs (loop3): invalid crc value [ 96.741321][ T3919] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.753753][ T328] usb 6-1: USB disconnect, device number 4 [ 96.779500][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 96.779511][ T28] audit: type=1326 audit(1792731956.623:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 96.812961][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 96.831828][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.854523][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 96.872840][ T3919] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 96.880362][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.892563][ T3919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.900725][ T28] audit: type=1326 audit(1792731956.663:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 96.926631][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.941827][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.969571][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.980600][ T3919] syz.3.1555: attempt to access beyond end of device [ 96.980600][ T3919] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.999504][ T28] audit: type=1326 audit(1792731956.663:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.029200][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.049202][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1564'. [ 97.082305][ T3919] syz.3.1555: attempt to access beyond end of device [ 97.082305][ T3919] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 97.112254][ T28] audit: type=1326 audit(1792731956.663:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.233158][ T28] audit: type=1326 audit(1792731956.663:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.302646][ T289] syz-executor: attempt to access beyond end of device [ 97.302646][ T289] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 97.393911][ T28] audit: type=1326 audit(1792731956.663:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.484116][ T3966] serio: Serial port ptm0 [ 97.528525][ T28] audit: type=1326 audit(1792731956.663:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.607898][ T28] audit: type=1326 audit(1792731956.663:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.687178][ T28] audit: type=1326 audit(1792731956.663:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 97.788281][ T28] audit: type=1326 audit(1792731956.663:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.5.1564" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9f559 code=0x7ffc0000 [ 98.028467][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 98.136126][ T4003] loop5: detected capacity change from 0 to 256 [ 98.339098][ T4007] loop5: detected capacity change from 0 to 512 [ 98.362939][ T3975] loop1: detected capacity change from 0 to 131072 [ 98.372544][ T4007] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1592: iget: bad i_size value: 38620345925642 [ 98.394375][ T3975] F2FS-fs (loop1): Test dummy encryption mode enabled [ 98.413447][ T4007] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1592: couldn't read orphan inode 15 (err -117) [ 98.429988][ T3975] F2FS-fs (loop1): invalid crc value [ 98.445728][ T3975] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.453233][ T4007] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 98.482134][ T4011] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 98.522446][ T4007] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1592: bg 0: block 5: invalid block bitmap [ 98.558545][ T3975] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.571701][ T4007] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 98.613143][ T4007] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.613143][ T4007] [ 98.673126][ T4017] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1594'. [ 98.697802][ T575] EXT4-fs (loop5): unmounting filesystem. [ 98.713858][ T4017] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1594'. [ 98.803561][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.846089][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.875301][ T390] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.882491][ T390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.946242][ T4030] x86: Booting SMP configuration: [ 98.952577][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 98.972263][ T4009] loop0: detected capacity change from 0 to 40427 [ 98.982469][ T4030] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 98.989198][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.017077][ T4009] F2FS-fs (loop0): invalid crc value [ 99.025520][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 99.067283][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.078465][ T4009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.085788][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.105432][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.113929][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.122365][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.133405][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 99.143889][ T60] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 99.162464][ T60] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.204941][ T4009] F2FS-fs (loop0): Start checkpoint disabled! [ 99.231513][ T4009] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 99.256568][ T4009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 99.351063][ T4009] F2FS-fs (loop0): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 99.433058][ T390] kworker/u4:5: attempt to access beyond end of device [ 99.433058][ T390] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.521485][ T4065] netlink: 'syz.1.1614': attribute type 2 has an invalid length. [ 99.609456][ T4055] loop5: detected capacity change from 0 to 40427 [ 99.625294][ T4055] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 99.636776][ T4079] loop0: detected capacity change from 0 to 512 [ 99.642453][ T4055] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.657307][ T4055] F2FS-fs (loop5): invalid crc value [ 99.663238][ T4079] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1620: corrupted inode contents [ 99.682429][ T4079] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.691405][ T4079] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1620: corrupted inode contents [ 99.705526][ T4079] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.1620: mark_inode_dirty error [ 99.717558][ T4079] EXT4-fs (loop0): 1 orphan inode deleted [ 99.723607][ T4055] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.723739][ T4079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.772496][ T290] EXT4-fs (loop0): unmounting filesystem. [ 99.789838][ T4055] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 99.798540][ T4055] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 99.806404][ T4095] loop0: detected capacity change from 0 to 256 [ 99.835436][ T4095] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.845727][ T4095] FAT-fs (loop0): Filesystem has been set read-only [ 99.852569][ T4095] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.864143][ T4095] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.881638][ T4055] syz.5.1609: attempt to access beyond end of device [ 99.881638][ T4055] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.914540][ T4055] syz.5.1609: attempt to access beyond end of device [ 99.914540][ T4055] loop5: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 100.037866][ T575] syz-executor: attempt to access beyond end of device [ 100.037866][ T575] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 100.074128][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 100.356889][ T19] kernel write not supported for file /vcs (pid: 19 comm: kworker/0:1) [ 100.404055][ T4134] loop3: detected capacity change from 0 to 1024 [ 100.449876][ T4134] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.501405][ T4134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.539720][ T289] EXT4-fs (loop3): unmounting filesystem. [ 100.620778][ T4160] EXT4-fs: Ignoring removed bh option [ 100.667925][ T4160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.680591][ T4160] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.713483][ T289] EXT4-fs (loop3): unmounting filesystem. [ 100.795500][ T4162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 100.955258][ T4181] FAULT_INJECTION: forcing a failure. [ 100.955258][ T4181] name failslab, interval 1, probability 0, space 0, times 0 [ 101.012198][ T4181] CPU: 1 PID: 4181 Comm: syz.3.1658 Tainted: G W syzkaller #0 [ 101.021209][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.031294][ T4181] Call Trace: [ 101.034607][ T4181] [ 101.037580][ T4181] __dump_stack+0x21/0x24 [ 101.041942][ T4181] dump_stack_lvl+0x110/0x170 [ 101.046656][ T4181] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.051736][ T4181] dump_stack+0x15/0x24 [ 101.056053][ T4181] should_fail_ex+0x3bf/0x510 [ 101.060781][ T4181] __should_failslab+0xac/0xf0 [ 101.065591][ T4181] should_failslab+0x9/0x20 [ 101.070132][ T4181] __kmem_cache_alloc_node+0x3d/0x2d0 [ 101.075556][ T4181] ? call_usermodehelper_setup+0x8e/0x210 [ 101.081322][ T4181] ? call_usermodehelper_setup+0x8e/0x210 [ 101.087082][ T4181] kmalloc_trace+0x29/0xb0 [ 101.091537][ T4181] call_usermodehelper_setup+0x8e/0x210 [ 101.097150][ T4181] ? __cfi_free_modprobe_argv+0x10/0x10 [ 101.102738][ T4181] __request_module+0x391/0x910 [ 101.107642][ T4181] ? __cfi___request_module+0x10/0x10 [ 101.113059][ T4181] ? kasan_save_alloc_info+0x1f/0x30 [ 101.118388][ T4181] ? __kasan_slab_alloc+0x72/0x80 [ 101.123461][ T4181] ? security_inode_alloc+0x33/0x120 [ 101.128798][ T4181] ? __kasan_check_write+0x14/0x20 [ 101.133949][ T4181] ? _raw_spin_lock+0x94/0xf0 [ 101.138746][ T4181] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.143978][ T4181] inet_create+0x348/0xef0 [ 101.148438][ T4181] __sock_create+0x39e/0x7c0 [ 101.153064][ T4181] __sys_socket+0xcd/0x1a0 [ 101.157524][ T4181] __x64_sys_socket+0x7a/0x90 [ 101.162250][ T4181] x64_sys_call+0x449/0x9a0 [ 101.166789][ T4181] do_syscall_64+0x4c/0xa0 [ 101.171245][ T4181] ? clear_bhb_loop+0x30/0x80 [ 101.175999][ T4181] ? clear_bhb_loop+0x30/0x80 [ 101.180719][ T4181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.186645][ T4181] RIP: 0033:0x7f9158d9f559 [ 101.191098][ T4181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.210821][ T4181] RSP: 002b:00007f9159d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 101.219287][ T4181] RAX: ffffffffffffffda RBX: 00007f9159025fa0 RCX: 00007f9158d9f559 [ 101.227296][ T4181] RDX: 0000000000000106 RSI: 0000000000080805 RDI: 0000000000000002 [ 101.235350][ T4181] RBP: 00007f9158e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 101.243358][ T4181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.251541][ T4181] R13: 00007f9159026038 R14: 00007f9159025fa0 R15: 00007ffc32319098 [ 101.259645][ T4181] [ 101.267376][ T575] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /308/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.324447][ T575] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.389082][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.408657][ T575] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /308/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.462371][ T575] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.512351][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.546650][ T4199] fuse: Bad value for 'fd' [ 101.552234][ T575] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /308/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.574967][ T575] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.594644][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.623434][ T575] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /308/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.648310][ T575] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.677510][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.689337][ T575] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /308/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.722358][ T575] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 101.742471][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.755413][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.790677][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.797759][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.810033][ T4214] device batadv_slave_1 entered promiscuous mode [ 101.828074][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.840111][ T4213] device batadv_slave_1 left promiscuous mode [ 101.861477][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.886381][ T575] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 101.900671][ T4223] set_capacity_and_notify: 2 callbacks suppressed [ 101.900688][ T4223] loop7: detected capacity change from 0 to 4 [ 101.909529][ T4224] ------------[ cut here ]------------ [ 101.918947][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/trace.c:2464 __trace_find_cmdline+0x166/0x1c0 [ 101.928936][ T4224] Modules linked in: [ 101.932897][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G W syzkaller #0 [ 101.941793][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.951957][ T4224] RIP: 0010:__trace_find_cmdline+0x166/0x1c0 [ 101.958080][ T4224] Code: 65 d0 ba 06 00 00 00 4c 89 e7 48 c7 c6 a0 00 ab 85 e8 0e b2 42 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8a 14 fd ff <0f> 0b ba 06 00 00 00 4c 89 e7 48 c7 c6 80 00 ab 85 eb d4 44 89 f9 [ 101.977809][ T4224] RSP: 0018:ffffc9000dbef980 EFLAGS: 00010287 [ 101.984104][ T4224] RAX: ffffffff81745a46 RBX: ffff8881395a4000 RCX: 0000000000080000 [ 101.992163][ T4224] RDX: ffffc900032e1000 RSI: 000000000000056e RDI: 000000000000056f [ 102.000183][ T4224] RBP: ffffc9000dbef9b0 R08: 0000000000000003 R09: 0000000000000004 [ 102.008241][ T4224] R10: dffffc0000000000 R11: fffff52001b7df40 R12: ffffc9000dbefac0 [ 102.016292][ T4224] R13: dffffc0000000000 R14: 00000000e9f0351e R15: 0000000000000000 [ 102.024372][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.033388][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.040021][ T4224] CR2: 000000110c30190e CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 102.048182][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.056221][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.064301][ T4224] Call Trace: [ 102.067615][ T4224] [ 102.070577][ T4224] ? trace_find_cmdline+0xde/0x1c0 [ 102.075814][ T4224] trace_find_cmdline+0xf1/0x1c0 [ 102.080810][ T4224] ? __cfi_trace_find_cmdline+0x10/0x10 [ 102.086790][ T4224] ? ring_buffer_peek+0x345/0x3b0 [ 102.091860][ T4224] trace_print_context+0xf9/0x4d0 [ 102.096974][ T4224] ? __cfi_trace_print_context+0x10/0x10 [ 102.102686][ T4224] ? __find_next_entry+0x5af/0x6c0 [ 102.107859][ T4224] print_trace_fmt+0x3c6/0x720 [ 102.112697][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 102.118363][ T4224] print_trace_line+0x393/0x6b0 [ 102.123291][ T4224] tracing_read_pipe+0x517/0xaf0 [ 102.128278][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 102.133817][ T4224] vfs_read+0x286/0x930 [ 102.138009][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 102.142844][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.148012][ T4224] ? mutex_lock+0x93/0x1b0 [ 102.152501][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 102.157438][ T4224] ? __fdget_pos+0x2cd/0x380 [ 102.162152][ T4224] ? ksys_read+0x70/0x260 [ 102.166527][ T4224] ksys_read+0x14a/0x260 [ 102.170804][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 102.175660][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 102.181342][ T4224] __x64_sys_read+0x7b/0x90 [ 102.185924][ T4224] x64_sys_call+0x2f/0x9a0 [ 102.190396][ T4224] do_syscall_64+0x4c/0xa0 [ 102.194892][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.199626][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.204372][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.210305][ T4224] RIP: 0033:0x7feb9c39f559 [ 102.214788][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.234550][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.243049][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 102.251073][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 102.259169][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.267200][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.275241][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 102.283281][ T4224] [ 102.286346][ T4224] ---[ end trace 0000000000000000 ]--- [ 102.292311][ T4224] ------------[ cut here ]------------ [ 102.297802][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 102.308126][ T4224] Modules linked in: [ 102.312052][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G W syzkaller #0 [ 102.320943][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.331031][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 102.336922][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 102.356565][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 102.362671][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 102.370675][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 102.378675][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 102.386693][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 102.394684][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 102.402682][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.411643][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.418239][ T4224] CR2: 000000110c30190e CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 102.426227][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.434221][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.442209][ T4224] Call Trace: [ 102.445499][ T4224] [ 102.448458][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 102.454120][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.459267][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 102.463986][ T4224] rb_buffer_peek+0x5f/0x930 [ 102.468602][ T4224] ring_buffer_peek+0x184/0x3b0 [ 102.473466][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 102.478867][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.483998][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 102.488690][ T4224] ? _find_next_bit+0x8a/0x130 [ 102.493469][ T4224] __find_next_entry+0x33c/0x6c0 [ 102.498435][ T4224] ? trace_find_next_entry+0x380/0x380 [ 102.503925][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 102.509592][ T4224] ? print_trace_line+0x393/0x6b0 [ 102.514638][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 102.519602][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 102.525083][ T4224] vfs_read+0x286/0x930 [ 102.529303][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 102.533996][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.539123][ T4224] ? mutex_lock+0x93/0x1b0 [ 102.543556][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 102.548428][ T4224] ? __fdget_pos+0x2cd/0x380 [ 102.553060][ T4224] ? ksys_read+0x70/0x260 [ 102.557406][ T4224] ksys_read+0x14a/0x260 [ 102.561668][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 102.566446][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 102.572095][ T4224] __x64_sys_read+0x7b/0x90 [ 102.576621][ T4224] x64_sys_call+0x2f/0x9a0 [ 102.581058][ T4224] do_syscall_64+0x4c/0xa0 [ 102.585524][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.590219][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.594915][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.600853][ T4224] RIP: 0033:0x7feb9c39f559 [ 102.605293][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.624913][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.633367][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 102.641355][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 102.649369][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.657354][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.665349][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 102.673344][ T4224] [ 102.676377][ T4224] ---[ end trace 0000000000000000 ]--- [ 102.681880][ T4224] ================================================================== [ 102.689971][ T4224] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 102.697211][ T4224] Read of size 4 at addr ffff8881216fb06d by task syz.4.1678/4224 [ 102.705029][ T4224] [ 102.707374][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G W syzkaller #0 [ 102.716243][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.726395][ T4224] Call Trace: [ 102.729716][ T4224] [ 102.732679][ T4224] __dump_stack+0x21/0x24 [ 102.737025][ T4224] dump_stack_lvl+0x110/0x170 [ 102.741725][ T4224] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.746763][ T4224] ? rb_get_reader_page+0x9f6/0xc60 [ 102.751988][ T4224] ? rb_buffer_peek+0x88d/0x930 [ 102.756852][ T4224] print_address_description+0x71/0x200 [ 102.762452][ T4224] print_report+0x4a/0x60 [ 102.766804][ T4224] kasan_report+0x122/0x150 [ 102.771328][ T4224] ? rb_buffer_peek+0x88d/0x930 [ 102.776195][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.781338][ T4224] __asan_report_load4_noabort+0x14/0x20 [ 102.786992][ T4224] rb_buffer_peek+0x88d/0x930 [ 102.791683][ T4224] ring_buffer_peek+0x184/0x3b0 [ 102.796548][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 102.801953][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.807111][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 102.811805][ T4224] ? _find_next_bit+0x8a/0x130 [ 102.816674][ T4224] __find_next_entry+0x33c/0x6c0 [ 102.821663][ T4224] ? trace_find_next_entry+0x380/0x380 [ 102.827182][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 102.832837][ T4224] ? print_trace_line+0x393/0x6b0 [ 102.837917][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 102.842880][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 102.848361][ T4224] vfs_read+0x286/0x930 [ 102.852541][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 102.857229][ T4224] ? __kasan_check_write+0x14/0x20 [ 102.862386][ T4224] ? mutex_lock+0x93/0x1b0 [ 102.866829][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 102.871694][ T4224] ? __fdget_pos+0x2cd/0x380 [ 102.876315][ T4224] ? ksys_read+0x70/0x260 [ 102.880678][ T4224] ksys_read+0x14a/0x260 [ 102.884940][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 102.889724][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 102.895381][ T4224] __x64_sys_read+0x7b/0x90 [ 102.899900][ T4224] x64_sys_call+0x2f/0x9a0 [ 102.904341][ T4224] do_syscall_64+0x4c/0xa0 [ 102.908778][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.913482][ T4224] ? clear_bhb_loop+0x30/0x80 [ 102.918180][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.924097][ T4224] RIP: 0033:0x7feb9c39f559 [ 102.928533][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.948156][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.956592][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 102.964581][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 102.972569][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.980550][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.988540][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 102.996535][ T4224] [ 102.999567][ T4224] [ 103.001903][ T4224] Allocated by task 2064: [ 103.006240][ T4224] kasan_set_track+0x4b/0x70 [ 103.010851][ T4224] kasan_save_alloc_info+0x1f/0x30 [ 103.015981][ T4224] __kasan_slab_alloc+0x72/0x80 [ 103.020864][ T4224] slab_post_alloc_hook+0x4f/0x2d0 [ 103.025996][ T4224] kmem_cache_alloc+0x166/0x320 [ 103.030895][ T4224] getname_flags+0xba/0x510 [ 103.035431][ T4224] getname+0x19/0x20 [ 103.039371][ T4224] do_sys_openat2+0xeb/0x820 [ 103.043985][ T4224] __x64_sys_openat+0x136/0x160 [ 103.048868][ T4224] x64_sys_call+0x783/0x9a0 [ 103.053492][ T4224] do_syscall_64+0x4c/0xa0 [ 103.057929][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.063836][ T4224] [ 103.066193][ T4224] Freed by task 2064: [ 103.070183][ T4224] kasan_set_track+0x4b/0x70 [ 103.074792][ T4224] kasan_save_free_info+0x2b/0x40 [ 103.079834][ T4224] ____kasan_slab_free+0x132/0x180 [ 103.084965][ T4224] __kasan_slab_free+0x11/0x20 [ 103.089744][ T4224] slab_free_freelist_hook+0xc2/0x190 [ 103.095135][ T4224] kmem_cache_free+0x12d/0x300 [ 103.099956][ T4224] putname+0x111/0x160 [ 103.104039][ T4224] do_sys_openat2+0x715/0x820 [ 103.108733][ T4224] __x64_sys_openat+0x136/0x160 [ 103.113606][ T4224] x64_sys_call+0x783/0x9a0 [ 103.118128][ T4224] do_syscall_64+0x4c/0xa0 [ 103.122554][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.128470][ T4224] [ 103.130805][ T4224] The buggy address belongs to the object at ffff8881216fa200 [ 103.130805][ T4224] which belongs to the cache names_cache of size 4096 [ 103.144954][ T4224] The buggy address is located 3693 bytes inside of [ 103.144954][ T4224] 4096-byte region [ffff8881216fa200, ffff8881216fb200) [ 103.158410][ T4224] [ 103.160747][ T4224] The buggy address belongs to the physical page: [ 103.167161][ T4224] page:ffffea000485be00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1216f8 [ 103.177413][ T4224] head:ffffea000485be00 order:3 compound_mapcount:0 compound_pincount:0 [ 103.185748][ T4224] flags: 0x4000000000010200(slab|head|zone=1) [ 103.191848][ T4224] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001ec180 [ 103.200443][ T4224] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 103.209029][ T4224] page dumped because: kasan: bad access detected [ 103.215458][ T4224] page_owner tracks the page as allocated [ 103.221175][ T4224] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2064, tgid 2064 (udevd), ts 91803435567, free_ts 91772948042 [ 103.243351][ T4224] post_alloc_hook+0x1f5/0x210 [ 103.248154][ T4224] prep_new_page+0x1c/0x110 [ 103.252674][ T4224] get_page_from_freelist+0x2ca9/0x2d20 [ 103.258261][ T4224] __alloc_pages+0x1fa/0x610 [ 103.262892][ T4224] alloc_slab_page+0x6e/0xf0 [ 103.267493][ T4224] new_slab+0x98/0x3e0 [ 103.271573][ T4224] ___slab_alloc+0x70f/0xb70 [ 103.276192][ T4224] __slab_alloc+0x5e/0xa0 [ 103.280527][ T4224] kmem_cache_alloc+0x1a8/0x320 [ 103.285401][ T4224] getname_flags+0xba/0x510 [ 103.289934][ T4224] getname+0x19/0x20 [ 103.293838][ T4224] do_sys_openat2+0xeb/0x820 [ 103.298456][ T4224] __x64_sys_openat+0x136/0x160 [ 103.303322][ T4224] x64_sys_call+0x783/0x9a0 [ 103.307849][ T4224] do_syscall_64+0x4c/0xa0 [ 103.312276][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.318190][ T4224] page last free stack trace: [ 103.322875][ T4224] free_unref_page_prepare+0x81b/0x820 [ 103.328376][ T4224] free_unref_page+0x93/0x530 [ 103.333081][ T4224] __free_pages+0x67/0x100 [ 103.337528][ T4224] __free_slab+0xc7/0x1a0 [ 103.341898][ T4224] discard_slab+0x29/0x40 [ 103.346270][ T4224] __slab_free+0x201/0x280 [ 103.350704][ T4224] ___cache_free+0xbf/0xd0 [ 103.355163][ T4224] qlist_free_all+0xc6/0x140 [ 103.359787][ T4224] kasan_quarantine_reduce+0x14a/0x170 [ 103.365261][ T4224] __kasan_slab_alloc+0x24/0x80 [ 103.370129][ T4224] slab_post_alloc_hook+0x4f/0x2d0 [ 103.375263][ T4224] kmem_cache_alloc+0x166/0x320 [ 103.380142][ T4224] getname_flags+0xba/0x510 [ 103.384677][ T4224] __se_sys_newfstatat+0x127/0x440 [ 103.389815][ T4224] __x64_sys_newfstatat+0x9b/0xb0 [ 103.394989][ T4224] x64_sys_call+0x77c/0x9a0 [ 103.399528][ T4224] [ 103.401867][ T4224] Memory state around the buggy address: [ 103.407591][ T4224] ffff8881216faf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.415659][ T4224] ffff8881216faf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.423725][ T4224] >ffff8881216fb000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.431792][ T4224] ^ [ 103.439250][ T4224] ffff8881216fb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.447317][ T4224] ffff8881216fb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.455382][ T4224] ================================================================== [ 103.463445][ T4224] Disabling lock debugging due to kernel taint [ 103.520850][ T4224] ------------[ cut here ]------------ [ 103.526358][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 103.536646][ T4224] Modules linked in: [ 103.540570][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 103.549437][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.559514][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 103.565356][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 103.584990][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 103.591089][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 103.599087][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 103.607088][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 103.615086][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 103.623090][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 103.631131][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 103.640096][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.646714][ T4224] CR2: 00007ffc2a7af000 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 103.654718][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.662711][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.670706][ T4224] Call Trace: [ 103.674011][ T4224] [ 103.676969][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 103.682627][ T4224] ? __kasan_check_write+0x14/0x20 [ 103.687760][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 103.692449][ T4224] rb_buffer_peek+0x5f/0x930 [ 103.697055][ T4224] ring_buffer_consume+0x1aa/0x370 [ 103.702179][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 103.707859][ T4224] ? print_trace_line+0x393/0x6b0 [ 103.712917][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 103.717877][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 103.723350][ T4224] vfs_read+0x286/0x930 [ 103.727520][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 103.732205][ T4224] ? __kasan_check_write+0x14/0x20 [ 103.737356][ T4224] ? mutex_lock+0x93/0x1b0 [ 103.741784][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 103.746653][ T4224] ? __fdget_pos+0x2cd/0x380 [ 103.751264][ T4224] ? ksys_read+0x70/0x260 [ 103.755625][ T4224] ksys_read+0x14a/0x260 [ 103.759913][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 103.764692][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 103.770350][ T4224] __x64_sys_read+0x7b/0x90 [ 103.774880][ T4224] x64_sys_call+0x2f/0x9a0 [ 103.779320][ T4224] do_syscall_64+0x4c/0xa0 [ 103.783764][ T4224] ? clear_bhb_loop+0x30/0x80 [ 103.788475][ T4224] ? clear_bhb_loop+0x30/0x80 [ 103.793188][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.799100][ T4224] RIP: 0033:0x7feb9c39f559 [ 103.803534][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.823160][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.831584][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 103.839576][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 103.847557][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.855541][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.863519][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 103.871508][ T4224] [ 103.874534][ T4224] ---[ end trace 0000000000000000 ]--- [ 103.880063][ T4224] ------------[ cut here ]------------ [ 103.885522][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 103.895777][ T4224] Modules linked in: [ 103.899689][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 103.908545][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.918610][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 103.924437][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 103.944084][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 103.950169][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 103.958158][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 103.966142][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 103.974123][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 103.982112][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 103.990117][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 103.999059][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.005652][ T4224] CR2: 00007ffc2a7af000 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 104.013641][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.021617][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.029599][ T4224] Call Trace: [ 104.032886][ T4224] [ 104.035836][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 104.041491][ T4224] rb_advance_reader+0x2b/0x770 [ 104.046353][ T4224] ring_buffer_consume+0x1e7/0x370 [ 104.051476][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 104.057120][ T4224] ? print_trace_line+0x393/0x6b0 [ 104.062163][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 104.067126][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 104.072602][ T4224] vfs_read+0x286/0x930 [ 104.076768][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 104.081460][ T4224] ? __kasan_check_write+0x14/0x20 [ 104.086588][ T4224] ? mutex_lock+0x93/0x1b0 [ 104.091016][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 104.095884][ T4224] ? __fdget_pos+0x2cd/0x380 [ 104.100481][ T4224] ? ksys_read+0x70/0x260 [ 104.104854][ T4224] ksys_read+0x14a/0x260 [ 104.109111][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 104.113891][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 104.119539][ T4224] __x64_sys_read+0x7b/0x90 [ 104.124061][ T4224] x64_sys_call+0x2f/0x9a0 [ 104.128511][ T4224] do_syscall_64+0x4c/0xa0 [ 104.132938][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.137629][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.142333][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.148246][ T4224] RIP: 0033:0x7feb9c39f559 [ 104.152669][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.172286][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.180714][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 104.188705][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 104.196685][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.204665][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.212648][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 104.220655][ T4224] [ 104.223691][ T4224] ---[ end trace 0000000000000000 ]--- [ 104.229993][ T4224] ------------[ cut here ]------------ [ 104.230159][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.235485][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 104.235522][ T4224] Modules linked in: [ 104.235534][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 104.264595][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.274668][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 104.280499][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 104.300118][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 104.306234][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 104.314240][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 104.322226][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 104.330225][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 104.338212][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 104.346206][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 104.355183][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.361799][ T4224] CR2: 00007f95589ecc40 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 104.369891][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.377887][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.385873][ T4224] Call Trace: [ 104.389164][ T4224] [ 104.392131][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 104.397791][ T4224] ? __schedule+0xcbb/0x1700 [ 104.402400][ T4224] ? __kasan_check_write+0x14/0x20 [ 104.407536][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 104.412227][ T4224] rb_buffer_peek+0x5f/0x930 [ 104.416841][ T4224] ring_buffer_peek+0x184/0x3b0 [ 104.421716][ T4224] ? __kasan_check_read+0x11/0x20 [ 104.426753][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 104.432163][ T4224] ? _find_next_bit+0x8a/0x130 [ 104.437033][ T4224] __find_next_entry+0x33c/0x6c0 [ 104.441995][ T4224] ? trace_find_next_entry+0x380/0x380 [ 104.447479][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 104.453132][ T4224] ? print_trace_line+0x393/0x6b0 [ 104.458184][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 104.463162][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 104.468642][ T4224] vfs_read+0x286/0x930 [ 104.472829][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 104.477526][ T4224] ? __kasan_check_write+0x14/0x20 [ 104.482658][ T4224] ? mutex_lock+0x93/0x1b0 [ 104.487101][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 104.491974][ T4224] ? __fdget_pos+0x2cd/0x380 [ 104.496607][ T4224] ? ksys_read+0x70/0x260 [ 104.500965][ T4224] ksys_read+0x14a/0x260 [ 104.505222][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 104.509996][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 104.515645][ T4224] __x64_sys_read+0x7b/0x90 [ 104.520162][ T4224] x64_sys_call+0x2f/0x9a0 [ 104.524595][ T4224] do_syscall_64+0x4c/0xa0 [ 104.529018][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.533720][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.538422][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.544352][ T4224] RIP: 0033:0x7feb9c39f559 [ 104.548787][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.568411][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.576854][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 104.584841][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 104.592826][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.600813][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.608802][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 104.616790][ T4224] [ 104.619823][ T4224] ---[ end trace 0000000000000000 ]--- [ 104.626628][ T4224] ------------[ cut here ]------------ [ 104.632132][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 104.642439][ T4224] Modules linked in: [ 104.646385][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 104.655265][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.665345][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 104.671164][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 104.690786][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 104.696863][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 104.704842][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 104.712826][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 104.720825][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 104.728803][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 104.736801][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 104.745755][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.752340][ T4224] CR2: 00007f95573f6ff8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 104.760317][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.768289][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.776275][ T4224] Call Trace: [ 104.779577][ T4224] [ 104.782514][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 104.788158][ T4224] ? __kasan_check_write+0x14/0x20 [ 104.793282][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 104.797995][ T4224] rb_buffer_peek+0x5f/0x930 [ 104.802588][ T4224] ring_buffer_consume+0x1aa/0x370 [ 104.807706][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 104.813338][ T4224] ? print_trace_line+0x393/0x6b0 [ 104.818364][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 104.823309][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 104.828774][ T4224] vfs_read+0x286/0x930 [ 104.832933][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 104.837613][ T4224] ? __kasan_check_write+0x14/0x20 [ 104.842741][ T4224] ? mutex_lock+0x93/0x1b0 [ 104.847162][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 104.852015][ T4224] ? __fdget_pos+0x2cd/0x380 [ 104.856612][ T4224] ? ksys_read+0x70/0x260 [ 104.860940][ T4224] ksys_read+0x14a/0x260 [ 104.865181][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 104.869950][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 104.875602][ T4224] __x64_sys_read+0x7b/0x90 [ 104.880121][ T4224] x64_sys_call+0x2f/0x9a0 [ 104.884556][ T4224] do_syscall_64+0x4c/0xa0 [ 104.888997][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.893673][ T4224] ? clear_bhb_loop+0x30/0x80 [ 104.898353][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.904246][ T4224] RIP: 0033:0x7feb9c39f559 [ 104.908662][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.928267][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.936686][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 104.944662][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 104.952650][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.960647][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.968632][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 104.976611][ T4224] [ 104.979626][ T4224] ---[ end trace 0000000000000000 ]--- [ 104.985132][ T4224] ------------[ cut here ]------------ [ 104.990592][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 105.000834][ T4224] Modules linked in: [ 105.004729][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 105.013570][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.023628][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 105.029447][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 105.049058][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 105.055129][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 105.063110][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 105.071084][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 105.079073][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 105.087051][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 105.095029][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 105.103955][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.110547][ T4224] CR2: 00007f95573f6ff8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 105.118521][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.126492][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.134466][ T4224] Call Trace: [ 105.137744][ T4224] [ 105.140702][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 105.146351][ T4224] rb_advance_reader+0x2b/0x770 [ 105.151214][ T4224] ring_buffer_consume+0x1e7/0x370 [ 105.156335][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 105.161988][ T4224] ? print_trace_line+0x393/0x6b0 [ 105.167024][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 105.171990][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 105.177459][ T4224] vfs_read+0x286/0x930 [ 105.181636][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 105.186311][ T4224] ? __kasan_check_write+0x14/0x20 [ 105.191445][ T4224] ? mutex_lock+0x93/0x1b0 [ 105.195871][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 105.200777][ T4224] ? __fdget_pos+0x2cd/0x380 [ 105.205386][ T4224] ? ksys_read+0x70/0x260 [ 105.209737][ T4224] ksys_read+0x14a/0x260 [ 105.213980][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 105.218760][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 105.224396][ T4224] __x64_sys_read+0x7b/0x90 [ 105.228900][ T4224] x64_sys_call+0x2f/0x9a0 [ 105.233319][ T4224] do_syscall_64+0x4c/0xa0 [ 105.237757][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.242438][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.247116][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.253027][ T4224] RIP: 0033:0x7feb9c39f559 [ 105.257440][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.277055][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.285492][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 105.293475][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 105.301449][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.309421][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.317409][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 105.325409][ T4224] [ 105.328448][ T4224] ---[ end trace 0000000000000000 ]--- [ 105.334651][ T4224] ------------[ cut here ]------------ [ 105.340158][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 105.350439][ T4224] Modules linked in: [ 105.354351][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 105.363212][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.373292][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 105.379132][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 105.398751][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 105.404841][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 105.412831][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 105.420815][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 105.428803][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 105.436816][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 105.444800][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 105.453756][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.460352][ T4224] CR2: 00007f95573f6ff8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 105.468338][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.476326][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.484311][ T4224] Call Trace: [ 105.487604][ T4224] [ 105.490569][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 105.496225][ T4224] ? __schedule+0xcbb/0x1700 [ 105.500833][ T4224] ? __kasan_check_write+0x14/0x20 [ 105.505962][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 105.510651][ T4224] rb_buffer_peek+0x5f/0x930 [ 105.515264][ T4224] ring_buffer_peek+0x184/0x3b0 [ 105.520124][ T4224] ? __kasan_check_read+0x11/0x20 [ 105.525164][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 105.530549][ T4224] ? _find_next_bit+0x8a/0x130 [ 105.535333][ T4224] __find_next_entry+0x33c/0x6c0 [ 105.540295][ T4224] ? trace_find_next_entry+0x380/0x380 [ 105.545782][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 105.551429][ T4224] ? print_trace_line+0x393/0x6b0 [ 105.556465][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 105.561426][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 105.566987][ T4224] vfs_read+0x286/0x930 [ 105.571163][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 105.575853][ T4224] ? __kasan_check_write+0x14/0x20 [ 105.580974][ T4224] ? mutex_lock+0x93/0x1b0 [ 105.585409][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 105.590273][ T4224] ? __fdget_pos+0x2cd/0x380 [ 105.594878][ T4224] ? ksys_read+0x70/0x260 [ 105.599227][ T4224] ksys_read+0x14a/0x260 [ 105.603487][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 105.608266][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 105.613917][ T4224] __x64_sys_read+0x7b/0x90 [ 105.618439][ T4224] x64_sys_call+0x2f/0x9a0 [ 105.622898][ T4224] do_syscall_64+0x4c/0xa0 [ 105.627346][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.632069][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.636772][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.642687][ T4224] RIP: 0033:0x7feb9c39f559 [ 105.647127][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.666763][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.675202][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 105.683191][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 105.691174][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.699159][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.707139][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 105.715126][ T4224] [ 105.718162][ T4224] ---[ end trace 0000000000000000 ]--- [ 105.725709][ T4224] ------------[ cut here ]------------ [ 105.731206][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 105.741492][ T4224] Modules linked in: [ 105.745410][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 105.754276][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.764340][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 105.770172][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 105.789809][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 105.795897][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 105.803900][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 105.811887][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 105.819898][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 105.827896][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 105.835890][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 105.844840][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.851442][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 105.859425][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.867434][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.875426][ T4224] Call Trace: [ 105.878724][ T4224] [ 105.881670][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 105.887322][ T4224] ? __kasan_check_write+0x14/0x20 [ 105.892453][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 105.897146][ T4224] rb_buffer_peek+0x5f/0x930 [ 105.901752][ T4224] ring_buffer_consume+0x1aa/0x370 [ 105.906890][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 105.912534][ T4224] ? print_trace_line+0x393/0x6b0 [ 105.917572][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 105.922535][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 105.928015][ T4224] vfs_read+0x286/0x930 [ 105.932193][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 105.936888][ T4224] ? __kasan_check_write+0x14/0x20 [ 105.942018][ T4224] ? mutex_lock+0x93/0x1b0 [ 105.946457][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 105.951322][ T4224] ? __fdget_pos+0x2cd/0x380 [ 105.955926][ T4224] ? ksys_read+0x70/0x260 [ 105.960288][ T4224] ksys_read+0x14a/0x260 [ 105.964550][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 105.969335][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 105.974993][ T4224] __x64_sys_read+0x7b/0x90 [ 105.979511][ T4224] x64_sys_call+0x2f/0x9a0 [ 105.983948][ T4224] do_syscall_64+0x4c/0xa0 [ 105.988384][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.993076][ T4224] ? clear_bhb_loop+0x30/0x80 [ 105.997774][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.003685][ T4224] RIP: 0033:0x7feb9c39f559 [ 106.008109][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.027999][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.036470][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 106.044460][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 106.052449][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.060458][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.068444][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 106.076534][ T4224] [ 106.079573][ T4224] ---[ end trace 0000000000000000 ]--- [ 106.085093][ T4224] ------------[ cut here ]------------ [ 106.090561][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 106.100830][ T4224] Modules linked in: [ 106.104845][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 106.113708][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.123787][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 106.129621][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 106.149368][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 106.155460][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 106.163452][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 106.171462][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 106.179450][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 106.187449][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 106.195433][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 106.204386][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.210998][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 106.218999][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.226990][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.234978][ T4224] Call Trace: [ 106.238278][ T4224] [ 106.241235][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 106.246941][ T4224] rb_advance_reader+0x2b/0x770 [ 106.251811][ T4224] ring_buffer_consume+0x1e7/0x370 [ 106.256942][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 106.262654][ T4224] ? print_trace_line+0x393/0x6b0 [ 106.267726][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 106.272704][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 106.278281][ T4224] vfs_read+0x286/0x930 [ 106.282456][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 106.287170][ T4224] ? __kasan_check_write+0x14/0x20 [ 106.292302][ T4224] ? mutex_lock+0x93/0x1b0 [ 106.296737][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 106.301611][ T4224] ? __fdget_pos+0x2cd/0x380 [ 106.306217][ T4224] ? ksys_read+0x70/0x260 [ 106.310562][ T4224] ksys_read+0x14a/0x260 [ 106.314824][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 106.319599][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 106.325251][ T4224] __x64_sys_read+0x7b/0x90 [ 106.329800][ T4224] x64_sys_call+0x2f/0x9a0 [ 106.334246][ T4224] do_syscall_64+0x4c/0xa0 [ 106.338674][ T4224] ? clear_bhb_loop+0x30/0x80 [ 106.343368][ T4224] ? clear_bhb_loop+0x30/0x80 [ 106.348085][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.353997][ T4224] RIP: 0033:0x7feb9c39f559 [ 106.358427][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.378052][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.386506][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 106.394584][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 106.402600][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.410591][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.418583][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 106.426578][ T4224] [ 106.429613][ T4224] ---[ end trace 0000000000000000 ]--- [ 106.435806][ T4224] ------------[ cut here ]------------ [ 106.441324][ T575] EXT4-fs (loop5): unmounting filesystem. [ 106.441308][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 106.457442][ T4224] Modules linked in: [ 106.461360][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 106.470223][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.480293][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 106.486120][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 106.505766][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010006 [ 106.511849][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 106.519857][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 106.527842][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 106.535825][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 106.543809][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 106.551884][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 106.560831][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.567431][ T4224] CR2: 00007f95573f6ff8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 106.575426][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.583417][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.591400][ T4224] Call Trace: [ 106.594695][ T4224] [ 106.597648][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 106.603390][ T4224] ? __schedule+0xcbb/0x1700 [ 106.608084][ T4224] ? __kasan_check_write+0x14/0x20 [ 106.613217][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 106.617909][ T4224] rb_buffer_peek+0x5f/0x930 [ 106.622512][ T4224] ring_buffer_peek+0x184/0x3b0 [ 106.627381][ T4224] ? __kasan_check_read+0x11/0x20 [ 106.632422][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 106.637902][ T4224] ? _find_next_bit+0x8a/0x130 [ 106.642688][ T4224] __find_next_entry+0x33c/0x6c0 [ 106.647657][ T4224] ? trace_find_next_entry+0x380/0x380 [ 106.653144][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 106.658796][ T4224] ? print_trace_line+0x393/0x6b0 [ 106.663832][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 106.668792][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 106.674272][ T4224] vfs_read+0x286/0x930 [ 106.678444][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 106.683134][ T4224] ? __kasan_check_write+0x14/0x20 [ 106.688262][ T4224] ? mutex_lock+0x93/0x1b0 [ 106.692718][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 106.697596][ T4224] ? __fdget_pos+0x2cd/0x380 [ 106.702202][ T4224] ? ksys_read+0x70/0x260 [ 106.706551][ T4224] ksys_read+0x14a/0x260 [ 106.710819][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 106.715609][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 106.721263][ T4224] __x64_sys_read+0x7b/0x90 [ 106.725782][ T4224] x64_sys_call+0x2f/0x9a0 [ 106.730218][ T4224] do_syscall_64+0x4c/0xa0 [ 106.734648][ T4224] ? clear_bhb_loop+0x30/0x80 [ 106.739343][ T4224] ? clear_bhb_loop+0x30/0x80 [ 106.744037][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.749950][ T4224] RIP: 0033:0x7feb9c39f559 [ 106.754376][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.773995][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.782424][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 106.790414][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 106.798420][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.806415][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.814401][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 106.822396][ T4224] [ 106.825454][ T4224] ---[ end trace 0000000000000000 ]--- [ 106.833036][ T4224] ------------[ cut here ]------------ [ 106.838541][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 106.848827][ T4224] Modules linked in: [ 106.852835][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 106.861716][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.871801][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 106.877638][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 106.897273][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 106.903357][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 106.911346][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 106.919335][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 106.927328][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 106.935311][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 106.943298][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 106.952266][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.958866][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 106.966859][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.974840][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.982836][ T4224] Call Trace: [ 106.986129][ T4224] [ 106.989079][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 106.994734][ T4224] ? __kasan_check_write+0x14/0x20 [ 106.999862][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 107.004549][ T4224] rb_buffer_peek+0x5f/0x930 [ 107.009162][ T4224] ring_buffer_consume+0x1aa/0x370 [ 107.014285][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 107.019930][ T4224] ? print_trace_line+0x393/0x6b0 [ 107.024977][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 107.029959][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 107.035535][ T4224] vfs_read+0x286/0x930 [ 107.039708][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 107.044489][ T4224] ? __kasan_check_write+0x14/0x20 [ 107.049620][ T4224] ? mutex_lock+0x93/0x1b0 [ 107.054082][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 107.058948][ T4224] ? __fdget_pos+0x2cd/0x380 [ 107.063553][ T4224] ? ksys_read+0x70/0x260 [ 107.067921][ T4224] ksys_read+0x14a/0x260 [ 107.072179][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 107.076981][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 107.082630][ T4224] __x64_sys_read+0x7b/0x90 [ 107.087151][ T4224] x64_sys_call+0x2f/0x9a0 [ 107.091592][ T4224] do_syscall_64+0x4c/0xa0 [ 107.096025][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.100727][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.105438][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.111371][ T4224] RIP: 0033:0x7feb9c39f559 [ 107.115801][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.135422][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.143876][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 107.151869][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 107.159861][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.167899][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.175900][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 107.183915][ T4224] [ 107.186960][ T4224] ---[ end trace 0000000000000000 ]--- [ 107.192483][ T4224] ------------[ cut here ]------------ [ 107.197944][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 107.208208][ T4224] Modules linked in: [ 107.212116][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 107.220980][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.231045][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 107.236880][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 107.256499][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 107.262595][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 107.270592][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 107.278574][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 107.286561][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 107.294551][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 107.302539][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 107.311490][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.318093][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 107.326081][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.334068][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.342049][ T4224] Call Trace: [ 107.345337][ T4224] [ 107.348290][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 107.353954][ T4224] rb_advance_reader+0x2b/0x770 [ 107.358845][ T4224] ring_buffer_consume+0x1e7/0x370 [ 107.364071][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 107.369727][ T4224] ? print_trace_line+0x393/0x6b0 [ 107.374772][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 107.379738][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 107.385217][ T4224] vfs_read+0x286/0x930 [ 107.389414][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 107.394109][ T4224] ? __kasan_check_write+0x14/0x20 [ 107.399238][ T4224] ? mutex_lock+0x93/0x1b0 [ 107.403683][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 107.408553][ T4224] ? __fdget_pos+0x2cd/0x380 [ 107.413192][ T4224] ? ksys_read+0x70/0x260 [ 107.417536][ T4224] ksys_read+0x14a/0x260 [ 107.421799][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 107.426580][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 107.432234][ T4224] __x64_sys_read+0x7b/0x90 [ 107.436753][ T4224] x64_sys_call+0x2f/0x9a0 [ 107.441191][ T4224] do_syscall_64+0x4c/0xa0 [ 107.445624][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.450327][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.455051][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.460968][ T4224] RIP: 0033:0x7feb9c39f559 [ 107.465432][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.485059][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.493492][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 107.501480][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 107.509467][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.517451][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.525436][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 107.533441][ T4224] [ 107.536495][ T4224] ---[ end trace 0000000000000000 ]--- [ 107.545409][ T308] tipc: Left network mode [ 107.557627][ T4224] ------------[ cut here ]------------ [ 107.563124][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 107.573444][ T4224] Modules linked in: [ 107.577371][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 107.586289][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.596372][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 107.602230][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 107.621868][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 107.627990][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 107.636133][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 107.644134][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 107.652140][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 107.660143][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 107.668158][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 107.677118][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.683818][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 107.691826][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.699824][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.707824][ T4224] Call Trace: [ 107.711129][ T4224] [ 107.714088][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 107.719754][ T4224] ? __schedule+0xcbb/0x1700 [ 107.724380][ T4224] ? __kasan_check_write+0x14/0x20 [ 107.729525][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 107.734314][ T4224] rb_buffer_peek+0x5f/0x930 [ 107.738938][ T4224] ring_buffer_peek+0x184/0x3b0 [ 107.743826][ T4224] ? __kasan_check_read+0x11/0x20 [ 107.748893][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 107.754306][ T4224] ? _find_next_bit+0x8a/0x130 [ 107.759110][ T4224] __find_next_entry+0x33c/0x6c0 [ 107.764111][ T4224] ? trace_find_next_entry+0x380/0x380 [ 107.769642][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 107.775308][ T4224] ? print_trace_line+0x393/0x6b0 [ 107.780371][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 107.785356][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 107.790853][ T4224] vfs_read+0x286/0x930 [ 107.795036][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 107.799741][ T4224] ? __kasan_check_write+0x14/0x20 [ 107.804909][ T4224] ? mutex_lock+0x93/0x1b0 [ 107.809381][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 107.814280][ T4224] ? __fdget_pos+0x2cd/0x380 [ 107.818920][ T4224] ? ksys_read+0x70/0x260 [ 107.823279][ T4224] ksys_read+0x14a/0x260 [ 107.827552][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 107.832349][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 107.838024][ T4224] __x64_sys_read+0x7b/0x90 [ 107.842644][ T4224] x64_sys_call+0x2f/0x9a0 [ 107.847099][ T4224] do_syscall_64+0x4c/0xa0 [ 107.851558][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.856274][ T4224] ? clear_bhb_loop+0x30/0x80 [ 107.860991][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.866925][ T4224] RIP: 0033:0x7feb9c39f559 [ 107.871379][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.891017][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.899475][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 107.907476][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 107.915475][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 107.923479][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.931477][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 107.939484][ T4224] [ 107.942526][ T4224] ---[ end trace 0000000000000000 ]--- [ 107.950531][ T4224] ------------[ cut here ]------------ [ 107.956025][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 107.966290][ T4224] Modules linked in: [ 107.970194][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 107.979057][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.989209][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 107.995060][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 108.014769][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 108.020858][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 108.028856][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 108.036860][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 108.044867][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 108.052859][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 108.060849][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 108.069883][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.076483][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 108.084492][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.092484][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.100468][ T4224] Call Trace: [ 108.103771][ T4224] [ 108.106722][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 108.112378][ T4224] ? __kasan_check_write+0x14/0x20 [ 108.117510][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 108.122202][ T4224] rb_buffer_peek+0x5f/0x930 [ 108.126825][ T4224] ring_buffer_consume+0x1aa/0x370 [ 108.131974][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 108.137671][ T4224] ? print_trace_line+0x393/0x6b0 [ 108.142713][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 108.147679][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 108.153166][ T4224] vfs_read+0x286/0x930 [ 108.157345][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 108.162060][ T4224] ? __kasan_check_write+0x14/0x20 [ 108.167292][ T4224] ? mutex_lock+0x93/0x1b0 [ 108.171823][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 108.176700][ T4224] ? __fdget_pos+0x2cd/0x380 [ 108.181312][ T4224] ? ksys_read+0x70/0x260 [ 108.185685][ T4224] ksys_read+0x14a/0x260 [ 108.189942][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 108.194734][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 108.200558][ T4224] __x64_sys_read+0x7b/0x90 [ 108.205075][ T4224] x64_sys_call+0x2f/0x9a0 [ 108.209517][ T4224] do_syscall_64+0x4c/0xa0 [ 108.213948][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.218658][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.223361][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.229277][ T4224] RIP: 0033:0x7feb9c39f559 [ 108.233713][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.253337][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.261772][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 108.269760][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 108.277748][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.285755][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.293742][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 108.301730][ T4224] [ 108.304764][ T4224] ---[ end trace 0000000000000000 ]--- [ 108.310286][ T4224] ------------[ cut here ]------------ [ 108.315753][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 108.326013][ T4224] Modules linked in: [ 108.329914][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 108.338768][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.348833][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 108.354667][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 108.374393][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 108.380486][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 108.388488][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 108.396503][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 108.404516][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 108.412505][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 108.420500][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 108.429447][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.436047][ T4224] CR2: 00007f9158ff62f8 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 108.444042][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.452032][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.460026][ T4224] Call Trace: [ 108.463335][ T4224] [ 108.466286][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 108.471944][ T4224] rb_advance_reader+0x2b/0x770 [ 108.476810][ T4224] ring_buffer_consume+0x1e7/0x370 [ 108.481963][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 108.487615][ T4224] ? print_trace_line+0x393/0x6b0 [ 108.492658][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 108.497639][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 108.503123][ T4224] vfs_read+0x286/0x930 [ 108.507301][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 108.512014][ T4224] ? __kasan_check_write+0x14/0x20 [ 108.517152][ T4224] ? mutex_lock+0x93/0x1b0 [ 108.521587][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 108.526458][ T4224] ? __fdget_pos+0x2cd/0x380 [ 108.531092][ T4224] ? ksys_read+0x70/0x260 [ 108.535442][ T4224] ksys_read+0x14a/0x260 [ 108.539722][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 108.544505][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 108.550158][ T4224] __x64_sys_read+0x7b/0x90 [ 108.554680][ T4224] x64_sys_call+0x2f/0x9a0 [ 108.559156][ T4224] do_syscall_64+0x4c/0xa0 [ 108.563595][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.568291][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.572989][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.578897][ T4224] RIP: 0033:0x7feb9c39f559 [ 108.583326][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.602947][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.611378][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 108.619385][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 108.627380][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.635369][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.643354][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 108.651351][ T4224] [ 108.654376][ T4224] ---[ end trace 0000000000000000 ]--- [ 108.660488][ T4224] ------------[ cut here ]------------ [ 108.665979][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 108.676271][ T4224] Modules linked in: [ 108.680201][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 108.689170][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.699264][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 108.705116][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 108.724771][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010012 [ 108.730877][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 108.738880][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 108.746887][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 108.754889][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 108.762909][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 108.770910][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 108.779874][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.786514][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 108.794606][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.802614][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.810627][ T4224] Call Trace: [ 108.813954][ T4224] [ 108.816925][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 108.822703][ T4224] ? __schedule+0xcbb/0x1700 [ 108.827330][ T4224] ? __kasan_check_write+0x14/0x20 [ 108.832478][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 108.837193][ T4224] rb_buffer_peek+0x5f/0x930 [ 108.841825][ T4224] ring_buffer_peek+0x184/0x3b0 [ 108.846708][ T4224] ? __kasan_check_read+0x11/0x20 [ 108.851764][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 108.857171][ T4224] ? _find_next_bit+0x8a/0x130 [ 108.861973][ T4224] __find_next_entry+0x33c/0x6c0 [ 108.866961][ T4224] ? trace_find_next_entry+0x380/0x380 [ 108.872470][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 108.878133][ T4224] ? print_trace_line+0x393/0x6b0 [ 108.883532][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 108.888516][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 108.894007][ T4224] vfs_read+0x286/0x930 [ 108.898192][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 108.902893][ T4224] ? __kasan_check_write+0x14/0x20 [ 108.908042][ T4224] ? mutex_lock+0x93/0x1b0 [ 108.912488][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 108.917391][ T4224] ? __fdget_pos+0x2cd/0x380 [ 108.922032][ T4224] ? ksys_read+0x70/0x260 [ 108.926397][ T4224] ksys_read+0x14a/0x260 [ 108.930671][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 108.935466][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 108.941136][ T4224] __x64_sys_read+0x7b/0x90 [ 108.945668][ T4224] x64_sys_call+0x2f/0x9a0 [ 108.950121][ T4224] do_syscall_64+0x4c/0xa0 [ 108.954559][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.959283][ T4224] ? clear_bhb_loop+0x30/0x80 [ 108.963998][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.969931][ T4224] RIP: 0033:0x7feb9c39f559 [ 108.974402][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.994062][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.002510][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 109.010594][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 109.018610][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.026629][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.034631][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 109.042644][ T4224] [ 109.045698][ T4224] ---[ end trace 0000000000000000 ]--- [ 109.053459][ T4224] ------------[ cut here ]------------ [ 109.058956][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 109.069268][ T4224] Modules linked in: [ 109.073200][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 109.082173][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.092262][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 109.098121][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 109.117773][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 109.123876][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 109.131885][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 109.139970][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 109.147980][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 109.156004][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 109.164016][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.172990][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.179614][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 109.187626][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.195652][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.203670][ T4224] Call Trace: [ 109.206984][ T4224] [ 109.209962][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 109.215643][ T4224] ? __kasan_check_write+0x14/0x20 [ 109.220796][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 109.225556][ T4224] rb_buffer_peek+0x5f/0x930 [ 109.230190][ T4224] ring_buffer_consume+0x1aa/0x370 [ 109.235344][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 109.241030][ T4224] ? print_trace_line+0x393/0x6b0 [ 109.246088][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 109.251074][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 109.256568][ T4224] vfs_read+0x286/0x930 [ 109.260776][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 109.265596][ T4224] ? __kasan_check_write+0x14/0x20 [ 109.270846][ T4224] ? mutex_lock+0x93/0x1b0 [ 109.275301][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 109.280201][ T4224] ? __fdget_pos+0x2cd/0x380 [ 109.284821][ T4224] ? ksys_read+0x70/0x260 [ 109.289189][ T4224] ksys_read+0x14a/0x260 [ 109.293463][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 109.298258][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 109.303926][ T4224] __x64_sys_read+0x7b/0x90 [ 109.308462][ T4224] x64_sys_call+0x2f/0x9a0 [ 109.312914][ T4224] do_syscall_64+0x4c/0xa0 [ 109.317358][ T4224] ? clear_bhb_loop+0x30/0x80 [ 109.322075][ T4224] ? clear_bhb_loop+0x30/0x80 [ 109.326798][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.332725][ T4224] RIP: 0033:0x7feb9c39f559 [ 109.337175][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.356833][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.365292][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 109.373293][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 109.381291][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.389315][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.397313][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 109.405309][ T4224] [ 109.408340][ T4224] ---[ end trace 0000000000000000 ]--- [ 109.413855][ T4224] ------------[ cut here ]------------ [ 109.419340][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 109.429602][ T4224] Modules linked in: [ 109.433514][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 109.442394][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.452550][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 109.458397][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 109.478015][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 109.484100][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 109.492084][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 109.500076][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 109.508070][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 109.516062][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 109.524050][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.533000][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.539598][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 109.547585][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.555568][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.563556][ T4224] Call Trace: [ 109.566850][ T4224] [ 109.569826][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 109.575487][ T4224] rb_advance_reader+0x2b/0x770 [ 109.580357][ T4224] ring_buffer_consume+0x1e7/0x370 [ 109.585493][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 109.591144][ T4224] ? print_trace_line+0x393/0x6b0 [ 109.596181][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 109.601145][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 109.606623][ T4224] vfs_read+0x286/0x930 [ 109.610796][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 109.615490][ T4224] ? __kasan_check_write+0x14/0x20 [ 109.620621][ T4224] ? mutex_lock+0x93/0x1b0 [ 109.625058][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 109.629948][ T4224] ? __fdget_pos+0x2cd/0x380 [ 109.634563][ T4224] ? ksys_read+0x70/0x260 [ 109.638913][ T4224] ksys_read+0x14a/0x260 [ 109.643169][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 109.647953][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 109.653601][ T4224] __x64_sys_read+0x7b/0x90 [ 109.658115][ T4224] x64_sys_call+0x2f/0x9a0 [ 109.662548][ T4224] do_syscall_64+0x4c/0xa0 [ 109.666978][ T4224] ? clear_bhb_loop+0x30/0x80 [ 109.671679][ T4224] ? clear_bhb_loop+0x30/0x80 [ 109.676378][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.682291][ T4224] RIP: 0033:0x7feb9c39f559 [ 109.686734][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.706356][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.714816][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 109.722827][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 109.730810][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.738801][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.746783][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 109.754798][ T4224] [ 109.757830][ T4224] ---[ end trace 0000000000000000 ]--- [ 109.763677][ T4224] ------------[ cut here ]------------ [ 109.769161][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 109.779446][ T4224] Modules linked in: [ 109.783377][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 109.792253][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.802351][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 109.808198][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 109.827831][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 109.833929][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 109.841951][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 109.849949][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 109.857947][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 109.865949][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 109.873958][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.884248][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.890861][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 109.898886][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.906906][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.915027][ T4224] Call Trace: [ 109.918355][ T4224] [ 109.921317][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 109.926986][ T4224] ? __schedule+0xcbb/0x1700 [ 109.931613][ T4224] ? __kasan_check_write+0x14/0x20 [ 109.936756][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 109.941465][ T4224] rb_buffer_peek+0x5f/0x930 [ 109.946090][ T4224] ring_buffer_peek+0x184/0x3b0 [ 109.950966][ T4224] ? __kasan_check_read+0x11/0x20 [ 109.956075][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 109.961482][ T4224] ? _find_next_bit+0x8a/0x130 [ 109.966285][ T4224] __find_next_entry+0x33c/0x6c0 [ 109.971265][ T4224] ? trace_find_next_entry+0x380/0x380 [ 109.976795][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 109.982465][ T4224] ? print_trace_line+0x393/0x6b0 [ 109.987522][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 109.992494][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 109.997982][ T4224] vfs_read+0x286/0x930 [ 110.002163][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 110.006868][ T4224] ? __kasan_check_write+0x14/0x20 [ 110.012017][ T4224] ? mutex_lock+0x93/0x1b0 [ 110.016515][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 110.021423][ T4224] ? __fdget_pos+0x2cd/0x380 [ 110.026047][ T4224] ? ksys_read+0x70/0x260 [ 110.030409][ T4224] ksys_read+0x14a/0x260 [ 110.034721][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 110.039523][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 110.045194][ T4224] __x64_sys_read+0x7b/0x90 [ 110.049735][ T4224] x64_sys_call+0x2f/0x9a0 [ 110.054187][ T4224] do_syscall_64+0x4c/0xa0 [ 110.058627][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.063364][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.068075][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.074008][ T4224] RIP: 0033:0x7feb9c39f559 [ 110.078456][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.098088][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.106526][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 110.114553][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 110.122555][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.130550][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.138552][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 110.146650][ T4224] [ 110.149719][ T4224] ---[ end trace 0000000000000000 ]--- [ 110.155555][ T4224] ------------[ cut here ]------------ [ 110.161038][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 110.171325][ T4224] Modules linked in: [ 110.175246][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 110.184130][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.194207][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 110.200087][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 110.219723][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 110.225818][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 110.233815][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 110.241819][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 110.249845][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 110.257873][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 110.265895][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 110.274882][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.281521][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 110.289544][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.297553][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.305553][ T4224] Call Trace: [ 110.308858][ T4224] [ 110.311822][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 110.317497][ T4224] ? __kasan_check_write+0x14/0x20 [ 110.322642][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 110.327352][ T4224] rb_buffer_peek+0x5f/0x930 [ 110.331976][ T4224] ring_buffer_consume+0x1aa/0x370 [ 110.337124][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 110.342797][ T4224] ? print_trace_line+0x393/0x6b0 [ 110.347855][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 110.352833][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 110.358332][ T4224] vfs_read+0x286/0x930 [ 110.362535][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 110.367286][ T4224] ? __kasan_check_write+0x14/0x20 [ 110.372448][ T4224] ? mutex_lock+0x93/0x1b0 [ 110.376906][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 110.381890][ T4224] ? __fdget_pos+0x2cd/0x380 [ 110.386545][ T4224] ? ksys_read+0x70/0x260 [ 110.390917][ T4224] ksys_read+0x14a/0x260 [ 110.395207][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 110.400010][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 110.405680][ T4224] __x64_sys_read+0x7b/0x90 [ 110.410215][ T4224] x64_sys_call+0x2f/0x9a0 [ 110.414684][ T4224] do_syscall_64+0x4c/0xa0 [ 110.419154][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.423877][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.428600][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.434537][ T4224] RIP: 0033:0x7feb9c39f559 [ 110.438986][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.458814][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.467362][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 110.475369][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 110.483378][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.491381][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.499391][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 110.507405][ T4224] [ 110.510446][ T4224] ---[ end trace 0000000000000000 ]--- [ 110.516001][ T4224] ------------[ cut here ]------------ [ 110.521474][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 110.531761][ T4224] Modules linked in: [ 110.535707][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 110.544617][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.554700][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 110.560570][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 110.580218][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 110.586343][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 110.594352][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 110.602370][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 110.610388][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 110.618396][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 110.626406][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 110.635417][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.642043][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 110.650048][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.658045][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.666049][ T4224] Call Trace: [ 110.669363][ T4224] [ 110.672329][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 110.678006][ T4224] rb_advance_reader+0x2b/0x770 [ 110.682897][ T4224] ring_buffer_consume+0x1e7/0x370 [ 110.688045][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 110.693726][ T4224] ? print_trace_line+0x393/0x6b0 [ 110.698787][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 110.703766][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 110.709285][ T4224] vfs_read+0x286/0x930 [ 110.713475][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 110.718185][ T4224] ? __kasan_check_write+0x14/0x20 [ 110.723335][ T4224] ? mutex_lock+0x93/0x1b0 [ 110.727789][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 110.732672][ T4224] ? __fdget_pos+0x2cd/0x380 [ 110.737312][ T4224] ? ksys_read+0x70/0x260 [ 110.741684][ T4224] ksys_read+0x14a/0x260 [ 110.745961][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 110.750758][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 110.756429][ T4224] __x64_sys_read+0x7b/0x90 [ 110.760968][ T4224] x64_sys_call+0x2f/0x9a0 [ 110.765420][ T4224] do_syscall_64+0x4c/0xa0 [ 110.769891][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.774609][ T4224] ? clear_bhb_loop+0x30/0x80 [ 110.779323][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.785258][ T4224] RIP: 0033:0x7feb9c39f559 [ 110.789718][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.809354][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.817806][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 110.825807][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 110.833807][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.841811][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.849816][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 110.857846][ T4224] [ 110.860892][ T4224] ---[ end trace 0000000000000000 ]--- [ 110.866726][ T4224] ------------[ cut here ]------------ [ 110.872230][ T4224] WARNING: CPU: 1 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 110.882507][ T4224] Modules linked in: [ 110.886428][ T4224] CPU: 1 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 110.895284][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.905348][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 110.911179][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 110.930978][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 110.937067][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 110.945059][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 110.953052][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 110.961042][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 110.969034][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 110.977025][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 110.985983][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.992605][ T4224] CR2: 000055555e4de4e8 CR3: 000000011a3a1000 CR4: 00000000003506a0 [ 111.000603][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.008589][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.017046][ T4224] Call Trace: [ 111.020342][ T4224] [ 111.023293][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 111.028951][ T4224] ? __schedule+0xcbb/0x1700 [ 111.033578][ T4224] ? __kasan_check_write+0x14/0x20 [ 111.038709][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 111.043609][ T4224] rb_buffer_peek+0x5f/0x930 [ 111.048306][ T4224] ring_buffer_peek+0x184/0x3b0 [ 111.053178][ T4224] ? __kasan_check_read+0x11/0x20 [ 111.058228][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 111.063621][ T4224] ? _find_next_bit+0x8a/0x130 [ 111.068424][ T4224] __find_next_entry+0x33c/0x6c0 [ 111.073561][ T4224] ? trace_find_next_entry+0x380/0x380 [ 111.079048][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 111.084714][ T4224] ? print_trace_line+0x393/0x6b0 [ 111.089776][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 111.094739][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 111.100232][ T4224] vfs_read+0x286/0x930 [ 111.104415][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 111.109118][ T4224] ? __kasan_check_write+0x14/0x20 [ 111.114263][ T4224] ? mutex_lock+0x93/0x1b0 [ 111.118705][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 111.123577][ T4224] ? __fdget_pos+0x2cd/0x380 [ 111.128276][ T4224] ? ksys_read+0x70/0x260 [ 111.132626][ T4224] ksys_read+0x14a/0x260 [ 111.136883][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 111.141681][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 111.147333][ T4224] __x64_sys_read+0x7b/0x90 [ 111.151855][ T4224] x64_sys_call+0x2f/0x9a0 [ 111.156286][ T4224] do_syscall_64+0x4c/0xa0 [ 111.160714][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.165416][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.170118][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.176025][ T4224] RIP: 0033:0x7feb9c39f559 [ 111.180461][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.200104][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.208542][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 111.216529][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 111.224516][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.232509][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.240490][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 111.248477][ T4224] [ 111.251516][ T4224] ---[ end trace 0000000000000000 ]--- [ 111.264915][ T4224] ------------[ cut here ]------------ [ 111.270451][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 111.280744][ T4224] Modules linked in: [ 111.284662][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 111.293542][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.303661][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 111.309570][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 111.329327][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 111.335445][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 111.343447][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 111.351475][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 111.359489][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 111.367493][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 111.375501][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 111.384474][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.391107][ T4224] CR2: 00007f56c5f41e80 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 111.399137][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.407156][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.415176][ T4224] Call Trace: [ 111.418505][ T4224] [ 111.421501][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 111.427275][ T4224] ? __kasan_check_write+0x14/0x20 [ 111.432431][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 111.437147][ T4224] rb_buffer_peek+0x5f/0x930 [ 111.441772][ T4224] ring_buffer_consume+0x1aa/0x370 [ 111.446958][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 111.452641][ T4224] ? print_trace_line+0x393/0x6b0 [ 111.457693][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 111.462697][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 111.468196][ T4224] vfs_read+0x286/0x930 [ 111.472392][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 111.477100][ T4224] ? __kasan_check_write+0x14/0x20 [ 111.482251][ T4224] ? mutex_lock+0x93/0x1b0 [ 111.486698][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 111.491583][ T4224] ? __fdget_pos+0x2cd/0x380 [ 111.496201][ T4224] ? ksys_read+0x70/0x260 [ 111.500564][ T4224] ksys_read+0x14a/0x260 [ 111.504841][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 111.509636][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 111.515300][ T4224] __x64_sys_read+0x7b/0x90 [ 111.519836][ T4224] x64_sys_call+0x2f/0x9a0 [ 111.524299][ T4224] do_syscall_64+0x4c/0xa0 [ 111.528773][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.533523][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.538258][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.544192][ T4224] RIP: 0033:0x7feb9c39f559 [ 111.548655][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.568288][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.576738][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 111.584734][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 111.592753][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.600746][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.608743][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 111.616760][ T4224] [ 111.619800][ T4224] ---[ end trace 0000000000000000 ]--- [ 111.625346][ T4224] ------------[ cut here ]------------ [ 111.630812][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 111.641089][ T4224] Modules linked in: [ 111.645010][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 111.653884][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.663960][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 111.669808][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 111.689467][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010006 [ 111.695575][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 111.703578][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 111.711577][ T4224] RBP: ffffc9000dbefab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 111.719571][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 111.727574][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 111.735571][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 111.744531][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.751141][ T4224] CR2: 00007f56c5f41e80 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 111.759159][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.767161][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.775160][ T4224] Call Trace: [ 111.778464][ T4224] [ 111.781424][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 111.787102][ T4224] rb_advance_reader+0x2b/0x770 [ 111.791988][ T4224] ring_buffer_consume+0x1e7/0x370 [ 111.797134][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 111.802799][ T4224] ? print_trace_line+0x393/0x6b0 [ 111.807861][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 111.812840][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 111.818337][ T4224] vfs_read+0x286/0x930 [ 111.822548][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 111.827256][ T4224] ? __kasan_check_write+0x14/0x20 [ 111.832397][ T4224] ? mutex_lock+0x93/0x1b0 [ 111.836849][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 111.841737][ T4224] ? __fdget_pos+0x2cd/0x380 [ 111.846357][ T4224] ? ksys_read+0x70/0x260 [ 111.850719][ T4224] ksys_read+0x14a/0x260 [ 111.854991][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 111.859788][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 111.865460][ T4224] __x64_sys_read+0x7b/0x90 [ 111.870008][ T4224] x64_sys_call+0x2f/0x9a0 [ 111.874464][ T4224] do_syscall_64+0x4c/0xa0 [ 111.878910][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.883623][ T4224] ? clear_bhb_loop+0x30/0x80 [ 111.888356][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.894295][ T4224] RIP: 0033:0x7feb9c39f559 [ 111.898754][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.918393][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.926842][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 111.934849][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 111.942860][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.950857][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.958849][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 111.966941][ T4224] [ 111.969983][ T4224] ---[ end trace 0000000000000000 ]--- [ 111.982430][ T4224] ------------[ cut here ]------------ [ 111.987923][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 111.998214][ T4224] Modules linked in: [ 112.002135][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 112.011031][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.021130][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 112.026985][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 112.046624][ T4224] RSP: 0018:ffffc9000dbef820 EFLAGS: 00010002 [ 112.052745][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 112.060771][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 112.068774][ T4224] RBP: ffffc9000dbef990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 112.076778][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 112.084776][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 112.092773][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 112.101731][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.108338][ T4224] CR2: 00007f56c5f41e80 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 112.116341][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.124357][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.132357][ T4224] Call Trace: [ 112.135657][ T4224] [ 112.138615][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 112.144288][ T4224] ? __schedule+0xcbb/0x1700 [ 112.148921][ T4224] ? __kasan_check_write+0x14/0x20 [ 112.154063][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 112.158774][ T4224] rb_buffer_peek+0x5f/0x930 [ 112.163398][ T4224] ring_buffer_peek+0x184/0x3b0 [ 112.168287][ T4224] ? __kasan_check_read+0x11/0x20 [ 112.173351][ T4224] ? __cfi_ring_buffer_peek+0x10/0x10 [ 112.178754][ T4224] ? _find_next_bit+0x8a/0x130 [ 112.183550][ T4224] __find_next_entry+0x33c/0x6c0 [ 112.188529][ T4224] ? trace_find_next_entry+0x380/0x380 [ 112.194025][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 112.199683][ T4224] ? print_trace_line+0x393/0x6b0 [ 112.204730][ T4224] tracing_read_pipe+0x3d2/0xaf0 [ 112.209700][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 112.215212][ T4224] vfs_read+0x286/0x930 [ 112.219399][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 112.224102][ T4224] ? __kasan_check_write+0x14/0x20 [ 112.229247][ T4224] ? mutex_lock+0x93/0x1b0 [ 112.233692][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 112.238574][ T4224] ? __fdget_pos+0x2cd/0x380 [ 112.243197][ T4224] ? ksys_read+0x70/0x260 [ 112.247569][ T4224] ksys_read+0x14a/0x260 [ 112.251839][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 112.256626][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 112.262289][ T4224] __x64_sys_read+0x7b/0x90 [ 112.266824][ T4224] x64_sys_call+0x2f/0x9a0 [ 112.271270][ T4224] do_syscall_64+0x4c/0xa0 [ 112.275734][ T4224] ? clear_bhb_loop+0x30/0x80 [ 112.280448][ T4224] ? clear_bhb_loop+0x30/0x80 [ 112.285161][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.291096][ T4224] RIP: 0033:0x7feb9c39f559 [ 112.295556][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.315200][ T4224] RSP: 002b:00007feb9d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.323643][ T4224] RAX: ffffffffffffffda RBX: 00007feb9c625fa0 RCX: 00007feb9c39f559 [ 112.331635][ T4224] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000004 [ 112.339632][ T4224] RBP: 00007feb9c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.347738][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.355734][ T4224] R13: 00007feb9c626038 R14: 00007feb9c625fa0 R15: 00007ffdb6080828 [ 112.363742][ T4224] [ 112.366781][ T4224] ---[ end trace 0000000000000000 ]--- [ 112.375508][ T4224] ------------[ cut here ]------------ [ 112.381000][ T4224] WARNING: CPU: 0 PID: 4224 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 112.391373][ T4224] Modules linked in: [ 112.395288][ T4224] CPU: 0 PID: 4224 Comm: syz.4.1678 Tainted: G B W syzkaller #0 [ 112.404171][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.414250][ T4224] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 112.420101][ T4224] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 112.439741][ T4224] RSP: 0018:ffffc9000dbef940 EFLAGS: 00010002 [ 112.445836][ T4224] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 112.453837][ T4224] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 112.461839][ T4224] RBP: ffffc9000dbefab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 112.469844][ T4224] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 112.477839][ T4224] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 0000000000000fec [ 112.485836][ T4224] FS: 00007feb9d2816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 112.494801][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.501397][ T4224] CR2: 00007f56c5f41e80 CR3: 000000011a3a1000 CR4: 00000000003506b0 [ 112.509388][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.517377][ T4224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.525360][ T4224] Call Trace: [ 112.528646][ T4224] [ 112.531600][ T4224] ? ring_buffer_read_page+0x1260/0x1260 [ 112.537252][ T4224] ? __kasan_check_write+0x14/0x20 [ 112.542408][ T4224] ? _raw_spin_lock+0x94/0xf0 [ 112.547100][ T4224] rb_buffer_peek+0x5f/0x930 [ 112.551709][ T4224] ring_buffer_consume+0x1aa/0x370 [ 112.556836][ T4224] ? __cfi_ring_buffer_consume+0x10/0x10 [ 112.562504][ T4224] ? print_trace_line+0x393/0x6b0 [ 112.567560][ T4224] tracing_read_pipe+0x5b3/0xaf0 [ 112.572519][ T4224] ? __cfi_tracing_read_pipe+0x10/0x10 [ 112.577994][ T4224] vfs_read+0x286/0x930 [ 112.582171][ T4224] ? __cfi_vfs_read+0x10/0x10 [ 112.586870][ T4224] ? __kasan_check_write+0x14/0x20 [ 112.591997][ T4224] ? mutex_lock+0x93/0x1b0 [ 112.596424][ T4224] ? __cfi_mutex_lock+0x10/0x10 [ 112.601298][ T4224] ? __fdget_pos+0x2cd/0x380 [ 112.605916][ T4224] ? ksys_read+0x70/0x260 [ 112.610261][ T4224] ksys_read+0x14a/0x260 [ 112.614521][ T4224] ? __cfi_ksys_read+0x10/0x10 [ 112.619305][ T4224] ? fpregs_restore_userregs+0x128/0x260 [ 112.624961][ T4224] __x64_sys_read+0x7b/0x90 [ 112.629477][ T4224] x64_sys_call+0x2f/0x9a0 [ 112.633928][ T4224] do_syscall_64+0x4c/0xa0 [ 112.638360][ T4224] ? clear_bhb_loop+0x30/0x80 [ 112.643054][ T4224] ? clear_bhb_loop+0x30/0x80 [ 112.647757][ T4224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.653666][ T4224] RIP: 0033:0x7feb9c39f559