last executing test programs:

2m9.406078606s ago: executing program 2 (id=37):
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40009, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180001d9e012232200030000000000000000000000770000da642b024c5117284e41fbbc831899810ab69daca4b44fede334f3b287351797ef5f82ae9e80d70abe6be1966a94c06e4923cc70fb99e598ba48d5e968c683f493416831de08d158ff7038392e56aea048a8c028f108b2f77913eaba597dbad6"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@newtfilter={0x254c, 0x2c, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x3}, {0x10, 0xffe0}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x2510, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xfff3}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_ACT={0x128, 0x1, [@m_skbmod={0x124, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x9, 0x4, 0x9, 0x2}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x80000001, 0x0, 0x8, 0x8}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x96, 0x6, "be154dea3733e865cd233f02701ba581f2574d601a68c6a8ac8147ae47f814ee13db3431081c2e5d649991570a78608267188ba9bdef5f69a07b84077fe35008bff6c615c1c249e725a5d7d14647f6f9468413dbdc6eef2f496c893b0db0f9a6be5b32c72a985aac2ecbdc3fbf9092e8e717a4a7a34fb93469529c127cc5dea98eab2857ad68da015bb2d7d46bfbb4413585"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xd0, 0x3, 0x9, 0x356c0777}, {0xfffb, 0xb, 0x5, 0x7}, {0xff00, 0x6, 0x6, 0x10}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x0, 0xb, 0xfa, 0x8}, {0x3, 0x5, 0xc, 0x7fffffff}, {0x7, 0x7, 0x2, 0x5}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_POLICE={0x81c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x5, 0x1, 0x7, 0x3, 0x1adf610b, 0xe6, 0xff, 0x0, 0x101, 0x7, 0x5, 0x7, 0x5, 0x0, 0x0, 0x9, 0x800, 0x9, 0x8, 0x7, 0x5, 0x3a98269, 0x2, 0x20000000, 0x9, 0x0, 0x7, 0x6, 0x5, 0x4, 0x2, 0x9, 0x8fbe, 0x7, 0x6, 0x1, 0x3, 0xb1ba, 0x80000001, 0x4, 0x40, 0xfffffc00, 0x0, 0x6, 0x3, 0x4, 0x1, 0x8, 0x0, 0x5, 0xb7, 0x5, 0xb66, 0x5, 0x200, 0xff, 0x0, 0x4, 0x9, 0x6, 0x1, 0x80000001, 0x8, 0xffffffc0, 0x5, 0x2, 0xff, 0x6, 0x9, 0xb52, 0x8, 0x2, 0x8, 0x434b, 0x4, 0x7, 0x6, 0x6, 0x6, 0x200, 0xe, 0xe0, 0xe8d1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3, 0x2, 0x2, 0x9, 0x0, 0x4, 0x7f, 0x7f, 0x2a3a, 0xfffffffa, 0x6, 0x401, 0x1, 0x7d6, 0x80000001, 0x80000000, 0x130b, 0x8, 0x3fc0, 0x2, 0x100, 0x40, 0x9, 0xef4a, 0x9, 0x8000, 0x3, 0x4, 0xa, 0x5, 0x7, 0x200, 0x3, 0x6, 0x5, 0x6db, 0x2, 0x10001, 0x3, 0xb6f0, 0xa, 0x2, 0x8, 0x36c1, 0x7, 0xe41d, 0x80000000, 0x0, 0x1, 0x3, 0x40000000, 0x6, 0x6, 0x7, 0x6, 0x80000001, 0x1000, 0x7, 0x1, 0x6, 0x2, 0x6, 0x6662f8bc, 0x3, 0x9, 0x2, 0x8, 0x3, 0x5d, 0x0, 0x9, 0x8, 0x8000, 0x8, 0x800, 0x4, 0x9, 0x3, 0x183d0de5, 0x5, 0x8001, 0x72261646, 0x3, 0x401, 0x800, 0xfff, 0x9, 0x6, 0x7, 0x6, 0x300000, 0xc, 0x1d, 0x7, 0x3, 0x3, 0x3, 0x6, 0x0, 0x2, 0x7, 0xffffffff, 0x6a9, 0x7, 0x1, 0x9, 0x7ff, 0xa6, 0x2, 0x100, 0x2b16, 0x6, 0x583d, 0x7ff, 0x1, 0x9, 0x4, 0xffffffff, 0x12a5bd7d, 0x7fffffff, 0x5, 0x5, 0x82, 0x3, 0x1, 0x3, 0x9, 0x4, 0x7, 0xba6, 0x90, 0x0, 0x3c, 0x6, 0x9, 0x9, 0xd9a, 0x40, 0x971, 0x4, 0x100, 0x0, 0x7, 0x3ff, 0x7, 0x8, 0x6, 0x0, 0x9, 0x200, 0x6, 0x6, 0x9, 0x7, 0x1000, 0xfffc0000, 0x200, 0x80000001, 0x1000, 0x8, 0x3, 0x2, 0x5, 0x4, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x9, 0x6, 0x8, 0x8, 0x2, 0x9, 0x7fffffff, 0x1, 0x5, 0x7f, 0x5, 0x866f, 0xffffffec, 0xfffffff7, 0x4, 0x1, 0xfffff001, 0x6, 0xffffffff, 0x78610ff5, 0x8, 0x6c31, 0x8, 0x3, 0xfff, 0x1ff, 0x80, 0x9, 0xf13, 0x5, 0x1, 0x6, 0xe9eb, 0x2, 0x2, 0x2, 0xfff, 0xfffffffc, 0x3, 0x1, 0x600, 0x2, 0x81, 0x8, 0xa46, 0x5c, 0x3, 0x400, 0x7fff, 0x0, 0xffffffff, 0x9, 0x4, 0x1000, 0x9, 0x9, 0x10001, 0xc, 0x3, 0x80000000, 0xa30, 0xd, 0xf9f, 0x0, 0x1200, 0x2, 0xb, 0x9, 0x0, 0x0, 0x2, 0xe, 0x5, 0x1, 0x4, 0xfffffffc, 0x4, 0x7, 0x7, 0xe, 0x9, 0x5, 0x0, 0x1, 0x6, 0x7, 0x857, 0x2, 0x1fe, 0x100, 0x40000, 0xb2, 0x2, 0x7, 0x6, 0xd, 0x1712, 0x5, 0x1, 0x10001, 0x6, 0xa2, 0x9, 0xffffffff, 0xa, 0x9, 0x7, 0x3, 0x2, 0x401, 0x6, 0x7, 0x8, 0xf, 0x6886da05, 0x4, 0x3, 0x1, 0x2, 0x4, 0x7, 0x4, 0xf, 0x9, 0x3, 0xb1df, 0x2, 0x5, 0x1, 0x6, 0x9, 0x2, 0xa7, 0xf, 0x189, 0x6, 0x5, 0x10001, 0x1, 0x8, 0x0, 0x7, 0x63, 0xff, 0x8, 0x1cf, 0x5, 0x200, 0x20000, 0x9, 0x9, 0x0, 0xffffffff, 0x3, 0x8, 0xf, 0xfffffffd, 0x3, 0xbec, 0x8000000, 0x4, 0x3, 0xb9, 0x7fffffff, 0x7, 0x9, 0x0, 0x3, 0x70e7, 0x0, 0x8, 0xb, 0x9, 0xf2c, 0x6, 0x3, 0xa118, 0x4, 0x0, 0x3, 0xa829, 0x7, 0x9, 0x2f9e, 0x2, 0x9, 0xfffffff7, 0x6, 0xf, 0xac, 0x4, 0x4, 0x4, 0x7fffffff, 0x7, 0x0, 0x2, 0x8, 0x4f0f, 0x7, 0x200, 0x1, 0x7, 0x0, 0x8, 0x8, 0x5, 0x2, 0x6, 0x4, 0x1, 0xa0d, 0x0, 0x3ff, 0x2, 0x7, 0x8, 0x1, 0x6, 0xfff, 0x2, 0xa, 0x6, 0xff, 0x7fffffff, 0x9, 0x9, 0x400, 0x3, 0x6, 0x7, 0x4, 0x9, 0x6, 0x101, 0x7, 0x3, 0xe974, 0x9, 0xfffffffb, 0x1, 0x0, 0x6, 0x7, 0x3, 0x0, 0x8, 0xffffffff, 0x0, 0xf8, 0x100, 0x8001, 0x6, 0x62]}]}, @TCA_BPF_ACT={0x12d0, 0x1, [@m_mirred={0x1110, 0x8, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfff, 0x0, 0x9, 0xfffffff9}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x2, 0x0, 0x2, 0x80000000}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1ff, 0x10000000, 0x5, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf0, 0xfffffffc, 0x5, 0x4, 0x31}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x6, 0xffffffffffffffff, 0x9, 0x6}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2e53, 0xffffffffffffffff, 0x3ff, 0xffffcbd3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xbed, 0x34524f7c246210fa, 0x9, 0x7}, 0x1, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x110, 0x8, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0xd9, 0x6, "f8d8d0e289d4525312ce3f94d39344f8279676399945b577dfa31f024cbd0c2a8d3f52fea87dc64c5970ae99e4315b38727079ce3def7f82e087f365cfb9c3a46320ad19852268ee901280ae88eb9b3b6c8f6f4977a89a133b8ee876d384378fff9b356920502b121e2a96b96323663eed8b182044e7c43be1448b44af6ad5bfb7176a3a6b7e9f40f78ef673fa495ad5ce80b6fa601ffb23dbc60797921b529e25e12613f98e31a343e94d236b65cc6982d2fdaf4af2549975c31f25cd1f5847318e7e6395a24b38bc8f5f3ddd61f8dc5ddcdd5ea2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xac, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8c, 0x20000000, 0xd, 0x10}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4d, 0x6, "7cc65624653cd00d9c298192fd1d0c5b0a715be18c9d529caf58c71553ef09efd5854f6ac570f7b9669ed6dcf98df63c96d28af33120dbce5ade1d3787f9d60b2021623e5e99f9b246"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x898, 0x1, [@m_police={0x530, 0x11, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8450, 0x80, 0x7, 0x8, 0x7, 0x8, 0x1, 0x5, 0x6, 0x1, 0x40, 0x8, 0x7fffffff, 0x3, 0x6, 0x5, 0x52, 0x8, 0x12000000, 0x3, 0x0, 0xd, 0x7, 0xad7, 0x8, 0x100, 0xffff, 0x7, 0x9, 0x7, 0x5, 0x1f1, 0x2, 0x3, 0x700000, 0x6, 0xb7, 0x1, 0xfff, 0x0, 0x70000000, 0x0, 0x6, 0xffffffff, 0x3, 0x8, 0x1, 0x4000000, 0x4ea, 0xb4, 0x80000000, 0x0, 0xfffffffa, 0x1dd, 0xffff, 0x2, 0x80000001, 0x6, 0xffff, 0xe8a, 0x2, 0x2, 0x4, 0x1955, 0x80, 0x4, 0x0, 0x3ff, 0x4, 0xffff, 0x8, 0x22, 0x9, 0x4, 0x1ff, 0x5, 0x5, 0x1, 0x1ff, 0x8, 0x5, 0x4, 0x200, 0x2a3, 0x4, 0x6, 0x45, 0x5, 0x2, 0x6, 0x0, 0x9, 0x45f3, 0xfffffffa, 0x1, 0x4, 0x5, 0x225, 0x3, 0x88, 0x1, 0xa, 0x800, 0x0, 0x7a, 0x6, 0xfffffffd, 0x1, 0x2, 0x4, 0x300, 0x1c0000, 0x7f, 0x8, 0x0, 0xff, 0x9, 0x40, 0x4, 0x8, 0x4, 0x6, 0x8001, 0xffffffff, 0x6, 0xdb, 0x5, 0x2, 0xc, 0x0, 0xe39, 0x58f, 0x8, 0x0, 0x8000, 0x0, 0x9, 0xfffffffe, 0x6, 0x8001, 0xb945, 0x3, 0x8a3f, 0x3, 0xbede, 0x9, 0xbf33, 0x9, 0x1, 0xd, 0x8000, 0x6, 0x0, 0x7, 0x9, 0x7, 0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x3, 0x4, 0x8, 0x10000, 0x9, 0x2, 0xfffff2fc, 0x5, 0x9, 0x2, 0x8000, 0x40, 0x5, 0x0, 0x9, 0x4, 0xc0, 0x8, 0x8, 0x0, 0x72a40105, 0xc76, 0x101, 0x3, 0x53b2, 0x2, 0x9, 0xfff, 0x29f7, 0x3, 0x0, 0xc, 0xc10a, 0x4, 0x6, 0xf, 0x6, 0x9, 0x2, 0x9, 0x81, 0x2, 0x8, 0x4, 0xfffffffb, 0x9, 0x3, 0x6, 0x400, 0xf821, 0x40, 0x6f57, 0x8, 0x1, 0x1, 0xe, 0x1, 0x9, 0x6c, 0x5fb, 0x1, 0x8, 0x8, 0x6, 0x3, 0xe0, 0x7, 0x2, 0x9, 0x0, 0x6, 0x8, 0x8001, 0x3, 0xdd9, 0xffff, 0x3, 0x1, 0x9, 0x2, 0x3ff, 0x2, 0x1, 0xffff, 0x9, 0x0, 0x3, 0xffffffff, 0x4, 0x77, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x9, 0x6, 0x7ff, {0x9, 0x1, 0x1, 0x7, 0x6, 0x6}, {0x4, 0x1, 0xe, 0x3, 0x1, 0x9}, 0x8, 0x1, 0x5e58b9c1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000006, 0x3, 0x8, 0x5, {0x9f, 0x0, 0x7f, 0x2, 0x6, 0x100000}, {0x4a, 0x2, 0x7, 0x3, 0x8000, 0xdd4}, 0xfffffff7, 0xa}}]]}, {0x80, 0x6, "30293d449ae986f0831d2eb912dec3d61e692422487c0eb5c0549941a181d7d5ba9bac3ca876bf486ff637f73e0ea3a1a949d878e373dcf6320fc0e5f948545fff7c15c7eb1c8e8892386a5b6c995ec8c3cb79ca49a872775facea46f6c83487b44b982a81f4ff31e34b6860e44e90693ff4e8a450bb31735948f7ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xc0, 0xa, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x76, 0x6, "54e2b4c2aa901b7a98f5a6dc38b8eff72f919edde64e114fa256929ad29b976a1f42c434bc4765a3cf4f69e7ab94e5a10cf68438f5c6d60d21bd1c87c509faa9431555759a2aa053439e060c0e4936c0662ccb1a2951d84154b253b54307b843dd292cf1af00ba9cca2b52226cd863f97805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x16, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb1e35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0xf, 0x0, 0x5}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x29, 0x6, "1b61060d67fd5290cb6345226a38faca3f8c434e60dcdc77c8023d0a00af3feb995f956587"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x220, 0x10, 0x0, 0x0, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x7, 0x5, 0xcc}, {0xa000, 0x7, 0x8, 0x80}, {0x9, 0x80, 0xa, 0x67}, {0x7, 0xf6, 0x1, 0x7}, {0x10, 0xd, 0xe6, 0x9}, {0x9, 0x57, 0x2, 0xfffffffb}]}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x1000, 0xe, 0x0, 0x5e7f}, {0x40, 0x2, 0x2, 0x1}, {0x7, 0x4, 0x9, 0xec1f}, {0x7fff, 0xfc, 0x1e, 0x6}, {0x7, 0xd, 0xc0, 0xfff}, {0x4, 0x2, 0x4, 0x1}, {0x9, 0x0, 0x6, 0xdd}, {0x6, 0x1f, 0x0, 0x7}, {0x4, 0x80, 0x1, 0x5}, {0xde9, 0x1, 0xf, 0x10001}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x5f, 0x6, "b6ffe8298cb3d28659471e116316025842bb82f3c29c1f901e5d207e00932f08e4eba568aa1b22e27f3e1f39b0da1b6047f4604a06123dd95d7f783b742b60b5e85115426f80565e8f319d53a7e2d33838e3677999698471e05df5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x254c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000b80), 0x1, 0x474, &(0x7f0000000500)="$eJzs3MtvG0UYAPBvN3bSJwmoPPoAAgVR8UiatJQeuIBA4gASEhzKMSRpVZo2qAkSrSoICJUjqsQdcUTiL+AEFwScKnGFO6pUoV5aOBmtvds4juPGxqmT+veTNp7ZR2Y+7856ZidOAH1rNPuRROyKiD8iYriWXbnDaO3l1o1L0//cuDSdRKXyzt9Jdb+bNy5NF7sWx+0sMqWI9Isk9jcpd+HCxTNTc3Oz5/P8+OLZD8cXLlx84fTZqVOzp2bPTR4/fvTIxEvHJl9sXvHt7cWZxXVz3yfzB/a+8d6Vt6ZPXHn/1++TIv6GOLpktNXGpyuVLhfXW7vr0kmp+rLUs8qwbgO1ZhrlavsfjoEo3d42HK9/3tPKARuqUqlUHlq9Or+Fx1IFuIcl0esaAL1RfOBn499iuZv9j167/kptAJTFfStfaltKkUbtOUa5YXzbTaMRcWLp32+yJdp/DrFtg6oFANzDfsz6P8836/+lUf9c6L58DmUkIu6PiAci4lhE7ImIByOq+z4cEY+0WX7jJElW/sqZkfRaZ5GtT9b/ezmf28qW8nK5RWJkIM/trsZfTk6enps9nL8nh6I8lOUnWpTx02u/f7XWtvr+X7ZkdSj6gnk9rpWGVh4zM7U41XHADa5/FrGvtBz/cv83uT0TkETE3ojY12EZp5/97sBa2+4cfwulDitUp/JtxDO1878UDfEXktbzk+PbYm728HhxVaz229XLb69V/v+Kvwuy878jmp//3EhSP1+70H4Zl//8cs0xzYr4i+HMqus/WRqqG+xk1/9g8u6K3/Px1OLi+YmIweTNWqXr10827De5vH8W/6GDefyD9fGn1Xtc8U7sj4jsIn40Ih6LiMfzuj8REU9GxMEW8f/y6lMf3Dn+ytDq87/xw7ss/pm2zv9yYjAa1zRPDJz5+YcVhY40i7/V/e9oNXUoX7OO+9/V9dSrs6sZAAAAtp40InZFko7dTqfp2Fjtb/j3xI50bn5h8bmT8x+dm6l9R2AkymnxpGu47nnoRD6sL/KTDfkj+XPjrwe2V/Nj0/NzM70OHvrczjXaf+avgV7XDthwXZhHA7Yo7R/6l/YP/Uv7h/7VpP23+e91gK2q2ef/p2vuXd7QugB3V0P7N+0HfcT4H/qX9g/9S/uHvrSwPe78Jfk+SZQ7PHwwfy83RxR3KxHppqjG5k+U2z1qc1xIPb4xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMl/AQAA//+ZdtvW")
open(&(0x7f0000000140)='.\x00', 0x0, 0x0) (async)
flock(r0, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40009, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180001d9e012232200030000000000000000000000770000da642b024c5117284e41fbbc831899810ab69daca4b44fede334f3b287351797ef5f82ae9e80d70abe6be1966a94c06e4923cc70fb99e598ba48d5e968c683f493416831de08d158ff7038392e56aea048a8c028f108b2f77913eaba597dbad6"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syz_tun\x00'}) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@newtfilter={0x254c, 0x2c, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x3}, {0x10, 0xffe0}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x2510, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xfff3}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_ACT={0x128, 0x1, [@m_skbmod={0x124, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x9, 0x4, 0x9, 0x2}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x80000001, 0x0, 0x8, 0x8}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x96, 0x6, "be154dea3733e865cd233f02701ba581f2574d601a68c6a8ac8147ae47f814ee13db3431081c2e5d649991570a78608267188ba9bdef5f69a07b84077fe35008bff6c615c1c249e725a5d7d14647f6f9468413dbdc6eef2f496c893b0db0f9a6be5b32c72a985aac2ecbdc3fbf9092e8e717a4a7a34fb93469529c127cc5dea98eab2857ad68da015bb2d7d46bfbb4413585"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xd0, 0x3, 0x9, 0x356c0777}, {0xfffb, 0xb, 0x5, 0x7}, {0xff00, 0x6, 0x6, 0x10}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x0, 0xb, 0xfa, 0x8}, {0x3, 0x5, 0xc, 0x7fffffff}, {0x7, 0x7, 0x2, 0x5}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_POLICE={0x81c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x5, 0x1, 0x7, 0x3, 0x1adf610b, 0xe6, 0xff, 0x0, 0x101, 0x7, 0x5, 0x7, 0x5, 0x0, 0x0, 0x9, 0x800, 0x9, 0x8, 0x7, 0x5, 0x3a98269, 0x2, 0x20000000, 0x9, 0x0, 0x7, 0x6, 0x5, 0x4, 0x2, 0x9, 0x8fbe, 0x7, 0x6, 0x1, 0x3, 0xb1ba, 0x80000001, 0x4, 0x40, 0xfffffc00, 0x0, 0x6, 0x3, 0x4, 0x1, 0x8, 0x0, 0x5, 0xb7, 0x5, 0xb66, 0x5, 0x200, 0xff, 0x0, 0x4, 0x9, 0x6, 0x1, 0x80000001, 0x8, 0xffffffc0, 0x5, 0x2, 0xff, 0x6, 0x9, 0xb52, 0x8, 0x2, 0x8, 0x434b, 0x4, 0x7, 0x6, 0x6, 0x6, 0x200, 0xe, 0xe0, 0xe8d1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3, 0x2, 0x2, 0x9, 0x0, 0x4, 0x7f, 0x7f, 0x2a3a, 0xfffffffa, 0x6, 0x401, 0x1, 0x7d6, 0x80000001, 0x80000000, 0x130b, 0x8, 0x3fc0, 0x2, 0x100, 0x40, 0x9, 0xef4a, 0x9, 0x8000, 0x3, 0x4, 0xa, 0x5, 0x7, 0x200, 0x3, 0x6, 0x5, 0x6db, 0x2, 0x10001, 0x3, 0xb6f0, 0xa, 0x2, 0x8, 0x36c1, 0x7, 0xe41d, 0x80000000, 0x0, 0x1, 0x3, 0x40000000, 0x6, 0x6, 0x7, 0x6, 0x80000001, 0x1000, 0x7, 0x1, 0x6, 0x2, 0x6, 0x6662f8bc, 0x3, 0x9, 0x2, 0x8, 0x3, 0x5d, 0x0, 0x9, 0x8, 0x8000, 0x8, 0x800, 0x4, 0x9, 0x3, 0x183d0de5, 0x5, 0x8001, 0x72261646, 0x3, 0x401, 0x800, 0xfff, 0x9, 0x6, 0x7, 0x6, 0x300000, 0xc, 0x1d, 0x7, 0x3, 0x3, 0x3, 0x6, 0x0, 0x2, 0x7, 0xffffffff, 0x6a9, 0x7, 0x1, 0x9, 0x7ff, 0xa6, 0x2, 0x100, 0x2b16, 0x6, 0x583d, 0x7ff, 0x1, 0x9, 0x4, 0xffffffff, 0x12a5bd7d, 0x7fffffff, 0x5, 0x5, 0x82, 0x3, 0x1, 0x3, 0x9, 0x4, 0x7, 0xba6, 0x90, 0x0, 0x3c, 0x6, 0x9, 0x9, 0xd9a, 0x40, 0x971, 0x4, 0x100, 0x0, 0x7, 0x3ff, 0x7, 0x8, 0x6, 0x0, 0x9, 0x200, 0x6, 0x6, 0x9, 0x7, 0x1000, 0xfffc0000, 0x200, 0x80000001, 0x1000, 0x8, 0x3, 0x2, 0x5, 0x4, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x9, 0x6, 0x8, 0x8, 0x2, 0x9, 0x7fffffff, 0x1, 0x5, 0x7f, 0x5, 0x866f, 0xffffffec, 0xfffffff7, 0x4, 0x1, 0xfffff001, 0x6, 0xffffffff, 0x78610ff5, 0x8, 0x6c31, 0x8, 0x3, 0xfff, 0x1ff, 0x80, 0x9, 0xf13, 0x5, 0x1, 0x6, 0xe9eb, 0x2, 0x2, 0x2, 0xfff, 0xfffffffc, 0x3, 0x1, 0x600, 0x2, 0x81, 0x8, 0xa46, 0x5c, 0x3, 0x400, 0x7fff, 0x0, 0xffffffff, 0x9, 0x4, 0x1000, 0x9, 0x9, 0x10001, 0xc, 0x3, 0x80000000, 0xa30, 0xd, 0xf9f, 0x0, 0x1200, 0x2, 0xb, 0x9, 0x0, 0x0, 0x2, 0xe, 0x5, 0x1, 0x4, 0xfffffffc, 0x4, 0x7, 0x7, 0xe, 0x9, 0x5, 0x0, 0x1, 0x6, 0x7, 0x857, 0x2, 0x1fe, 0x100, 0x40000, 0xb2, 0x2, 0x7, 0x6, 0xd, 0x1712, 0x5, 0x1, 0x10001, 0x6, 0xa2, 0x9, 0xffffffff, 0xa, 0x9, 0x7, 0x3, 0x2, 0x401, 0x6, 0x7, 0x8, 0xf, 0x6886da05, 0x4, 0x3, 0x1, 0x2, 0x4, 0x7, 0x4, 0xf, 0x9, 0x3, 0xb1df, 0x2, 0x5, 0x1, 0x6, 0x9, 0x2, 0xa7, 0xf, 0x189, 0x6, 0x5, 0x10001, 0x1, 0x8, 0x0, 0x7, 0x63, 0xff, 0x8, 0x1cf, 0x5, 0x200, 0x20000, 0x9, 0x9, 0x0, 0xffffffff, 0x3, 0x8, 0xf, 0xfffffffd, 0x3, 0xbec, 0x8000000, 0x4, 0x3, 0xb9, 0x7fffffff, 0x7, 0x9, 0x0, 0x3, 0x70e7, 0x0, 0x8, 0xb, 0x9, 0xf2c, 0x6, 0x3, 0xa118, 0x4, 0x0, 0x3, 0xa829, 0x7, 0x9, 0x2f9e, 0x2, 0x9, 0xfffffff7, 0x6, 0xf, 0xac, 0x4, 0x4, 0x4, 0x7fffffff, 0x7, 0x0, 0x2, 0x8, 0x4f0f, 0x7, 0x200, 0x1, 0x7, 0x0, 0x8, 0x8, 0x5, 0x2, 0x6, 0x4, 0x1, 0xa0d, 0x0, 0x3ff, 0x2, 0x7, 0x8, 0x1, 0x6, 0xfff, 0x2, 0xa, 0x6, 0xff, 0x7fffffff, 0x9, 0x9, 0x400, 0x3, 0x6, 0x7, 0x4, 0x9, 0x6, 0x101, 0x7, 0x3, 0xe974, 0x9, 0xfffffffb, 0x1, 0x0, 0x6, 0x7, 0x3, 0x0, 0x8, 0xffffffff, 0x0, 0xf8, 0x100, 0x8001, 0x6, 0x62]}]}, @TCA_BPF_ACT={0x12d0, 0x1, [@m_mirred={0x1110, 0x8, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfff, 0x0, 0x9, 0xfffffff9}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x2, 0x0, 0x2, 0x80000000}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1ff, 0x10000000, 0x5, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf0, 0xfffffffc, 0x5, 0x4, 0x31}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x6, 0xffffffffffffffff, 0x9, 0x6}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2e53, 0xffffffffffffffff, 0x3ff, 0xffffcbd3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xbed, 0x34524f7c246210fa, 0x9, 0x7}, 0x1, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x110, 0x8, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0xd9, 0x6, "f8d8d0e289d4525312ce3f94d39344f8279676399945b577dfa31f024cbd0c2a8d3f52fea87dc64c5970ae99e4315b38727079ce3def7f82e087f365cfb9c3a46320ad19852268ee901280ae88eb9b3b6c8f6f4977a89a133b8ee876d384378fff9b356920502b121e2a96b96323663eed8b182044e7c43be1448b44af6ad5bfb7176a3a6b7e9f40f78ef673fa495ad5ce80b6fa601ffb23dbc60797921b529e25e12613f98e31a343e94d236b65cc6982d2fdaf4af2549975c31f25cd1f5847318e7e6395a24b38bc8f5f3ddd61f8dc5ddcdd5ea2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xac, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8c, 0x20000000, 0xd, 0x10}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4d, 0x6, "7cc65624653cd00d9c298192fd1d0c5b0a715be18c9d529caf58c71553ef09efd5854f6ac570f7b9669ed6dcf98df63c96d28af33120dbce5ade1d3787f9d60b2021623e5e99f9b246"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x898, 0x1, [@m_police={0x530, 0x11, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8450, 0x80, 0x7, 0x8, 0x7, 0x8, 0x1, 0x5, 0x6, 0x1, 0x40, 0x8, 0x7fffffff, 0x3, 0x6, 0x5, 0x52, 0x8, 0x12000000, 0x3, 0x0, 0xd, 0x7, 0xad7, 0x8, 0x100, 0xffff, 0x7, 0x9, 0x7, 0x5, 0x1f1, 0x2, 0x3, 0x700000, 0x6, 0xb7, 0x1, 0xfff, 0x0, 0x70000000, 0x0, 0x6, 0xffffffff, 0x3, 0x8, 0x1, 0x4000000, 0x4ea, 0xb4, 0x80000000, 0x0, 0xfffffffa, 0x1dd, 0xffff, 0x2, 0x80000001, 0x6, 0xffff, 0xe8a, 0x2, 0x2, 0x4, 0x1955, 0x80, 0x4, 0x0, 0x3ff, 0x4, 0xffff, 0x8, 0x22, 0x9, 0x4, 0x1ff, 0x5, 0x5, 0x1, 0x1ff, 0x8, 0x5, 0x4, 0x200, 0x2a3, 0x4, 0x6, 0x45, 0x5, 0x2, 0x6, 0x0, 0x9, 0x45f3, 0xfffffffa, 0x1, 0x4, 0x5, 0x225, 0x3, 0x88, 0x1, 0xa, 0x800, 0x0, 0x7a, 0x6, 0xfffffffd, 0x1, 0x2, 0x4, 0x300, 0x1c0000, 0x7f, 0x8, 0x0, 0xff, 0x9, 0x40, 0x4, 0x8, 0x4, 0x6, 0x8001, 0xffffffff, 0x6, 0xdb, 0x5, 0x2, 0xc, 0x0, 0xe39, 0x58f, 0x8, 0x0, 0x8000, 0x0, 0x9, 0xfffffffe, 0x6, 0x8001, 0xb945, 0x3, 0x8a3f, 0x3, 0xbede, 0x9, 0xbf33, 0x9, 0x1, 0xd, 0x8000, 0x6, 0x0, 0x7, 0x9, 0x7, 0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x3, 0x4, 0x8, 0x10000, 0x9, 0x2, 0xfffff2fc, 0x5, 0x9, 0x2, 0x8000, 0x40, 0x5, 0x0, 0x9, 0x4, 0xc0, 0x8, 0x8, 0x0, 0x72a40105, 0xc76, 0x101, 0x3, 0x53b2, 0x2, 0x9, 0xfff, 0x29f7, 0x3, 0x0, 0xc, 0xc10a, 0x4, 0x6, 0xf, 0x6, 0x9, 0x2, 0x9, 0x81, 0x2, 0x8, 0x4, 0xfffffffb, 0x9, 0x3, 0x6, 0x400, 0xf821, 0x40, 0x6f57, 0x8, 0x1, 0x1, 0xe, 0x1, 0x9, 0x6c, 0x5fb, 0x1, 0x8, 0x8, 0x6, 0x3, 0xe0, 0x7, 0x2, 0x9, 0x0, 0x6, 0x8, 0x8001, 0x3, 0xdd9, 0xffff, 0x3, 0x1, 0x9, 0x2, 0x3ff, 0x2, 0x1, 0xffff, 0x9, 0x0, 0x3, 0xffffffff, 0x4, 0x77, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x9, 0x6, 0x7ff, {0x9, 0x1, 0x1, 0x7, 0x6, 0x6}, {0x4, 0x1, 0xe, 0x3, 0x1, 0x9}, 0x8, 0x1, 0x5e58b9c1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000006, 0x3, 0x8, 0x5, {0x9f, 0x0, 0x7f, 0x2, 0x6, 0x100000}, {0x4a, 0x2, 0x7, 0x3, 0x8000, 0xdd4}, 0xfffffff7, 0xa}}]]}, {0x80, 0x6, "30293d449ae986f0831d2eb912dec3d61e692422487c0eb5c0549941a181d7d5ba9bac3ca876bf486ff637f73e0ea3a1a949d878e373dcf6320fc0e5f948545fff7c15c7eb1c8e8892386a5b6c995ec8c3cb79ca49a872775facea46f6c83487b44b982a81f4ff31e34b6860e44e90693ff4e8a450bb31735948f7ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xc0, 0xa, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x76, 0x6, "54e2b4c2aa901b7a98f5a6dc38b8eff72f919edde64e114fa256929ad29b976a1f42c434bc4765a3cf4f69e7ab94e5a10cf68438f5c6d60d21bd1c87c509faa9431555759a2aa053439e060c0e4936c0662ccb1a2951d84154b253b54307b843dd292cf1af00ba9cca2b52226cd863f97805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x16, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb1e35}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0xf, 0x0, 0x5}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x29, 0x6, "1b61060d67fd5290cb6345226a38faca3f8c434e60dcdc77c8023d0a00af3feb995f956587"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x220, 0x10, 0x0, 0x0, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x7, 0x5, 0xcc}, {0xa000, 0x7, 0x8, 0x80}, {0x9, 0x80, 0xa, 0x67}, {0x7, 0xf6, 0x1, 0x7}, {0x10, 0xd, 0xe6, 0x9}, {0x9, 0x57, 0x2, 0xfffffffb}]}, @TCA_ACT_BPF_NAME={0x105, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x1000, 0xe, 0x0, 0x5e7f}, {0x40, 0x2, 0x2, 0x1}, {0x7, 0x4, 0x9, 0xec1f}, {0x7fff, 0xfc, 0x1e, 0x6}, {0x7, 0xd, 0xc0, 0xfff}, {0x4, 0x2, 0x4, 0x1}, {0x9, 0x0, 0x6, 0xdd}, {0x6, 0x1f, 0x0, 0x7}, {0x4, 0x80, 0x1, 0x5}, {0xde9, 0x1, 0xf, 0x10001}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x5f, 0x6, "b6ffe8298cb3d28659471e116316025842bb82f3c29c1f901e5d207e00932f08e4eba568aa1b22e27f3e1f39b0da1b6047f4604a06123dd95d7f783b742b60b5e85115426f80565e8f319d53a7e2d33838e3677999698471e05df5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x254c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000b80), 0x1, 0x474, &(0x7f0000000500)="$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") (async)

2m9.314649988s ago: executing program 2 (id=38):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = getpid()
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/if_inet6\x00')
lseek(r5, 0x80000000457, 0x0)
sched_setscheduler(r4, 0x1, 0x0)
syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4}}}}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000080)=0xc)
splice(r3, &(0x7f00000003c0)=0x8000000000000001, r5, &(0x7f0000000400), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@dev, @local}, &(0x7f0000000380)=0xc)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x9a6c51, 0x0, 0xfe, 0x0, &(0x7f0000000d40))

2m6.059973998s ago: executing program 2 (id=48):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x80ffffff, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x203ffffffffe, 0x4, 0xfffffffffffffffc, 0x60004}, {0x0, 0x200000, 0x9, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x70bd2c, 0x0, 0xa, 0x4, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast1}]}, 0x104}}, 0x8000)

2m5.940482261s ago: executing program 2 (id=52):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x3200002, &(0x7f0000000340), 0x3, 0x610, &(0x7f0000000380)="$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")
r0 = open(&(0x7f0000000a00)='.\x00', 0x8000, 0x14b)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xc, 0x2, 0x10, r0, 0x20000000)
r2 = syz_ublk_setup_io_uring(0x7505, &(0x7f0000000000)={0x0, 0xba29, 0x2, 0x2, 0x2a1}, &(0x7f0000000080), &(0x7f0000000c80), &(0x7f0000000100))
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r2}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="18ffff00", @ANYRES16=r8, @ANYBLOB="0100fcfffffffeffffff2300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48080)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000a40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ac0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000b00))
r9 = mmap$IORING_OFF_SQES(0x0, 0x7, 0xc, 0x10, r0, 0x10000000)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$pokeuser(0x6, r10, 0x388, 0x41d9fda7)
syz_ublk_add_dev(0xffffffffffffffff, r1, r5, r9, &(0x7f0000000b80)={0x2e, 0x20, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b40)=@new_dev={0x3, 0xb6a, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x54}}}, 0x0)

2m5.624045699s ago: executing program 2 (id=56):
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x4, 0xffff})
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10)
shutdown(r1, 0x2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x84, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6c4d7570c72f1718816f3da398f889c773375dbb0a34c1477e67620defd079b9152fe1c02d8f4874f4baa61368db726ef72df8834c262c5a8bbf578a50ad0bf51d8673ff755bfb", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000300)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14)
connect$inet6(r0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000380))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x0, 0x3}]})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@acquire]})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@handle={0x73682a85, 0x0, 0x0, 0x1}}}}]})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000700)})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)

2m4.818226078s ago: executing program 2 (id=64):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000006f000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2}) (async)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

2m4.634371013s ago: executing program 32 (id=64):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000006f000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2}) (async)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1m42.323598169s ago: executing program 1 (id=197):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4e, 0x0, <r0=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r1=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f00000000c0)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000580)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000080)={0x6c66, 0x1000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000004)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4096, 0x1e28}, {&(0x7f0000001680)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="180000005e79b46682b01d80492a8a77e039c92f1cb4ba8005c89bdd78c7e407309595b23fb2ff5f1f3ee4a3e5ba725a6bf28942c1a913c33f8ee77bd3d8c3350a53c67dfb521d799cec5d16ff711200a834044621b2618e0ae313c7ce09f476ac97a897fb1824a2e31923c4c87f09cb7860f1f95bab032b08c56f2092af6193907573a59e3b6e4c9080d9ebaa6ac2124bc057541594df28c3f8cc4187bc04cde697dd986e9ac20e47a01506e3bd1b7d5867538d40339bc47ac4cf00e2b16f88d3d928fec22a3af43ebc7c4037c4cfb698c55c973d304716", @ANYRES16=r7, @ANYBLOB="a78727bd7000010000000b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x880)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40)
ioctl$TIOCOUTQ(r6, 0x4bfb, &(0x7f0000000040))
r9 = dup(r5)
syz_ublk_setup_queues(r9, r2, &(0x7f0000000500)={0x0, 0x694f, 0x400, 0x1, 0x36f}, 0x0, 0x1, &(0x7f0000000180)={0x2e, 0x6, 0x4500, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r1, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0)

1m42.128060363s ago: executing program 1 (id=200):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@cgroup=<r3=>r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x19, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001440)={r4, r3, 0x15, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001480))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f0000000280)=""/4101}, 0x94)

1m42.112492424s ago: executing program 1 (id=201):
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
setreuid(0xffffffffffffffff, 0xee01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x40000000, 0x0)
ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x7, 0x1, 0x5}, &(0x7f00000000c0)=[{}, {}, {}, {}, {}])
r2 = gettid()
timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000380)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x0, 0x0, 0x3ed4, 0x5})
openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x42, 0x0)
mount(0x0, 0x0, 0x0, 0x2200020, 0x0)
r4 = fsopen(&(0x7f0000000540)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f0000000580)='rw\x00', 0x0, 0x4)
mount(0x0, 0x0, &(0x7f00000005c0)='overlay\x00', 0x0, &(0x7f0000000600)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f00000004c0), 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0x17f)
syz_read_part_table(0x1054, &(0x7f0000000680)="$eJzsz8EtRFEUgOGfEa4IRgea0oOtAsSrRAGqUIg2xHLk3UcLzOL7cnLO5t+c+GfX1b5dl9XnU30dNi9199FFtVuz099+jJN5zxot9zWT6f1xudrim30zen6tbmv8FMu6Dp23TvXw9qevAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR+g4AAP//qx0RTQ==")
tgkill(r1, r1, 0x39)
tgkill(r0, r1, 0x25)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
memfd_create(&(0x7f00000003c0)='[\vx\'\xa5)\x1a\xad\xd1mD\xc8\x85\x05\x00\x00\x00\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadTj=)\xcc\xd2\aX\x83\xa3\xc0\f\xe5\x89\xbf3T\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x91\x92\xea\xfb?0\xdb\x0f\x04\a\x00S9\xdf\xc5\x80\x00', 0x3)

1m41.907851459s ago: executing program 1 (id=203):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1fb)
write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x16)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000880)='veth1_to_team\x00', 0x10)
sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f00000008c0)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000a40)=0x8000007, 0x4)
recvmmsg(r6, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/25, 0x19}, 0xab3}], 0x1, 0x40000122, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b00), 0x224280, 0x0)
r8 = timerfd_create(0x5, 0x800)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000b80)={0xde4, 0x0, &(0x7f0000000b40)=[r6, r1, r7, r4, r8]}, 0x5)
ptrace(0xffffffffffffffff, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000940)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000a00)={0x0})
tkill(r5, 0x17)

1m41.668156295s ago: executing program 1 (id=204):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/283], 0x1, 0x54f4, &(0x7f0000000b40)="$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")
openat$urandom(0xffffffffffffff9c, &(0x7f0000006040), 0x103902, 0x0) (async)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000006040), 0x103902, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006080)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r0, 0x0, 0xfffa83)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800010, &(0x7f0000000200)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f00000006c0)="$eJzs3EtsVFUfAPD/vdMH5fG1H+IDBK2ikfhoaXnIwo1GExeamOgC46q2hSADNbQmQoiiC1waEvfGpYl7E1e6MerCmLjVvSEhhA3oasyduRem05l22hkYcH6/5A7n3HPKOf8593TO3DOdAPrWePaQRGyNiD8iYrSWXV5hvPbPjWvnZ/++dn42iUrlzatJtd71a+dni6rFz22pZSqViOEsOdyk3YvvRMyUy/Nn8vzk0qn3JxfPnnvuxKmZ4/PH509PHzly8MCeocPThzqKr+hTFtf1XR8t7N756tuXXp89eundn7/Jyrbm5fVxbEgWbYPx2rPb6NHs4cmOGrur/Jo9bKs7kQy0rjxxBzpE+0oRkQ3XYHX+j0YpRm6WjcYrn/a0c8BtValUKs1en3MXKsB/WBK97gHQG8ULffb+tzju0NLjrnDlxdoboCzuG/lRKxmINK8z2PD+tpvGI+LohX++zI7oxn0IAIA1fJ+tf55ttv5L44G6ev/L91DGIuL/EbE9Iu6LiB0RcX9Ete6DEfHQOttv3CFZuf5JL28osDZl678X8r2t5eu/YvUXY6U8t60a/2By7ER5fn/+nOyLweEsP7VKGz+8/PvnRXpTQ1n9+i87svaLtWDej8sDDTfo5maWZjqNu3Dlk4hdA83iT6LYxkkiYmdE7NpgGyee/np3q7K141/FKvtM7ap8FfFUbfwvxLL4bw1V0nJ/cur5w9OHJjdFeX7/ZHFVrPTLbxffaNV+R/F3QTb+m5te/zd3gceSTRGLZ8+drO7XLq6/jYt/flY3p5ftLmfxp99GrPv6H0reqqaH8nMfziwtnZmKGEpeW3l++tbPFvmifhb/vr3N5//2uh4/HBHZRbwnIh7JN3GzsXssIh6PiL2rxP/TS0+816psxfiPFPGvcle+i7L459Ya/6gf//UnSid//K7t+JuO/8Fqal9+pp3ff+12sJPnDgAAAO4VafUz8Ek6cTOdphMTtc/w74jNaXlhcemZYwsfnJ6rfVZ+LAbT4k7XaN390Kn83nCRn27IH8jvG39RGqnmJ2YXynO9Dh763JYW8z/zV6nXvQNuuy7sowH3KPMf+pf5D/3L/If+Zf5D/2o2/z/uQT+AO8/rP/Qv8x/6l/kP/cv8h77U8m/j047+5L/HieK7Ezr4f672PoqOEyO3s4lIex/gWoniO3zulv5sKDHQyWXcTmK4aVEPfykBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00b8BAAD//9uw3tc=")

1m41.611988806s ago: executing program 4 (id=205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x108)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff)
ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000400)="96c986090ff978c5e92c8f02ec5083d6c4573eb3b57ef3ad21e5a5b4bf6d70485de147da179dd4ca6bf4ab40e35ce6d554ac3a23082c33688c818a4468bcafa1c2a6ea814ab4d3c36b24d1d9c113c065c2c06c4a764a31")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x20042, 0x9)
write(r1, &(0x7f0000000380)='nf', 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30000000002c0004001400010002007530ac1414aa00000500000000001400020002"], 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xb0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @multicast1, 0x0, 0xffffff00, 'sit0\x00', 'team_slave_1\x00', {}, {0xff}, 0x5e, 0x1, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x3, "9e96dfc596289d67e89910619763d26063469d44b7c155fdc2a36a588b5d"}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0xffffff00, 'caif0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x72}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0xc5, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0x2, [0x5, 0xf, 0x37, 0x30, 0x18, 0x32, 0x3a, 0x1f, 0x20, 0x19, 0x10, 0x10, 0x13, 0x32, 0xa, 0xc], 0x2, 0x4, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

1m41.294384813s ago: executing program 1 (id=209):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6)
add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x19c, 0xfffffffffffffffd)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='GPL\x00', 0x4, 0x1005, &(0x7f0000000680)=""/4101, 0x0, 0xc}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r1, 0x0, 0xb, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x9)
syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18)
r3 = socket$xdp(0x2c, 0x3, 0x0)
syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)

1m41.167759316s ago: executing program 33 (id=209):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6)
add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c897", 0x19c, 0xfffffffffffffffd)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='GPL\x00', 0x4, 0x1005, &(0x7f0000000680)=""/4101, 0x0, 0xc}, 0x94)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r1, 0x0, 0xb, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x9)
syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18)
r3 = socket$xdp(0x2c, 0x3, 0x0)
syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)

1m41.132440918s ago: executing program 4 (id=211):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c010, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x24, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x6ddc1c3441daa897, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x44040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r3 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
listen(r3, 0xf3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800)

1m40.995922141s ago: executing program 4 (id=213):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$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") (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000840)={'#! ', '', [{0x20, '\x00'}, {0x20, '*-:+\xa8&'}, {0x20, '\xc8!+$'}, {0x20, '&^-!-'}, {0x20, '%^)'}, {0x20, '\x00'}]}, 0x1e)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818458, &(0x7f0000000240)=ANY=[], 0x1, 0x153d, &(0x7f0000000f00)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async)
futex_waitv(&(0x7f0000000c00)=[{0x0, &(0x7f0000000c80), 0x2}, {0x0, &(0x7f0000000cc0), 0x82}, {0x5, &(0x7f0000000d00)=0x5, 0x2}], 0x3, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4431, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000007c0)={0x1, 0x1, 0x2000000, &(0x7f0000000800)=[{0x0}], 0x0}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b760d3ce20646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000bc0)={r4, r3}, 0xc)
getpid() (async)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r7 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002440)=ANY=[@ANYBLOB="18000002", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf251600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4)
fdatasync(r10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000300)={0x7ff, 0x2d18384})
ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000700)={0x24, 0xd8000000}) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m3.127587167s ago: executing program 4 (id=245):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0xd4d}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x40000000}}, {@debug}, {@debug}, {@resuid}]}, 0x1, 0x57d, &(0x7f0000001500)="$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")
lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100020000000000040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100000000000002120"], 0x34, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'})
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000000240012800b0001006d616373656300001400028005000c000000000005000d000100000008000500", @ANYRES64=r2, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0xc)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x180)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000005c0)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000740)={0x3, &(0x7f0000000780)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000007c0), 0x6, 0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000800)=0x4)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]})
chdir(&(0x7f00000002c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101042, 0x15)

1m2.694976417s ago: executing program 4 (id=248):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@bh}, {@nodelalloc}]}, 0xff, 0x567, &(0x7f0000001300)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@bh}, {@nodelalloc}]}, 0xff, 0x567, &(0x7f0000001300)="$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") (async)

1m1.383285789s ago: executing program 4 (id=259):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfffff000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0x6}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28)

1m1.254824153s ago: executing program 34 (id=259):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfffff000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0x6}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28)

28.194840611s ago: executing program 7 (id=659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000040000000400000000000000", @ANYRES32, @ANYBLOB="000600309c7c09d6b567d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
socket(0x200000000000011, 0x2, 0xd)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff000000000000000000002b7505a63e61"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r4}, 0xc)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x23e, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd0c, &(0x7f0000000500)="0400000000000000000000009001000038010000010000020000000000000000000000002000000000000001000000006d")
timer_settime(0x0, 0x0, &(0x7f0000000040)={{r5, r6+60000000}, {0x77359400}}, &(0x7f0000000080))

28.185563991s ago: executing program 7 (id=660):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socket$key(0xf, 0x3, 0x2)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r1=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
renameat2(r6, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x4)
getpid()

27.943965647s ago: executing program 7 (id=662):
r0 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)="e23a")
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x44997e9625d2448d})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x10241, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c2, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x1, 0x299, &(0x7f0000000300)="$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")
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x1001})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x109141, 0xd6)
pwrite64(r8, &(0x7f0000000600)="cffc", 0x2, 0x7ff)
ioctl$TIOCNXCL(r3, 0x540d)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000640))
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000680)={0x0, 0x1, 0x8, 0xe, 0x200, &(0x7f00000006c0)="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"})
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040392ab03f400001020301090260000301fbf0050904010000010100000a2401ff010a0002010209040100000102000009040101010102000009050109200006080b0725010c00ff4b8f04020000010200000904020101010200000905820940009100040725010c0b07", @ANYRES8, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0)

26.351705376s ago: executing program 7 (id=672):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x81, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x81, 0x1d6, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000c00)='attr\x00')
r1 = open_tree(r0, &(0x7f0000000c40)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000c80)='.\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
write$P9_RMKDIR(r3, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x8, 0x1, 0x3}}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'})
sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000140)="1807b8e23a6844ee6e853b224bf9d362205056e0ea18caca229c2a09f8", 0x1d}, {&(0x7f0000000e80)="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", 0x114}, {&(0x7f00000003c0)="8ef37485afac87fd2964f6ea554adc63d80b31d9e28214869efa44bce0bb3e96b486662056309908108a112d3c5ea4723a6b072d2f6327b2c4b1381bc568a8f2f580aa144e8abff22aa2a8c53e64f11dcfd28b4d626f07b0fe1671d9d2f2b122b1bcae1ca5161eea6005d078df88d76a70fbf4154b0e5ca99a123dac30a39d3d91cc007fb7813c1e07173f625c4ddd49bf26140521a308b49572336ba2ec26c429dfbe25114650075d3cd8fcbf79de649f8f71453b9eddaf831666e8118afd2689941d201a23207a3f73ab46df73c4efdd213c262b510a35", 0xd8}, {&(0x7f0000000680)="66cc77267e1be97157f09057a296c0c3ba16c7a47da5ce8fa0817a3058334a4231188397b9516c7e69ef7bbb9207788bdd1a4c365d4f5c99e66aeafd37f2c828a3e16cb510f9e48e4713f30b57d3f19f64357f7ff70638eb33b38a2ad02db8273392e9d80968a7f5a5bfcd4a66bf698e744e65537251ef3bdc7cb9ccc787ffedbeff83b6101668b804c9d169a6718dcd54ac91d4376233e9bafe", 0x9a}], 0x4, &(0x7f0000000800)}}, {{&(0x7f0000000880)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000180)="1560eb1b24f5fff1ea4ba2f6cda5e869b992ac51f0d49226c0135f5987e1f569612253411a4d37ebb15685f0dc13cfedad73dbe9a1111c3c20a52f4f94ba4c66ebd5f0c2b555d30e9e961eb8fc0fd3a71cf10b1cd5b417c28788823bc3d5ebea153a6057bfbb87", 0x67}, {&(0x7f0000000300)="73b483d3424eb05de939e0a24c600dcaa6b27caecc49f691237ffabfe9bbb2fe7a410e51545fcb37ccda621393fda36ca8bfc15f69cc1a4435a8318758f72ea6fd351b5ed7df57e17d599f8e706b6b5d3c1587928e1cd806733b301e71b7e9ec63930f73b2dc4aa6b3f56a4d9b85bf37240f25704107f89c9bf22b46", 0x7c}, {&(0x7f00000004c0)="3598d7b75230bb5a321c26d662a99f1c33506ed2c5f62d813f3c95da7c8ade006ba0e9faca42db1129b5822bf9268e19b826d76352802de1432822d6b812748b86884bc98b99ea96df0c964af635c606f9972177ba6bd78e63bd8af98c39a497e9f96e3a2ca1", 0x66}, {&(0x7f0000000fc0)="67fde89dd876baeea4f6570009fcc5f9937a5b89233be61e93aa6365b00e5098552ad89a56750b6190b61aca0e295c455169824960bda6a1608168aac33d6af00369e9c7149d32301e41b149cabfc0130103c381af26a5404d96b3e89b4fa1551a7311759a0e8becea479072ec1a1b3b0b84e676b5c1db7fcac1cfb55f26d9760c48e0704767b7c91be5181f35cba1df8767878c53a6f70e0d669b348f125a85685954b5cbb545e3031c02cdfa54d514214770b278be68bddd1dc36ed8f489900c96b122f78cfaae47010627e6efebfe6f239d", 0xd3}], 0x4, &(0x7f0000000dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}], 0x30}}], 0x2, 0x4000800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ppoll(&(0x7f0000000240)=[{r4, 0x8407}, {r2, 0x2}], 0x2, 0x0, 0x0, 0x0)

25.433995978s ago: executing program 7 (id=691):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000050)

25.35559497s ago: executing program 7 (id=694):
pipe(&(0x7f0000000380)) (async)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x85) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x85)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) (async)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000140)) (async)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000140))
r5 = dup3(r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x200f})
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000012, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f00000002c0)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f00000002c0)=r4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x0, 0xa, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000003c0), &(0x7f00000001c0)=r1}, 0x66)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000600)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@mb_optimize_scan}]}, 0x1, 0x572, &(0x7f00000006c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0xffffffd3)
setxattr$system_posix_acl(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) (async)
setxattr$system_posix_acl(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000d40)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000400)={0x802}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000004200010a000000000000000002"], 0x14}}, 0x0)
splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) (async)
splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa)

25.316760051s ago: executing program 35 (id=694):
pipe(&(0x7f0000000380)) (async)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x85) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x85)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) (async)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000140)) (async)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000140))
r5 = dup3(r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x200f})
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000012, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f00000002c0)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f00000002c0)=r4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x0, 0xa, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000003c0), &(0x7f00000001c0)=r1}, 0x66)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000600)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@mb_optimize_scan}]}, 0x1, 0x572, &(0x7f00000006c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0xffffffd3)
setxattr$system_posix_acl(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) (async)
setxattr$system_posix_acl(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000d40)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000400)={0x802}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000004200010a000000000000000002"], 0x14}}, 0x0)
splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) (async)
splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa)

19.992259552s ago: executing program 3 (id=769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x9]}, 0x8)
close(r2) (async)
inotify_init1(0x800) (async)
fcntl$setstatus(r2, 0x4, 0x2c00)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000) (async)
getpriority(0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_getlink={0x3c, 0x12, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x1c000}, [@IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_ADDRESS={0xa}]}, 0x3c}}, 0x0)

19.991844192s ago: executing program 3 (id=770):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000300)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000000580))
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001380), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000013c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000001440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl1\x00', <r6=>r5, 0x4, 0x0, 0x0, 0xa, 0x10, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0xf}})
add_key(0x0, &(0x7f0000001580)={'syz', 0x1}, 0x0, 0xb, 0xfffffffffffffffc)
r7 = syz_open_dev$loop(&(0x7f00000015c0), 0x6, 0x2300)
ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001740)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x4, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x1, 0xfffffffe, 0x1}})

19.894972314s ago: executing program 3 (id=771):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

19.872512444s ago: executing program 3 (id=772):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
prlimit64(0x0, 0xb, &(0x7f0000000040)={0x5, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
capget(&(0x7f0000000700)={0x20080522, r1}, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f00009ce000/0x2000)=nil, 0x2000, 0x1a10e26432a925df, 0x8031, r0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0007000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x45010}, 0x4040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000300), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/147, 0x93}, {&(0x7f0000000940)=""/64, 0x40}, {&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000001100)=""/226, 0xe2}], 0x4, &(0x7f0000000b40)=""/44, 0x2c}, 0x50}, {{&(0x7f0000000b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000d00)=""/231, 0xe7}, {&(0x7f0000000e00)=""/246, 0xf6}, {&(0x7f0000000f00)=""/187, 0xbb}], 0x4}, 0xffff}], 0x2, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r7=>0x0})
r8 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x2200)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="000429bd7000ffdbdf2502000000080003000600000008000400080000000800030004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x80)
getxattr(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="280000001400090a0017000000000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r10, r9, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, &(0x7f00000018c0)={0x1})

19.721157178s ago: executing program 3 (id=775):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000001680)={[{@i_version}, {@dioread_lock}, {@nodioread_nolock}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001240)='.\x00', 0x0, 0x42)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="9989f7e147114bbf421c54f987331294306e93104c304d69fe6744c4b11e405eca30742bc371ec05fbf76844c35f4ce5532c5e1a4258561caad71a23ab661eae523af0276c97bfcc2c4b06fd4335f77b4af998d303951f9affd172e69edd98c03416fe371ff8b179794f20d16c43642ebc6382246e8f137a9bf9", &(0x7f0000000080)=""/176, &(0x7f0000000140)="95615f04f0e675b37143fa580ed45a4225e1ac32fb3b87b2ca196f8de6a894a07e6892324f4c0fd2c74b540c1cf40803b159bc036a042a713fefe13e4c56f9e787b0ec", &(0x7f0000000240)="322d2d722901d986c460e9fb343525cd2ac9a1c3c6640d83305cbc2bbe9711021c551d9505cf04964685fc37bc5722505ab2ff4af8506ea3c90fbc4b52956bfd487b07468cc86090fa4a4ca2695d313165d4b32c17359b3482f9a97fee12ae36b25459537f80445205563b20963aa1470859ab6ff04447c7f213b528d1c72885297f922a", 0x7fff, r1, 0x4}, 0x38)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000001280)={@id={0x2, 0x0, @d}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000009c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000a00)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x106}, 0x1c)
close(r4)
syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x8, 0xaade0dc}]}}}}}}}, 0x0)
write(r3, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000ac0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000075b000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001500010025bd7000ffdbdf250a2090c8", @ANYRES32=0x0, @ANYBLOB="14000200"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040080)
openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x42, 0x0)

19.329393208s ago: executing program 3 (id=780):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x4}, 0x38)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x5a)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/trace_pipe\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(r1, &(0x7f0000001ec0)=""/16384, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x3a0600b, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}})
unshare(0x60000600)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x54}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1081}, 0x4)
unlink(&(0x7f0000000000)='./file0/file0\x00')

16.743579051s ago: executing program 6 (id=788):
unshare(0x60000600)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @loopback, 0x7}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

16.282270212s ago: executing program 5 (id=791):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580), 0x1, 0x443, &(0x7f0000001180)="$eJzs28tvG8UfAPDv2k776+uXUJVHH0CgICoeSZOW0gMXEEgcQEKCQzmGJK1C0wY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpS0no7V3E9uxnZcTN/XnI20yszvrma93x57d8QbQswbTP0nE/oj4MyL6q9n6AoPVf3cW58fvLs6PJ1Euv/NPUil3e3F+PC+a77cvz5QiCl8kcbRJvbNXr10cm56evJLlh+cufTg8e/XaC1OXxi5MXpi8PHr27OlTIy+dGX2xI3Gmcd0+8snMscNvvHfjrfFzN97/9fskj78hjg4ZbLfx6XK5w9V114GadFLqYkNYl2K1m0Zfpf/3RzGWD15/vP55VxsHbKlyuVx+qPXmhTJwH0tiEzvnHyHADpR/0afXv/myPSOPe8OtV6oXQGncd7KluqUUhaxMX8P1bScNRsS5hX+/SZfYmvsQAAB1fkzHP883G/8Vova+0P+zOZSBiHggIg5GxJmIOBQRD0ZUyj4cEY80qyRpXX/jJMnK8U/h5oaDW4N0/PdyNrdVP/7LR38xUMxyByrx9yXnp6YnT2bvyYno253mR9rU8dNrf3zValvt+C9d0vrzsWDWjpul3fX7TIzNjW0m5lq3Pos4UmoWf7I0E5AevsMRcWT1lys0Wzn17HfHWu2wevxtdGCeqfxtxDPV478QDfHnkvbzk8P/i+nJk8P5WbHSb79ff3spU6zftqn4OyA9/nubnv9L8Q8ktfO1s+uv4/pfX7a8ptno+b8rebdu3cdjc3NXRiJ2JW9WG127frSh3Ohy+TT+E8eb9/+DsfxOHI2I9CR+NCIei4jHs7Y/ERFPliKOt4n/l1ef+mBj8e9u86qdkcY/sa7jv5zYFY1rmieKF3/+oa7SgbXGH9nxP11JncjWrOXzby3t2tjZDAAAADtPISL2R1IYWkoXCkND1d/wH4q9xZiZnXvu/MxHlyeqzwgMRF8hv9PVX3M/dCS7rM/zow35U9l946+Leyr5ofGZ6bv310/gYcfZ16L/p/4udrt1wJbzvBb0Lv0fepf+D71L/4fe1aT/7+lGO4Dt1+z7/9MutAPYfg3937Qf9BDX/9C79H/oXfo/9KTZPbH6Q/ISEisSUbgnmiGxRYlufzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD//0sD5BI=")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
shutdown(r0, 0x0)
connect$unix(r1, &(0x7f0000000200)=@file={0x1}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xc, 0x31, 0xffffffffffffffff, 0xcee8f000)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

15.57159428s ago: executing program 0 (id=792):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$eJzs3dFrJHcdAPDvTHYvubucSdUHLViLVu6q3ubSeG3woSqIPhXUiq91TTYhZHN7JJv2EopN8Q8QRLTgiz75IvgHCNIX30Uo6LuoKFKv+qDQdmRmZ3u5vd3k4HYzsPl8YG7mNzM73+9v9uaX329n2A3g3HoyIq5FxExEPB0RC+X6tJziqDfl+71z99W1fEoiy158O4mkXNc/1mw5v1y+bC4ivvX1iO8lD8bdOzjcbrbbrd2yvNTdSd7NssPrWzvNzdZm69bKyvKzq8+t3ly9MZZ6LkbE81/9209++MuvPf/bz7/y55f+ce37eVr/y7LXYqAe49Srer04F321iNidRLCK1Ioa9tysOBcAAE6W9/c/HBGfKvr/CzFT9OYAAACAaZJ9aT7eTSIyAAAAYGqlETEfSdoon/edjzRtNHrP8H40LqXtzl73cxud/Vvr+baIxainG1vt1o3y2YHFqCd5ebl8xrZffmagvBIRj0XEjxcuFuXGWqe9XvWHHwAAAHBOXB4Y//9noTf+LxxVnBwAAAAwPotVJwAAAABMnPE/AAAATD/jfwAAAJhq33jhhXzK+r9/vf7ywf525+Xr66297cbO/lpjrbN7u7HZ6WwW39m3c9rx2p3O7S/Erf07S93WXndp7+DwpZ3OfvFb4XNnUiEAAADgAY998s0/JRFx9MWLxZS7UG6rR2Qzx3euVZEhMCnpkHUzo3b+62RzAc7W8Wv9YoV5AGdPlx7Or3rVCQCVS07ZPvLhnd+PPxcAAGAyrn589P3/tzcqTQ2YsPL+f3La+B+YPiOf9TludvJ5AGevd//v/axn2B56BjCt6if1AFz6MPXS8dz/P+VRwkSDAgAAFZsvpiRtlOOA+UjTRiPiSvGzAPVkY6vduhERH4qIPy7UZ/PycvHKRG8eAAAAAAAAAAAAAAAAAAAAAAAAAB5SliWRAQAAAFMtIv17/5e5ri48NT/4+cCF5L8LxTwiXvnZiz+90+x2d5fz9f/6YH33jXL9M1V8ggEAAAAM6o/T++N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABind+6+utafzjLuP78SEYvD4tdirpjPRT0iLv07idqx1yURMTOG+EevR8THhsVP8rRisczivvgXItKIuDiu+EPP/wnxoxf/8hjiw3n2Zt7+fHnY9ZfGk8V8+PVXK6dHNbr9Sz9o/2ZGtH9XRh20fn/x8bd+vTQy/usRj9eGtz/9+El+vCHxP/2Qdfzutw8PR23LfhFxdVj7l9wfa6m7c3tp7+Dw+tZOc7O12bq1srL87OpzqzdXbyxtbLVb5b9DY/zoE795/17pvQfqf+mE9reo/4jz/9QJdZ49tvzeW3fufqS3OPDORD1+niW1ofHT3uyzD8bv/+37TLlXXs7PYfrGd4bm8sSv/vDEqDzz+q+PqP/cKfW/dkL9j3v6mz/4y0PuCgCcgb2Dw+1mu93atVDxQlL2eB/lOP1PRE7d+cqj5pz3O6s+Y60kkthutmfjvk3N6hPrLbxWvhvNdv9qG9ORf1f+V5lk8mfdEAEAABN3r9M/uOXeDRj3mQEAAAAAAAAAAAAAAAAAAGCyTv0asFGb0oh4yK8TG4x5VE1VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9P8AAAD//xQlyxg=")
getpid()
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setns(0xc9, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000010000108000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="fc00000000000000080004000600000008001b"], 0x30}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080), 0x0)
unshare(0x60000600)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
accept$unix(r2, &(0x7f00000000c0)=@abs, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)

15.165775719s ago: executing program 6 (id=793):
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @random="65c537c46509", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}, "052a549248fe8514fe58b3a300b7b0b708f0ffc97a8a4e7297887970aae7724909bf0243c9368de3"}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

15.16531715s ago: executing program 5 (id=794):
r0 = socket$inet6(0xa, 0x3, 0x87)
connect$inet6(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400800c)
fstat(r0, &(0x7f0000000280))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000440))
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
write(r1, &(0x7f0000000000)='3', 0x4e)
syz_emit_ethernet(0xfffffffffffffcf4, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x3a, 0x68, 0x0, 0x8, 0x6, 0x0, @local, @multicast1, {[@rr={0x7, 0x0, 0x3f, [@broadcast]}, @end]}}, @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0x1, 0x0, 0xca21b41dcef75887, 0x8, 0x3, 0x3, 0xbfaf, 0x9a95, 0x4, 0x4e20, 0x4e22}, 0x4, 0x2}}, [0x0, 0x0]}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x3)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

13.143890579s ago: executing program 5 (id=796):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x50a, &(0x7f0000000480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000a00), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000a40)=0x1)
msync(&(0x7f000044f000/0x4000)=nil, 0x4000, 0x4)

10.841416695s ago: executing program 5 (id=797):
socket$inet6(0xa, 0x80002, 0x0) (async)
r0 = socket$inet6(0xa, 0x80002, 0x0)
rt_sigsuspend(&(0x7f0000000100), 0x8) (async)
rt_sigsuspend(&(0x7f0000000100), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0xfffffcc6}, 0x28)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs/../file0\x00', 0x511003, 0x488)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test\x00', 0x777) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test\x00', 0x777)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f00000006c0)='10', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x24002, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x24002, 0x0)
write(r5, &(0x7f00000007c0)='0', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00) (async)
ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00)
pipe(&(0x7f0000000180))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = creat(&(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup3(r8, r7, 0x0)
io_setup(0x91, &(0x7f0000000300)=<r9=>0x0)
io_submit(r9, 0x3f0a, &(0x7f0000000340)=[&(0x7f0000000380)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r7, &(0x7f00000003c0), 0x200a00}])

9.695030583s ago: executing program 6 (id=800):
socket$inet6(0xa, 0x3, 0xff)
socket(0x10, 0x0, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_delrule={0x1c, 0x21, 0xb12becd5a2b54ddf, 0x2, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000001c0)=0xfffffeff, 0x4)

9.692322463s ago: executing program 8 (id=801):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe801b000000000000000000000000aa14000700"/34], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000050)

9.347150131s ago: executing program 6 (id=802):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
pread64(r3, &(0x7f00000015c0)=""/102356, 0x91, 0x5)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x24020000)
mount(0x0, &(0x7f0000001580)='.\x00', 0x0, 0x20960b1, 0x0)

9.345317761s ago: executing program 8 (id=803):
r0 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)="e23a")
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x44997e9625d2448d})
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x10241, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c2, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x1, 0x299, &(0x7f0000000300)="$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")
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x1001})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
timer_create(0x1, &(0x7f0000000e00)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000e40)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000e80)={0x0, 0x0, 0x10001, 0x5})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000001fc0)={0x843, 0x7, 0x0, 0x2000081, 0xffffffff, 0x4})
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002000), 0x40, 0x0)
ioctl$TCSETAW(r8, 0x5407, &(0x7f0000002040)={0x6, 0x8001, 0x9, 0xe, 0x2, "10e155e100008000"})
ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000002080)=0x8004)
openat$ttyS3(0xffffff9c, &(0x7f00000020c0), 0x1a3200, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000ec0)={{}, {0x77359400}}, 0x0)
syz_read_part_table(0x1057, &(0x7f0000000f00)="$eJzsz70RAUEYBuBvz3FzGFeAUtShBcVJiUQiuQbEIg0I1qwbWwKC5wn23Z93gy/4qc2lP8RpGdGmiMWsfV+ed/dVyabWUt1Nx+jqe1OLZZ3Eo0uRYv7p9+OPvh2eEZGHcrje1secc47t/jtTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/ewUAAP//2igPgQ==")
sendmsg$nl_route_sched(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x109141, 0xd6)
pwrite64(r9, &(0x7f0000000600)="cffc", 0x2, 0x7ff)
ioctl$TIOCNXCL(r2, 0x540d)
syz_open_dev$ptys(0xc, 0x3, 0x0)

9.291888693s ago: executing program 0 (id=804):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"/442, @ANYRES64, @ANYRES32, @ANYRES64=0x0, @ANYBLOB], 0xf6, 0x1220, &(0x7f00000002c0)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaU2gitINyaGx3mOlNyh8AUMbpy6+dw7U7wG2TjZ3CXTZddlF7pnSZNamoRzEy1z7OY+3LP+XHOgWHgDPfc/fd/+qa7VWVb+SBaU1PRuhWR7qZI0YoDb66PrtdvrK+222tXU7qyem35vZTSwlu/ff7tTESc++yXhV9nYm/pi/07K3/sXdi7uH//2tedKnWq1OsPUp5u9vuD/Ga5kDY7VTdL6ZOyyKsidXpVsX2kvUhb70bEMOW9zfm5W9tFVaW8N0zdYpgG/TTYHqb8q7zTS1mWpfm54InOPL3Lxs9367qOqOsz8WLUdV2fjbk4Fy/FfCzE9xHxcrwSr8b5eC0uxOvxRlxseo1j+gAAAAAAAAAAAAAAAAAAAPD8+Lvz/4ux5Pw/AAAAAAAAAAAAAAAAAAAAjMGn12+sr7bba1dTmo0of9zZ2NkYXUftSw8+yijicizGvWhO/4+M6isftdcup8ZS/FDuPszv7my80ORXD/LLzesEHuanm7aD/PIon47nZ2LuQX4rOk1+JRbj/MnjrxzJ7x7mZ+Odt4/ks1iM37+MfpSx2Yz9KP/dckofftx+bPxLTT8AAAD4P8jSoRP371n2pPZR/nB//fT/Bx7bX0/HpenJrp2Iani7m7fKYrspyoNi9i93Tq+IMY717xYRd+qmmDne1DqlQVvRFPefhbXf7k49G9P47xf36rqe/DTOxvE7k/5lYhwefQ0mPRMAAAAAAAAAAAD+iVN+rnA6Tniy7IPJLBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgWAAAAABAmL91Gh0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD///QqyB4=")
syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001640)) (async)
syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001640))
mkdir(&(0x7f0000001680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
mkdir(&(0x7f0000001680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
prlimit64(0x0, 0x8, &(0x7f0000001640)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
mlockall(0x7) (async)
mlockall(0x7)
brk(0x5d555ede6000)
syz_mount_image$vfat(&(0x7f0000001780), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f00000018c0))
mknod$loop(&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mknod(&(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) (async)
mknod(&(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f00000018c0)={&(0x7f0000001b00)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
shutdown(r0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc)
recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0xf0, 0x0)

7.927545407s ago: executing program 6 (id=805):
r0 = gettid()
timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000100), 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800001, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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")

7.927039616s ago: executing program 0 (id=806):
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000240)={0x80, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='proc\x00', 0x40048, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/bus/pci/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000400)=""/28, 0x1c, 0x2)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f00000008c0)=[@wr_crn={0x67, 0x20, {0x2, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0xd, 0x7f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x4402, 0xf4, 0x7, 0xff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x7, 0x8d, 0x100}}, @uexit={0x0, 0x18, 0x76fb5f8b}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x429, 0x100000001, 0x3}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x7c, 0x100000001, 0xffffffffffffffff}}, @nested_create_vm={0x12d, 0x11}, @wrmsr={0x65, 0x20, {0x214, 0x4}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xa6ae, 0x2}}, @nested_amd_clgi={0x17f, 0x10}], 0x250})
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000880))
bind$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
listen(r4, 0x1005)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045040061000000000011907800000000000000004e244e20004d9078010000000100000065a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351ae12e16b560f2f8ac4ca3e745ce285f12f96b9b5fdf1e7f286a68f76980aa8fb8f80d69f1fb587086447e83e55e824bb69e833bd36300b088233545a"], 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000640)=0x3, 0x4)
getpriority(0x2, r1)
syz_emit_ethernet(0x10d, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000200)=0xe, 0x4)
utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x3c}, {0x6}]})
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8915, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e24, @local}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

2.942225069s ago: executing program 36 (id=780):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x4}, 0x38)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x5a)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/trace_pipe\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(r1, &(0x7f0000001ec0)=""/16384, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x3a0600b, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}})
unshare(0x60000600)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x54}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1081}, 0x4)
unlink(&(0x7f0000000000)='./file0/file0\x00')

2.936573818s ago: executing program 0 (id=808):
r0 = socket$igmp6(0xa, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing\x00', 0x158)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pB    \x00'}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000480)="b9ff03", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f00000005c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000600)) (async)
timer_create(0x1, &(0x7f00000005c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000600)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x0, 0x0, 0x3ed4, 0x5}) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000e6e000/0x3000)=nil, 0x3000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000680), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e24, 0xa4e1, @remote, 0x3}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x218a03, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x0, 0x0) (async)
ioctl(r4, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x1ff, 0x3, 0x5af, 0x5, 0x9a, "55511985fee912f14b53d8d969127e270800e9", 0x4, 0x7})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
personality(0x60000a)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x180000000000)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x48081)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) (async)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r6, 0x10, 0x1, 0x6, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700), &(0x7f0000000240)=[0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r6, 0x10, 0x1, 0x6, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700), &(0x7f0000000240)=[0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r8, 0x25, 0x8, @val=@netkit={@void, @value=r7, @void, @void, r9}}, 0x1c)

2.935926948s ago: executing program 6 (id=809):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x1000081, 0x1fd, 0x1, 0x1}, 0x1c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000800))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000840)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000880)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000008c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000900)={&(0x7f0000000940)=@hci, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000b00)={0x0, 0xfffffff5, &(0x7f0000000b40)=[{&(0x7f0000000b80)="a2", 0xfffffdef}], 0x1}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0205fd08040000946874a3fcdbdf2502000100000004d40400b15ffc02f40a1ebb3c26dbccd84cb91ac3a7a04ff1c9f15b378e80d2dd0e3bbf048c9938aa09305ace9ff379fb535779df91f7494399371e9a757bee897c9e4a33c4f312da2004f1e456ea76557b27136e72cc2ebbcbcb26da974e955295fc858f3208de6e4c9ff02268d865c5c82d7a5ddab4f6f1cc3b7d1e246adeabcf4ae352ec14e90b24ed551e9b6dc0f350f1a9657ba17f6ae72ea68beed6b1fe76bab2a27290ec9ff1a93b210f92efe7f4d2c9b1ef9e22e195622297d08148c6e38b7af0434e"], 0x20}, 0x1, 0x7}, 0x14)
r5 = socket(0x1e, 0x4, 0x0)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000003c0)={@mcast1, 0x1f, r7})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="91400100400000001400030076657468305f766f5f6873720000000004003480"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
close_range(r5, r5, 0x0)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5069d3916200bf27}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="09002bbd7000ffdbdf25620000000600b300050000000600b4002b050000"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x18000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)

2.782131502s ago: executing program 5 (id=810):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x26)
recvmmsg(r0, &(0x7f0000005340)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x5, &(0x7f0000000840)=""/134, 0x86}, 0x2}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/126, 0x7e}], 0x2}, 0x4}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/145, 0x91}, {&(0x7f0000000d00)=""/87, 0x57}, {&(0x7f0000000d80)=""/149, 0x95}, {&(0x7f0000000e40)=""/184, 0xb8}], 0x4, &(0x7f0000000f40)=""/241, 0xf1}, 0x63f}, {{&(0x7f0000001040)=@rc={0x1f, @none}, 0x80, &(0x7f0000003640)=[{&(0x7f00000010c0)=""/117, 0x75}, {&(0x7f0000001140)=""/27, 0x1b}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/196, 0xc4}, {&(0x7f00000024c0)=""/110, 0x6e}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/66, 0x42}, {&(0x7f00000035c0)=""/90, 0x5a}], 0x9, &(0x7f0000003d00)=""/4096, 0x1000}, 0xa}, {{&(0x7f0000004d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004d80)=""/80, 0x50}, {&(0x7f0000004e00)=""/148, 0x94}, {&(0x7f0000004ec0)=""/19, 0x13}], 0x3, &(0x7f0000004f40)=""/158, 0x9e}, 0x8}, {{&(0x7f0000005000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005080)=""/16, 0x10}], 0x1, &(0x7f0000005100)=""/251, 0xfb}, 0xac}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000005200)=""/220, 0xdc}], 0x1}, 0x81}], 0x7, 0x2020, &(0x7f0000005500)={0x77359400})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)=@md5={0x1, "e26fcbe6b5b7c74839e2149181707b58"}, 0x11, 0x2)

2.781790032s ago: executing program 8 (id=811):
r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000000)={[{@noload}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x12, 0x5c2, &(0x7f0000001380)="$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")
fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl$Q_GETINFO(0x2, &(0x7f0000000040)=@sr0, r1, &(0x7f0000000140))
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0xff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0xffffffff, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580)
syz_emit_ethernet(0xd2, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)

1.895757704s ago: executing program 8 (id=812):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000000580))
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001380), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000013c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000001440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl1\x00', <r6=>r5, 0x4, 0x0, 0x0, 0xa, 0x10, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0xf}})
add_key(0x0, &(0x7f0000001580)={'syz', 0x1}, 0x0, 0xb, 0xfffffffffffffffc)
r7 = syz_open_dev$loop(&(0x7f00000015c0), 0x6, 0x2300)
ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001740)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x4, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x1, 0xfffffffe, 0x1}})

1.340202667s ago: executing program 5 (id=813):
socket$inet6(0xa, 0x3, 0xff)
socket(0x10, 0x0, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_delrule={0x1c, 0x21, 0xb12becd5a2b54ddf, 0x2, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000001c0)=0xfffffeff, 0x4)

1.300450788s ago: executing program 8 (id=814):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe801b000000000000000000000000aa14000700000000000000000000001c00"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000050)

1.22871711s ago: executing program 8 (id=815):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f0000000540)="$eJzs3E1sFFUcAPD/7LallY9WRBQEraCR+NHSgsrBAxpNPGhiogc81rYgslBDawKk0WIMHg2Jd+PRxLMHEw9ejHowJl418WhIiPYCeKqZnRm6LbulW9qudH+/ZHffm4++9+a9t/tmXmcCaFv96VsSsSUifo+I3iy6cIP+7OP67PTojdnp0STm5t78O6lud212erTYtNhvcx45UIoofZLE0eTWdCfPXzg1UqmMn83jg1On3x+cPH/hmZOnR06Mnxg/M3zkyOFDQ88/N/zsqpQzLde13R9O7Nn16tuXXx89dvmdn75Os7Vzb7a+thy3daNOgeroT4/aP3NVi9c93kTe7wZba8JJRwszQlPKEZFWV2e1//dGOeYrrzde+bilmQPWVPrbtKnx6pk5YANLotU5AFqj+KFPz3+L1zoNPf4Xrr4Y0ZWHr89Oj16fnc6jHVHKAt+sZfr9EXFs5t8v0lc0ex0CAGAFOtO3p+uN/0qxs/qZzXVsy+dQ+iLi3ojYHhH3RcSOiLg/orrtAxHxYLbzXO8y0+9fFL91/FO6UjfPqyQd/70wP/arvvJ0i4++ch7bWi1/Z3L8ZGX8YH5MDkTnpjQ+tEQa37/822eN1tWO/9JXmn4xFswzcKVj0QW6sZGpkdU6CFcvRuzuqC1/MbeV3JwJSJfsiojdzf3pbUXg5JNf7Wm00e3Lv4RVmGea+zLiiaz+Z2JB/c/P8SVLz08Odkdl/OBg0Spu9fOvl95olP4dlX8VXN33UBaYb/+LtqhpaJXK+NnJ5tO49MenDc9pVtr+u5K3qn3yl3ezZedGpqbODkV0Ja9V48U5XXX58Py+50ametJ4sX3a/g/sr9//t+f7pPWfHqW0Ee+NiIcj4pE8749GxL6I2L9E+X986bH3lih/Ekm0rv4vRozV/f672f77ktr5+hUEyqd++LbRjPny6v9wzFS/azPV77/bWG4G7/DwAQAAwF2hFBFbIikNZOH+LVEqDQxk/8O/I+4pVSYmp546PvHBmbHsHoG+6CwVV7p6a66HDiUz+V/M4sP5teJi/aH8uvHn5Z5qfGB0ojLW4rJDu9u8sP9H0f9Tf5VbnTtgzblfC9rX4v5falE+gPW3nN9/5wKwMS3s/93pW0+r8gKsL+f/0L7q9f+PFsWN/2FjWtj/v4uIP+s8sg7YiIz/oX3p/9C+9H9oS83czh9HG63qjohmHgtQ3Cyw8qcKdC/7Dv92CRRPvFjLtHriwqmufEmUWlTScpONbUME0h6zvonOP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//9Mbt54")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0), 0x1, 0x73a, &(0x7f0000000a00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001140)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000001140)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001180)='./bus\x00', &(0x7f00000011c0), 0x8, &(0x7f0000001200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) (async)
mount$overlay(0x0, &(0x7f0000001180)='./bus\x00', &(0x7f00000011c0), 0x8, &(0x7f0000001200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x200088c4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r0, &(0x7f00000014c0), 0x4000000000000d2, 0x8048848)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x4004, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000400)='./bus\x00') (async)
chdir(&(0x7f0000000400)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1cb842, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1cb842, 0x0)
io_setup(0x20fe, &(0x7f0000000480)=<r3=>0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'syztnl2\x00', <r4=>0x0, 0x29, 0x1, 0x6d, 0x9, 0x60, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0x5, 0xd08}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6tnl0\x00', r4, 0x29, 0x2, 0x7, 0x3802, 0x0, @mcast1, @private1, 0x7800, 0x700, 0x510000, 0xed}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6tnl0\x00', r4, 0x29, 0x2, 0x7, 0x3802, 0x0, @mcast1, @private1, 0x7800, 0x700, 0x510000, 0xed}})
io_submit(r3, 0x1ffffffffffffcb5, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000fc0), 0x1, 0x600, 0x0, 0x20000}])

521.83µs ago: executing program 0 (id=816):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./trace\x00', 0x18000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="64a76bcced1c9629b675d83b3222c4f62a7070bff40940b3edfde093982000f560a0215b6cade370f6cc65ca093ba4295b"], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
ftruncate(r0, 0x4a8e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./trace\x00', 0x18000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="64a76bcced1c9629b675d83b3222c4f62a7070bff40940b3edfde093982000f560a0215b6cade370f6cc65ca093ba4295b"], 0x1, 0x304, &(0x7f0000000bc0)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
fdatasync(r0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) (async)
ftruncate(r0, 0x4a8e) (async)

0s ago: executing program 0 (id=817):
socket(0xa, 0x3, 0xff)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x143041, 0x12a) (async)
r1 = io_uring_setup(0x4dec, &(0x7f0000000180)={0x0, 0x54c4, 0x8, 0x0, 0x2ff})
openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x7, &(0x7f0000000500)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], {0x95, 0x0, 0x1200}}, &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) (async)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2c42, 0x4c) (async)
request_key(&(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000780)='.\x00', 0x5db) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@updpolicy={0xb8, 0x13, 0x400, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@empty, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0xb0}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0xffffffffffffffff, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
syz_usb_connect$uac3(0x2, 0xb3, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0xeb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x101, 0x6, 0x2, 0x50, 0x7ff, 0x7, 0x9, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x5, 0x7, 0xf, 0x3, 0x6, 0x2, 0x1ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x91, 0x29}}}}}}}}]}}, 0x0)

kernel console output (not intermixed with test programs):

72][ T3353] Call Trace:
[  163.439867][ T3353]  <TASK>
[  163.442819][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.448473][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.453604][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.458302][ T3353]  rb_advance_reader+0x2b/0x770
[  163.463168][ T3353]  ring_buffer_consume+0x1e7/0x370
[  163.468301][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.474015][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.479057][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  163.484017][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.489495][ T3353]  vfs_read+0x286/0x930
[  163.493685][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.498379][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.503076][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.508112][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.512718][ T3353]  ksys_read+0x14a/0x260
[  163.516976][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.521759][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.527416][ T3353]  __x64_sys_read+0x7b/0x90
[  163.531944][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.536387][ T3353]  do_syscall_64+0x4c/0xa0
[  163.540824][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.545518][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.550222][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.556129][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.560562][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.580361][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.588875][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.596948][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.604934][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.612926][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.620913][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.628908][ T3353]  </TASK>
[  163.631941][ T3353] ---[ end trace 0000000000000000 ]---
[  163.660007][ T3353] ------------[ cut here ]------------
[  163.665547][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.665590][ T3353] Modules linked in:
[  163.665604][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.665627][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.665639][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.665665][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.665683][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  163.665701][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.665719][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.665735][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.665752][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.665769][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.665786][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.665806][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.665822][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.665842][ T3353] Call Trace:
[  163.665849][ T3353]  <TASK>
[  163.665862][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.665887][ T3353]  ? __schedule+0xcbb/0x1700
[  163.665910][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.665934][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.665966][ T3353]  rb_buffer_peek+0x5f/0x930
[  163.665987][ T3353]  ring_buffer_peek+0x184/0x3b0
[  163.666008][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.666030][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  163.666051][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  163.666078][ T3353]  ? _find_next_bit+0x8a/0x130
[  163.666104][ T3353]  __find_next_entry+0x33c/0x6c0
[  163.666140][ T3353]  ? trace_find_next_entry+0x380/0x380
[  163.666172][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.666195][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.666215][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  163.666244][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.666272][ T3353]  vfs_read+0x286/0x930
[  163.666294][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.666313][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.666336][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.666359][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.666383][ T3353]  ksys_read+0x14a/0x260
[  163.666404][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.666427][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.666454][ T3353]  __x64_sys_read+0x7b/0x90
[  163.666485][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.666512][ T3353]  do_syscall_64+0x4c/0xa0
[  163.666533][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.666559][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.666586][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.666611][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.666629][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.666648][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.666671][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.666689][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.666703][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.666719][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.666733][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.666754][ T3353]  </TASK>
[  163.666761][ T3353] ---[ end trace 0000000000000000 ]---
[  163.682875][   T28] audit: type=1400 audit(1792400135.625:1482): avc:  denied  { read } for  pid=3424 comm="syz.5.797" path="socket:[29653]" dev="sockfs" ino=29653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  163.683354][ T3353] ------------[ cut here ]------------
[  163.683363][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.683406][ T3353] Modules linked in:
[  163.683419][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.683443][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.683456][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.683489][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.683508][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  163.683526][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.683543][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.683558][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.683575][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.683591][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.683607][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.683627][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.683643][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.683662][ T3353] Call Trace:
[  163.683669][ T3353]  <TASK>
[  163.683681][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.683707][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.683730][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.683761][ T3353]  rb_buffer_peek+0x5f/0x930
[  163.683783][ T3353]  ring_buffer_consume+0x1aa/0x370
[  163.683806][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.683828][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.683849][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  163.683877][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.683903][ T3353]  vfs_read+0x286/0x930
[  163.683925][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.683944][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.683967][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.683990][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.684015][ T3353]  ksys_read+0x14a/0x260
[  163.684036][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.684057][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.684084][ T3353]  __x64_sys_read+0x7b/0x90
[  163.684107][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.684134][ T3353]  do_syscall_64+0x4c/0xa0
[  163.684153][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.684179][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.684205][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.684230][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.684247][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.684266][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.684289][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.684305][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.684320][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.684335][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.684349][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.684370][ T3353]  </TASK>
[  163.684377][ T3353] ---[ end trace 0000000000000000 ]---
[  163.684444][ T3353] ------------[ cut here ]------------
[  163.684451][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.684493][ T3353] Modules linked in:
[  163.684503][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.684525][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.684537][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.684562][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.684580][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  163.684599][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.684617][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.684632][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.684651][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.684669][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.684686][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.684708][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.684725][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.684744][ T3353] Call Trace:
[  163.684751][ T3353]  <TASK>
[  163.684763][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.684792][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.684815][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.684848][ T3353]  rb_advance_reader+0x2b/0x770
[  163.684871][ T3353]  ring_buffer_consume+0x1e7/0x370
[  163.684897][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.684921][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.684940][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  163.684967][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.684990][ T3353]  vfs_read+0x286/0x930
[  163.685011][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.685032][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.685053][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.685075][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.685099][ T3353]  ksys_read+0x14a/0x260
[  163.685121][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.685144][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.685171][ T3353]  __x64_sys_read+0x7b/0x90
[  163.685193][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.685219][ T3353]  do_syscall_64+0x4c/0xa0
[  163.685239][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.685264][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.685290][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.685315][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.685332][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.685353][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.685377][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.685393][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.685408][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.685423][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.685438][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.685459][ T3353]  </TASK>
[  163.685466][ T3353] ---[ end trace 0000000000000000 ]---
[  163.685550][ T3353] ------------[ cut here ]------------
[  163.685557][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.685592][ T3353] Modules linked in:
[  163.685603][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.685625][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.685637][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.685662][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.685681][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  163.685699][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.685716][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.685731][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.685748][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.685766][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.685783][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.685803][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.685819][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.685839][ T3353] Call Trace:
[  163.685846][ T3353]  <TASK>
[  163.685853][ T3353]  ? rb_get_reader_page+0xada/0xc60
[  163.685881][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.685906][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.685929][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.685961][ T3353]  rb_buffer_peek+0x5f/0x930
[  163.685984][ T3353]  ring_buffer_peek+0x184/0x3b0
[  163.686008][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  163.686029][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.686052][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.686083][ T3353]  ? _find_next_bit+0x8a/0x130
[  163.686108][ T3353]  __find_next_entry+0x33c/0x6c0
[  163.686143][ T3353]  ? trace_find_next_entry+0x380/0x380
[  163.686176][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.686199][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.686220][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  163.686250][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.686277][ T3353]  vfs_read+0x286/0x930
[  163.686299][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.686319][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.686343][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.686365][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.686390][ T3353]  ksys_read+0x14a/0x260
[  163.686412][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.686434][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.686461][ T3353]  __x64_sys_read+0x7b/0x90
[  163.686490][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.686521][ T3353]  do_syscall_64+0x4c/0xa0
[  163.686540][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.686565][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.686591][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.686615][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.686632][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.686651][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.686673][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.686690][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.686705][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.686720][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.686734][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.686755][ T3353]  </TASK>
[  163.686762][ T3353] ---[ end trace 0000000000000000 ]---
[  163.686912][ T3353] ------------[ cut here ]------------
[  163.686919][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.686954][ T3353] Modules linked in:
[  163.686965][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.686988][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.687000][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.687028][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.687045][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010012
[  163.687062][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.687078][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.687092][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.687109][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.687125][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.687142][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.687163][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.687180][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.687200][ T3353] Call Trace:
[  163.687206][ T3353]  <TASK>
[  163.687219][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.687244][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.687267][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.687301][ T3353]  rb_buffer_peek+0x5f/0x930
[  163.687324][ T3353]  ring_buffer_consume+0x1aa/0x370
[  163.687349][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.687372][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.687392][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  163.687422][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.687451][ T3353]  vfs_read+0x286/0x930
[  163.687481][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.687502][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.687525][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.687547][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.687570][ T3353]  ksys_read+0x14a/0x260
[  163.687592][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.687614][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.687640][ T3353]  __x64_sys_read+0x7b/0x90
[  163.687661][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.687687][ T3353]  do_syscall_64+0x4c/0xa0
[  163.687705][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.687731][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.687756][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.687781][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.687798][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.687817][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.687839][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.687855][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.687870][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.687883][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.687899][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.687918][ T3353]  </TASK>
[  163.687925][ T3353] ---[ end trace 0000000000000000 ]---
[  163.687991][ T3353] ------------[ cut here ]------------
[  163.687998][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.688031][ T3353] Modules linked in:
[  163.688042][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  163.688065][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.688077][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  163.688103][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  163.688121][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  163.688139][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  163.688155][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  163.688170][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  163.688186][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  163.688202][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  163.688218][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  163.688238][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.688254][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  163.688274][ T3353] Call Trace:
[  163.688281][ T3353]  <TASK>
[  163.688292][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  163.688319][ T3353]  ? __kasan_check_write+0x14/0x20
[  163.688342][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  163.688374][ T3353]  rb_advance_reader+0x2b/0x770
[  163.688397][ T3353]  ring_buffer_consume+0x1e7/0x370
[  163.688421][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  163.688445][ T3353]  ? print_trace_line+0x393/0x6b0
[  163.688466][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  163.688504][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  163.688532][ T3353]  vfs_read+0x286/0x930
[  163.688553][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  163.688574][ T3353]  ? __cfi_do_futex+0x10/0x10
[  163.688598][ T3353]  ? __kasan_check_read+0x11/0x20
[  163.688620][ T3353]  ? __fdget_pos+0x2d4/0x380
[  163.688645][ T3353]  ksys_read+0x14a/0x260
[  163.688667][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  163.688689][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  163.688716][ T3353]  __x64_sys_read+0x7b/0x90
[  163.688738][ T3353]  x64_sys_call+0x2f/0x9a0
[  163.688765][ T3353]  do_syscall_64+0x4c/0xa0
[  163.688784][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.688809][ T3353]  ? clear_bhb_loop+0x30/0x80
[  163.688835][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.688861][ T3353] RIP: 0033:0x7f9b00d9e559
[  163.688877][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.688896][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.688919][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  163.688936][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  163.688951][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  163.688966][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.688981][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  163.689002][ T3353]  </TASK>
[  163.689009][ T3353] ---[ end trace 0000000000000000 ]---
[  163.699400][ T3353] ------------[ cut here ]------------
[  163.730480][ T3437] loop8: detected capacity change from 0 to 128
[  163.744643][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  163.744689][ T3353] Modules linked in:
[  163.744701][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.808643][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.808660][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.808689][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.808705][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010006
[  165.808722][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.808737][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.808749][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.808762][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.808776][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.808790][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.808806][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.808819][ T3353] CR2: 00005574ae9ec300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  165.808835][ T3353] Call Trace:
[  165.808841][ T3353]  <TASK>
[  165.808853][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  165.808874][ T3353]  ? __schedule+0xcbb/0x1700
[  165.808892][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.808911][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.808937][ T3353]  rb_buffer_peek+0x5f/0x930
[  165.808955][ T3353]  ring_buffer_peek+0x184/0x3b0
[  165.808972][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.808997][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  165.809015][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  165.809036][ T3353]  ? _find_next_bit+0x8a/0x130
[  165.809057][ T3353]  __find_next_entry+0x33c/0x6c0
[  165.809086][ T3353]  ? trace_find_next_entry+0x380/0x380
[  165.809112][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.809130][ T3353]  ? print_trace_line+0x393/0x6b0
[  165.809147][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  165.809171][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.809192][ T3353]  vfs_read+0x286/0x930
[  165.809210][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  165.809226][ T3353]  ? __cfi_do_futex+0x10/0x10
[  165.809245][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.809262][ T3353]  ? __fdget_pos+0x2d4/0x380
[  165.809292][ T3353]  ksys_read+0x14a/0x260
[  165.809310][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  165.809327][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  165.809348][ T3353]  __x64_sys_read+0x7b/0x90
[  165.809366][ T3353]  x64_sys_call+0x2f/0x9a0
[  165.809387][ T3353]  do_syscall_64+0x4c/0xa0
[  165.809402][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.809423][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.809443][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.809463][ T3353] RIP: 0033:0x7f9b00d9e559
[  165.809477][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.809494][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.809512][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  165.809526][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  165.809537][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  165.809549][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.809560][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  165.809576][ T3353]  </TASK>
[  165.809582][ T3353] ---[ end trace 0000000000000000 ]---
[  165.824233][ T3353] ------------[ cut here ]------------
[  165.824248][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.824287][ T3353] Modules linked in:
[  165.824301][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.824323][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.824336][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.824361][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.824379][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  165.824399][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.824416][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.824431][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.824447][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.824465][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.824482][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.824503][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.824519][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  165.824540][ T3353] Call Trace:
[  165.824547][ T3353]  <TASK>
[  165.824560][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  165.824588][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.824612][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.824646][ T3353]  rb_buffer_peek+0x5f/0x930
[  165.824669][ T3353]  ring_buffer_consume+0x1aa/0x370
[  165.824694][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.824718][ T3353]  ? print_trace_line+0x393/0x6b0
[  165.824740][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  165.824770][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.824797][ T3353]  vfs_read+0x286/0x930
[  165.824820][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  165.824840][ T3353]  ? __cfi_do_futex+0x10/0x10
[  165.824864][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.824886][ T3353]  ? __fdget_pos+0x2d4/0x380
[  165.824912][ T3353]  ksys_read+0x14a/0x260
[  165.824934][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  165.824956][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  165.824984][ T3353]  __x64_sys_read+0x7b/0x90
[  165.825016][ T3353]  x64_sys_call+0x2f/0x9a0
[  165.825042][ T3353]  do_syscall_64+0x4c/0xa0
[  165.825062][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.825087][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.825112][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.825137][ T3353] RIP: 0033:0x7f9b00d9e559
[  165.825156][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.825175][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.825197][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  165.825214][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  165.825230][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  165.825244][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.825258][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  165.825279][ T3353]  </TASK>
[  165.825286][ T3353] ---[ end trace 0000000000000000 ]---
[  165.825351][ T3353] ------------[ cut here ]------------
[  165.825358][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.825391][ T3353] Modules linked in:
[  165.825402][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.825423][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.825435][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.825459][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.825477][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  165.825495][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.825511][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.825526][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.825542][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.825558][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.825573][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.825592][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.825608][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  165.825626][ T3353] Call Trace:
[  165.825633][ T3353]  <TASK>
[  165.825645][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  165.825670][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.825692][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.825722][ T3353]  rb_advance_reader+0x2b/0x770
[  165.825742][ T3353]  ring_buffer_consume+0x1e7/0x370
[  165.825765][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.825787][ T3353]  ? print_trace_line+0x393/0x6b0
[  165.825807][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  165.825836][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.825863][ T3353]  vfs_read+0x286/0x930
[  165.825883][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  165.825902][ T3353]  ? __cfi_do_futex+0x10/0x10
[  165.825925][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.825947][ T3353]  ? __fdget_pos+0x2d4/0x380
[  165.825972][ T3353]  ksys_read+0x14a/0x260
[  165.826001][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  165.826023][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  165.826050][ T3353]  __x64_sys_read+0x7b/0x90
[  165.826073][ T3353]  x64_sys_call+0x2f/0x9a0
[  165.826096][ T3353]  do_syscall_64+0x4c/0xa0
[  165.826113][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.826136][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.826159][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.826183][ T3353] RIP: 0033:0x7f9b00d9e559
[  165.826199][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.826217][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.826238][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  165.826255][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  165.826269][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  165.826284][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.826298][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  165.826319][ T3353]  </TASK>
[  165.826326][ T3353] ---[ end trace 0000000000000000 ]---
[  165.826398][ T3353] ------------[ cut here ]------------
[  165.826405][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.826439][ T3353] Modules linked in:
[  165.826449][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.826472][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.826484][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.826507][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.826526][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  165.826544][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.826560][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.826573][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.826588][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.826605][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.826620][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.826639][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.826654][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  165.826672][ T3353] Call Trace:
[  165.826678][ T3353]  <TASK>
[  165.826684][ T3353]  ? rb_get_reader_page+0xada/0xc60
[  165.826711][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  165.826736][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.826756][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.826786][ T3353]  rb_buffer_peek+0x5f/0x930
[  165.826808][ T3353]  ring_buffer_peek+0x184/0x3b0
[  165.826831][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  165.826851][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.826871][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.826902][ T3353]  ? _find_next_bit+0x8a/0x130
[  165.826926][ T3353]  __find_next_entry+0x33c/0x6c0
[  165.826959][ T3353]  ? trace_find_next_entry+0x380/0x380
[  165.827005][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.827029][ T3353]  ? print_trace_line+0x393/0x6b0
[  165.827050][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  165.827083][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.827111][ T3353]  vfs_read+0x286/0x930
[  165.827133][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  165.827152][ T3353]  ? __cfi_do_futex+0x10/0x10
[  165.827175][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.827196][ T3353]  ? __fdget_pos+0x2d4/0x380
[  165.827220][ T3353]  ksys_read+0x14a/0x260
[  165.827242][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  165.827264][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  165.827289][ T3353]  __x64_sys_read+0x7b/0x90
[  165.827309][ T3353]  x64_sys_call+0x2f/0x9a0
[  165.827333][ T3353]  do_syscall_64+0x4c/0xa0
[  165.827353][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.827377][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.827404][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.827428][ T3353] RIP: 0033:0x7f9b00d9e559
[  165.827446][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.827465][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.827489][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  165.827507][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  165.827522][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  165.827538][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.827552][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  165.827573][ T3353]  </TASK>
[  165.827581][ T3353] ---[ end trace 0000000000000000 ]---
[  165.827734][ T3353] ------------[ cut here ]------------
[  165.827741][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.827771][ T3353] Modules linked in:
[  165.827781][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.827801][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.827814][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.827836][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.827853][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  165.827870][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.827886][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.827901][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.827917][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.827933][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.827948][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.827968][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.827984][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  165.828012][ T3353] Call Trace:
[  165.828019][ T3353]  <TASK>
[  165.828031][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  165.828057][ T3353]  ? __kasan_check_write+0x14/0x20
[  165.828078][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  165.828107][ T3353]  rb_buffer_peek+0x5f/0x930
[  165.828127][ T3353]  ring_buffer_consume+0x1aa/0x370
[  165.828148][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  165.828169][ T3353]  ? print_trace_line+0x393/0x6b0
[  165.828188][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  165.828216][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  165.828241][ T3353]  vfs_read+0x286/0x930
[  165.828263][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  165.828283][ T3353]  ? __cfi_do_futex+0x10/0x10
[  165.828306][ T3353]  ? __kasan_check_read+0x11/0x20
[  165.828328][ T3353]  ? __fdget_pos+0x2d4/0x380
[  165.828352][ T3353]  ksys_read+0x14a/0x260
[  165.828374][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  165.828395][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  165.828420][ T3353]  __x64_sys_read+0x7b/0x90
[  165.828440][ T3353]  x64_sys_call+0x2f/0x9a0
[  165.828464][ T3353]  do_syscall_64+0x4c/0xa0
[  165.828482][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.828506][ T3353]  ? clear_bhb_loop+0x30/0x80
[  165.828530][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.828553][ T3353] RIP: 0033:0x7f9b00d9e559
[  165.828569][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.828586][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.828609][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  165.828625][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  165.828640][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  165.828654][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.828668][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  165.828687][ T3353]  </TASK>
[  165.828693][ T3353] ---[ end trace 0000000000000000 ]---
[  165.828760][ T3353] ------------[ cut here ]------------
[  165.828767][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  165.828801][ T3353] Modules linked in:
[  165.828812][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  165.828834][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.828847][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  165.828871][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  165.828890][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  165.828907][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  165.828923][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  165.828939][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  165.828954][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  165.828971][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  165.828995][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  165.829016][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.829031][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  167.670448][ T3353] Call Trace:
[  167.673748][ T3353]  <TASK>
[  167.676780][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  167.682438][ T3353]  ? __kasan_check_write+0x14/0x20
[  167.687575][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  167.692280][ T3353]  rb_advance_reader+0x2b/0x770
[  167.697149][ T3353]  ring_buffer_consume+0x1e7/0x370
[  167.702276][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  167.707926][ T3353]  ? print_trace_line+0x393/0x6b0
[  167.712962][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  167.717920][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  167.723407][ T3353]  vfs_read+0x286/0x930
[  167.727582][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  167.732268][ T3353]  ? __cfi_do_futex+0x10/0x10
[  167.736964][ T3353]  ? __kasan_check_read+0x11/0x20
[  167.742002][ T3353]  ? __fdget_pos+0x2d4/0x380
[  167.746605][ T3353]  ksys_read+0x14a/0x260
[  167.750862][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  167.755643][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  167.761305][ T3353]  __x64_sys_read+0x7b/0x90
[  167.765845][ T3353]  x64_sys_call+0x2f/0x9a0
[  167.770283][ T3353]  do_syscall_64+0x4c/0xa0
[  167.774718][ T3353]  ? clear_bhb_loop+0x30/0x80
[  167.779426][ T3353]  ? clear_bhb_loop+0x30/0x80
[  167.784125][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.790034][ T3353] RIP: 0033:0x7f9b00d9e559
[  167.794470][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.814096][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  167.822533][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  167.830524][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  167.838506][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  167.846487][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.854467][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  167.862455][ T3353]  </TASK>
[  167.865481][ T3353] ---[ end trace 0000000000000000 ]---
[  167.872525][ T3353] ------------[ cut here ]------------
[  167.878031][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  167.888320][ T3353] Modules linked in:
[  167.892244][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  167.901043][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.911131][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  167.916991][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  167.936642][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010006
[  167.942763][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  167.950762][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  167.958755][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  167.966744][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  167.974748][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  167.982736][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  167.991701][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.998305][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  168.006298][ T3353] Call Trace:
[  168.009590][ T3353]  <TASK>
[  168.012540][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  168.018197][ T3353]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[  168.024281][ T3353]  ? __kasan_check_write+0x14/0x20
[  168.029407][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  168.034104][ T3353]  rb_buffer_peek+0x5f/0x930
[  168.038725][ T3353]  ring_buffer_peek+0x184/0x3b0
[  168.043591][ T3353]  ? __kasan_check_read+0x11/0x20
[  168.048648][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  168.054039][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  168.060208][ T3353]  ? _find_next_bit+0x8a/0x130
[  168.064990][ T3353]  __find_next_entry+0x33c/0x6c0
[  168.069957][ T3353]  ? trace_find_next_entry+0x380/0x380
[  168.075459][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.081114][ T3353]  ? print_trace_line+0x393/0x6b0
[  168.086148][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  168.091112][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.096588][ T3353]  vfs_read+0x286/0x930
[  168.100763][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  168.105458][ T3353]  ? __cfi_do_futex+0x10/0x10
[  168.110153][ T3353]  ? __kasan_check_read+0x11/0x20
[  168.115193][ T3353]  ? __fdget_pos+0x2d4/0x380
[  168.119802][ T3353]  ksys_read+0x14a/0x260
[  168.124064][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  168.128841][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  168.134492][ T3353]  __x64_sys_read+0x7b/0x90
[  168.139011][ T3353]  x64_sys_call+0x2f/0x9a0
[  168.143455][ T3353]  do_syscall_64+0x4c/0xa0
[  168.147881][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.152573][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.157265][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.163173][ T3353] RIP: 0033:0x7f9b00d9e559
[  168.167607][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.187248][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.195681][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  168.203670][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  168.211673][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  168.219662][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.227647][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  168.235644][ T3353]  </TASK>
[  168.238688][ T3353] ---[ end trace 0000000000000000 ]---
[  168.246386][ T3353] ------------[ cut here ]------------
[  168.251889][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.262173][ T3353] Modules linked in:
[  168.266102][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  168.274893][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.284970][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.290799][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  168.310529][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  168.316630][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  168.324629][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  168.332615][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  168.340598][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  168.348584][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  168.356593][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  168.365546][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.372136][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  168.380123][ T3353] Call Trace:
[  168.383412][ T3353]  <TASK>
[  168.386360][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  168.392032][ T3353]  ? __kasan_check_write+0x14/0x20
[  168.397194][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  168.401912][ T3353]  rb_buffer_peek+0x5f/0x930
[  168.406538][ T3353]  ring_buffer_consume+0x1aa/0x370
[  168.411769][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.417424][ T3353]  ? print_trace_line+0x393/0x6b0
[  168.422462][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  168.427423][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.432896][ T3353]  vfs_read+0x286/0x930
[  168.437071][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  168.441763][ T3353]  ? __cfi_do_futex+0x10/0x10
[  168.446461][ T3353]  ? __kasan_check_read+0x11/0x20
[  168.451531][ T3353]  ? __fdget_pos+0x2d4/0x380
[  168.456136][ T3353]  ksys_read+0x14a/0x260
[  168.460396][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  168.465174][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  168.470840][ T3353]  __x64_sys_read+0x7b/0x90
[  168.475361][ T3353]  x64_sys_call+0x2f/0x9a0
[  168.479800][ T3353]  do_syscall_64+0x4c/0xa0
[  168.484229][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.488924][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.493623][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.499535][ T3353] RIP: 0033:0x7f9b00d9e559
[  168.503963][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.523586][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.532017][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  168.540005][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  168.547991][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  168.555977][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.563971][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  168.572015][ T3353]  </TASK>
[  168.575060][ T3353] ---[ end trace 0000000000000000 ]---
[  168.580579][ T3353] ------------[ cut here ]------------
[  168.586041][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.596322][ T3353] Modules linked in:
[  168.600233][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  168.609008][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.619085][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.624931][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  168.644550][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  168.650644][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  168.658629][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  168.666612][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  168.674598][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  168.682587][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  168.690578][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  168.699544][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.706149][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  168.714139][ T3353] Call Trace:
[  168.717430][ T3353]  <TASK>
[  168.720376][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  168.726028][ T3353]  ? __kasan_check_write+0x14/0x20
[  168.731156][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  168.735863][ T3353]  rb_advance_reader+0x2b/0x770
[  168.740733][ T3353]  ring_buffer_consume+0x1e7/0x370
[  168.745862][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  168.751512][ T3353]  ? print_trace_line+0x393/0x6b0
[  168.756555][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  168.761518][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  168.766995][ T3353]  vfs_read+0x286/0x930
[  168.771166][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  168.775874][ T3353]  ? __cfi_do_futex+0x10/0x10
[  168.780590][ T3353]  ? __kasan_check_read+0x11/0x20
[  168.785640][ T3353]  ? __fdget_pos+0x2d4/0x380
[  168.790257][ T3353]  ksys_read+0x14a/0x260
[  168.794533][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  168.799315][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  168.804964][ T3353]  __x64_sys_read+0x7b/0x90
[  168.809518][ T3353]  x64_sys_call+0x2f/0x9a0
[  168.814042][ T3353]  do_syscall_64+0x4c/0xa0
[  168.818472][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.823167][ T3353]  ? clear_bhb_loop+0x30/0x80
[  168.827866][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.833774][ T3353] RIP: 0033:0x7f9b00d9e559
[  168.838219][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.857861][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.866303][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  168.874289][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  168.882372][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  168.890379][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.898369][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  168.906404][ T3353]  </TASK>
[  168.909437][ T3353] ---[ end trace 0000000000000000 ]---
[  168.916519][ T3353] ------------[ cut here ]------------
[  168.922019][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  168.932291][ T3353] Modules linked in:
[  168.936198][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  168.944973][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.955037][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  168.960868][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  168.980485][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010006
[  168.986564][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  168.994552][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  169.002537][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  169.010527][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  169.018517][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  169.026501][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  169.035544][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.042142][ T3353] CR2: 00007fb097374e9c CR3: 000000012dae1000 CR4: 00000000003506b0
[  169.050130][ T3353] Call Trace:
[  169.053422][ T3353]  <TASK>
[  169.056378][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  169.062035][ T3353]  ? __schedule+0xcbb/0x1700
[  169.066642][ T3353]  ? __kasan_check_write+0x14/0x20
[  169.071786][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  169.076505][ T3353]  rb_buffer_peek+0x5f/0x930
[  169.081118][ T3353]  ring_buffer_peek+0x184/0x3b0
[  169.085984][ T3353]  ? __kasan_check_read+0x11/0x20
[  169.091043][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  169.096434][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  169.102607][ T3353]  ? _find_next_bit+0x8a/0x130
[  169.107394][ T3353]  __find_next_entry+0x33c/0x6c0
[  169.112361][ T3353]  ? trace_find_next_entry+0x380/0x380
[  169.117844][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  169.123788][ T3353]  ? print_trace_line+0x393/0x6b0
[  169.128917][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  169.133879][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  169.139370][ T3353]  vfs_read+0x286/0x930
[  169.143568][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  169.148260][ T3353]  ? __cfi_do_futex+0x10/0x10
[  169.152960][ T3353]  ? __kasan_check_read+0x11/0x20
[  169.158000][ T3353]  ? __fdget_pos+0x2d4/0x380
[  169.162638][ T3353]  ksys_read+0x14a/0x260
[  169.166917][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  169.171698][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  169.177354][ T3353]  __x64_sys_read+0x7b/0x90
[  169.181904][ T3353]  x64_sys_call+0x2f/0x9a0
[  169.186338][ T3353]  do_syscall_64+0x4c/0xa0
[  169.190780][ T3353]  ? clear_bhb_loop+0x30/0x80
[  169.195509][ T3353]  ? clear_bhb_loop+0x30/0x80
[  169.200232][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.206164][ T3353] RIP: 0033:0x7f9b00d9e559
[  169.210688][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.230317][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.238765][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  169.246849][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  169.254844][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  169.262846][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.270839][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  169.278842][ T3353]  </TASK>
[  169.281886][ T3353] ---[ end trace 0000000000000000 ]---
[  169.500265][ T3477] loop8: detected capacity change from 0 to 512
[  169.506749][   T28] audit: type=1400 audit(1792400140.988:1483): avc:  denied  { getopt } for  pid=3478 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  169.528311][ T3479] loop5: detected capacity change from 0 to 1024
[  169.555461][ T3479] EXT4-fs: Ignoring removed bh option
[  169.571028][   T28] audit: type=1400 audit(1792400140.988:1484): avc:  denied  { read } for  pid=3478 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  169.600420][ T3479] EXT4-fs: Ignoring removed bh option
[  169.611028][ T3465] xt_hashlimit: size too large, truncated to 1048576
[  169.636077][ T3477] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  169.646942][ T3353] ------------[ cut here ]------------
[  169.652446][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  169.662743][ T3353] Modules linked in:
[  169.666679][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  169.675482][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.685595][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  169.691449][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  169.711090][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  169.717188][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  169.725193][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  169.733197][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  169.741196][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  169.749215][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  169.757217][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  169.766174][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.772785][ T3353] CR2: 0000001b30823ffc CR3: 000000012dae1000 CR4: 00000000003506a0
[  169.780790][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.788787][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.796792][ T3353] Call Trace:
[  169.800130][ T3353]  <TASK>
[  169.803127][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  169.808799][ T3353]  ? __kasan_check_write+0x14/0x20
[  169.813961][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  169.818682][ T3353]  rb_buffer_peek+0x5f/0x930
[  169.823336][ T3353]  ring_buffer_consume+0x1aa/0x370
[  169.828496][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  169.829464][ T3466] xt_hashlimit: size too large, truncated to 1048576
[  169.834165][ T3353]  ? print_trace_line+0x393/0x6b0
[  169.834189][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  169.834219][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  169.856378][ T3353]  vfs_read+0x286/0x930
[  169.861013][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  169.865743][ T3353]  ? __cfi_do_futex+0x10/0x10
[  169.870458][ T3353]  ? __kasan_check_read+0x11/0x20
[  169.875519][ T3353]  ? __fdget_pos+0x2d4/0x380
[  169.880166][ T3353]  ksys_read+0x14a/0x260
[  169.884453][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  169.889254][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  169.894924][ T3353]  __x64_sys_read+0x7b/0x90
[  169.899463][ T3353]  x64_sys_call+0x2f/0x9a0
[  169.903921][ T3353]  do_syscall_64+0x4c/0xa0
[  169.908366][ T3353]  ? clear_bhb_loop+0x30/0x80
[  169.913089][ T3353]  ? clear_bhb_loop+0x30/0x80
[  169.917823][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.923747][ T3353] RIP: 0033:0x7f9b00d9e559
[  169.928193][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.943546][ T3477] EXT4-fs error (device loop8): ext4_readdir:223: inode #2: comm syz.8.811: path /20/file0: directory fails checksum at offset 0
[  169.948008][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.969734][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  169.977803][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  169.982399][ T3477] EXT4-fs (loop8): Remounting filesystem read-only
[  169.985813][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  169.985833][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.008447][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  170.016467][ T3353]  </TASK>
[  170.019566][ T3353] ---[ end trace 0000000000000000 ]---
[  170.025128][ T3353] ------------[ cut here ]------------
[  170.030603][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  170.040892][ T3353] Modules linked in:
[  170.044829][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  170.053715][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.063811][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  170.069665][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  170.089315][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  170.095423][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  170.103432][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  170.111448][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  170.119463][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  170.127476][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  170.135496][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  170.144464][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.151098][ T3353] CR2: 0000001b30823ffc CR3: 000000012dae1000 CR4: 00000000003506a0
[  170.159116][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.167131][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.175148][ T3353] Call Trace:
[  170.178463][ T3353]  <TASK>
[  170.181432][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  170.187138][ T3353]  ? __kasan_check_write+0x14/0x20
[  170.192302][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  170.197024][ T3353]  rb_advance_reader+0x2b/0x770
[  170.201928][ T3353]  ring_buffer_consume+0x1e7/0x370
[  170.207084][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  170.212762][ T3353]  ? print_trace_line+0x393/0x6b0
[  170.217848][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  170.222843][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  170.228354][ T3353]  vfs_read+0x286/0x930
[  170.232545][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  170.237268][ T3353]  ? __cfi_do_futex+0x10/0x10
[  170.241986][ T3353]  ? __kasan_check_read+0x11/0x20
[  170.247051][ T3353]  ? __fdget_pos+0x2d4/0x380
[  170.251690][ T3353]  ksys_read+0x14a/0x260
[  170.255999][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  170.260805][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  170.266485][ T3353]  __x64_sys_read+0x7b/0x90
[  170.271026][ T3353]  x64_sys_call+0x2f/0x9a0
[  170.275490][ T3353]  do_syscall_64+0x4c/0xa0
[  170.279947][ T3353]  ? clear_bhb_loop+0x30/0x80
[  170.284755][ T3353]  ? clear_bhb_loop+0x30/0x80
[  170.289488][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.295432][ T3353] RIP: 0033:0x7f9b00d9e559
[  170.299895][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.319540][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.328002][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  170.336012][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  170.344017][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  170.352031][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.360040][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  170.368052][ T3353]  </TASK>
[  170.371098][ T3353] ---[ end trace 0000000000000000 ]---
[  170.379540][ T3016] EXT4-fs (loop8): unmounting filesystem.
[  170.405098][ T3479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  170.436946][ T3353] ------------[ cut here ]------------
[  170.442483][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  170.452774][ T3353] Modules linked in:
[  170.456697][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  170.465485][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.475584][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  170.481447][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  170.501083][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010006
[  170.507181][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  170.515177][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  170.523177][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  170.531180][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  170.539185][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  170.547214][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  170.556182][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.562800][ T3353] CR2: 00007f2f936e2ff8 CR3: 000000012dae1000 CR4: 00000000003506b0
[  170.570810][ T3353] Call Trace:
[  170.574117][ T3353]  <TASK>
[  170.577071][ T3353]  ? release_firmware_map_entry+0x190/0x190
[  170.583000][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  170.588660][ T3353]  ? __schedule+0xcbb/0x1700
[  170.593285][ T3353]  ? __kasan_check_write+0x14/0x20
[  170.598430][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  170.603160][ T3353]  rb_buffer_peek+0x5f/0x930
[  170.607792][ T3353]  ring_buffer_peek+0x184/0x3b0
[  170.612673][ T3353]  ? sysvec_reschedule_ipi+0x78/0x80
[  170.618002][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  170.623411][ T3353]  __find_next_entry+0x33c/0x6c0
[  170.628397][ T3353]  ? trace_find_next_entry+0x380/0x380
[  170.633928][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  170.639614][ T3353]  ? print_trace_line+0x393/0x6b0
[  170.644690][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  170.649771][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  170.655283][ T3353]  vfs_read+0x286/0x930
[  170.659494][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  170.664220][ T3353]  ? __cfi_do_futex+0x10/0x10
[  170.668948][ T3353]  ? __kasan_check_read+0x11/0x20
[  170.674018][ T3353]  ? __fdget_pos+0x2d4/0x380
[  170.678655][ T3353]  ksys_read+0x14a/0x260
[  170.682930][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  170.687750][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  170.693432][ T3353]  __x64_sys_read+0x7b/0x90
[  170.697980][ T3353]  x64_sys_call+0x2f/0x9a0
[  170.702457][ T3353]  do_syscall_64+0x4c/0xa0
[  170.706910][ T3353]  ? clear_bhb_loop+0x30/0x80
[  170.711633][ T3353]  ? clear_bhb_loop+0x30/0x80
[  170.716361][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.722296][ T3353] RIP: 0033:0x7f9b00d9e559
[  170.726752][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.746408][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.754906][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  170.763265][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  170.771275][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  170.779287][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.787299][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  170.795322][ T3353]  </TASK>
[  170.798372][ T3353] ---[ end trace 0000000000000000 ]---
[  170.819670][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.828633][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.836247][ T3482] device bridge_slave_0 entered promiscuous mode
[  170.854703][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.870949][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  170.894190][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.901775][ T3482] device bridge_slave_1 entered promiscuous mode
[  170.954456][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  170.984352][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.011190][ T3510] device ip6gre2 entered promiscuous mode
[  171.023513][   T19] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  171.038949][   T19] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  171.047212][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.054864][  T406] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  171.062737][ T2133] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  171.090748][ T3515] loop8: detected capacity change from 0 to 512
[  171.120831][ T3515] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.815: missing EA_INODE flag
[  171.152519][ T3515] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.815: error while reading EA inode 2 err=-117
[  171.166349][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.172916][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.197132][ T3515] EXT4-fs (loop8): 1 orphan inode deleted
[  171.202992][ T3515] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  171.229930][ T3353] ------------[ cut here ]------------
[  171.233268][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.235458][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  171.267760][ T3353] Modules linked in:
[  171.271776][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  171.274113][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.280570][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.289559][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.297686][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  171.297722][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  171.330204][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  171.336312][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  171.344328][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  171.348823][ T3505] device bridge_slave_0 entered promiscuous mode
[  171.352333][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  171.366659][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  171.374670][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  171.382686][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  171.391664][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.396106][ T3529] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  171.398285][ T3353] CR2: 00007f3425b59670 CR3: 000000012dae1000 CR4: 00000000003506b0
[  171.420444][ T3353] Call Trace:
[  171.423756][ T3353]  <TASK>
[  171.426731][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  171.432416][ T3353]  ? __kasan_check_write+0x14/0x20
[  171.437589][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  171.442333][ T3353]  rb_buffer_peek+0x5f/0x930
[  171.446989][ T3353]  ring_buffer_consume+0x1aa/0x370
[  171.452155][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  171.457843][ T3353]  ? print_trace_line+0x393/0x6b0
[  171.462908][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  171.467888][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  171.473384][ T3353]  vfs_read+0x286/0x930
[  171.477576][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  171.482287][ T3353]  ? __cfi_do_futex+0x10/0x10
[  171.487004][ T3353]  ? __kasan_check_read+0x11/0x20
[  171.492071][ T3353]  ? __fdget_pos+0x2d4/0x380
[  171.496701][ T3353]  ksys_read+0x14a/0x260
[  171.501013][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  171.505830][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  171.511510][ T3353]  __x64_sys_read+0x7b/0x90
[  171.516087][ T3353]  x64_sys_call+0x2f/0x9a0
[  171.520547][ T3353]  do_syscall_64+0x4c/0xa0
[  171.524997][ T3353]  ? clear_bhb_loop+0x30/0x80
[  171.529711][ T3353]  ? clear_bhb_loop+0x30/0x80
[  171.534428][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.540362][ T3353] RIP: 0033:0x7f9b00d9e559
[  171.542229][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.544813][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.544838][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246
[  171.557999][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.560357][ T3531] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  171.570965][ T3353]  ORIG_RAX: 0000000000000000
[  171.570981][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  171.570997][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  171.571011][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  171.571025][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.571045][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  171.571067][ T3353]  </TASK>
[  171.571075][ T3353] ---[ end trace 0000000000000000 ]---
[  171.571259][ T3353] ------------[ cut here ]------------
[  171.599311][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  171.599355][ T3353] Modules linked in:
[  171.648042][ T3531] overlayfs: failed to resolve './bus': -40
[  171.650068][ T3353] 
[  171.650078][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  171.672800][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.682266][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.682284][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  171.691505][ T2133] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  171.692090][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  171.699864][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.703199][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010016
[  171.703225][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  171.720783][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.725615][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  171.725637][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  171.772995][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.777474][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  171.777495][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  171.800441][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.807620][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  171.807644][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.807660][ T3353] CR2: 00007f3425b59670 CR3: 000000012dae1000 CR4: 00000000003506b0
[  171.807679][ T3353] Call Trace:
[  171.807687][ T3353]  <TASK>
[  171.836467][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.837719][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  171.857446][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.860256][ T3353]  ? __kasan_check_write+0x14/0x20
[  171.875486][ T2133] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  171.875812][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  171.885087][ T2133] EXT4-fs (loop5): Remounting filesystem read-only
[  171.887095][ T3353]  rb_advance_reader+0x2b/0x770
[  171.890765][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.912098][ T3353]  ring_buffer_consume+0x1e7/0x370
[  171.912130][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  171.912152][ T3353]  ? print_trace_line+0x393/0x6b0
[  171.912172][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  171.919231][ T2133] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  171.924323][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  171.924357][ T3353]  vfs_read+0x286/0x930
[  171.931780][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.949103][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  171.949137][ T3353]  ? __cfi_do_futex+0x10/0x10
[  171.949160][ T3353]  ? __kasan_check_read+0x11/0x20
[  171.955848][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.960385][ T3353]  ? __fdget_pos+0x2d4/0x380
[  171.960420][ T3353]  ksys_read+0x14a/0x260
[  171.968362][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.979413][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  171.979444][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  171.979471][ T3353]  __x64_sys_read+0x7b/0x90
[  171.987223][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  171.990240][ T3353]  x64_sys_call+0x2f/0x9a0
[  171.998514][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  172.000233][ T3353]  do_syscall_64+0x4c/0xa0
[  172.038214][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  172.046056][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.046091][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.046118][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.053701][ T2133] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  172.055479][ T3353] RIP: 0033:0x7f9b00d9e559
[  172.197801][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.217480][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  172.225941][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  172.233962][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  172.241980][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  172.250000][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.258016][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  172.266030][ T3353]  </TASK>
[  172.269085][ T3353] ---[ end trace 0000000000000000 ]---
[  172.275129][ T3353] ------------[ cut here ]------------
[  172.280632][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  172.281122][   T19] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  172.290911][ T3353] Modules linked in:
[  172.290925][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  172.311056][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.321144][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  172.326976][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  172.346599][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  172.352679][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  172.360664][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  172.368649][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  172.376641][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  172.384636][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  172.392621][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  172.401563][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  172.408162][ T3353] CR2: 00007f34245d6d58 CR3: 000000012dae1000 CR4: 00000000003506a0
[  172.416148][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  172.424137][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  172.432120][ T3353] Call Trace:
[  172.435409][ T3353]  <TASK>
[  172.438364][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  172.444019][ T3353]  ? __schedule+0xcbb/0x1700
[  172.448625][ T3353]  ? __kasan_check_write+0x14/0x20
[  172.453762][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  172.458482][ T3353]  rb_buffer_peek+0x5f/0x930
[  172.463106][ T3353]  ring_buffer_peek+0x184/0x3b0
[  172.467993][ T3353]  ? __kasan_check_read+0x11/0x20
[  172.473039][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  172.478429][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  172.484613][ T3353]  ? _find_next_bit+0x8a/0x130
[  172.489426][ T3353]  __find_next_entry+0x33c/0x6c0
[  172.494407][ T3353]  ? trace_find_next_entry+0x380/0x380
[  172.499898][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  172.505569][ T3353]  ? print_trace_line+0x393/0x6b0
[  172.510639][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  172.515602][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  172.521088][ T3353]  vfs_read+0x286/0x930
[  172.525263][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  172.529954][ T3353]  ? __cfi_do_futex+0x10/0x10
[  172.534649][ T3353]  ? __kasan_check_read+0x11/0x20
[  172.539685][ T3353]  ? __fdget_pos+0x2d4/0x380
[  172.544296][ T3353]  ksys_read+0x14a/0x260
[  172.548570][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  172.553352][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  172.559003][ T3353]  __x64_sys_read+0x7b/0x90
[  172.563517][ T3353]  x64_sys_call+0x2f/0x9a0
[  172.567967][ T3353]  do_syscall_64+0x4c/0xa0
[  172.572415][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.577110][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.581802][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.587711][ T3353] RIP: 0033:0x7f9b00d9e559
[  172.592143][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.611764][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  172.620197][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  172.628181][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  172.636164][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  172.644150][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.652159][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  172.660152][ T3353]  </TASK>
[  172.663184][ T3353] ---[ end trace 0000000000000000 ]---
[  172.669072][  T406] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  172.677100][ T3353] ------------[ cut here ]------------
[  172.682597][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  172.692900][ T3353] Modules linked in:
[  172.696818][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  172.705592][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.715658][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  172.721490][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  172.741113][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  172.747194][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  172.755180][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  172.763163][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  172.771152][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  172.779142][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  172.787130][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  172.796077][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  172.802674][ T3353] CR2: 00007f3425b59670 CR3: 000000012dae1000 CR4: 00000000003506b0
[  172.810679][ T3353] Call Trace:
[  172.814001][ T3353]  <TASK>
[  172.816950][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  172.822607][ T3353]  ? __kasan_check_write+0x14/0x20
[  172.827739][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  172.832451][ T3353]  rb_buffer_peek+0x5f/0x930
[  172.837058][ T3353]  ring_buffer_consume+0x1aa/0x370
[  172.842184][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  172.847838][ T3353]  ? print_trace_line+0x393/0x6b0
[  172.852984][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  172.857947][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  172.863424][ T3353]  vfs_read+0x286/0x930
[  172.867603][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  172.872300][ T3353]  ? __cfi_do_futex+0x10/0x10
[  172.876998][ T3353]  ? __kasan_check_read+0x11/0x20
[  172.882037][ T3353]  ? __fdget_pos+0x2d4/0x380
[  172.886648][ T3353]  ksys_read+0x14a/0x260
[  172.890903][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  172.895685][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  172.901341][ T3353]  __x64_sys_read+0x7b/0x90
[  172.905861][ T3353]  x64_sys_call+0x2f/0x9a0
[  172.910301][ T3353]  do_syscall_64+0x4c/0xa0
[  172.914734][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.919429][ T3353]  ? clear_bhb_loop+0x30/0x80
[  172.924140][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.930052][ T3353] RIP: 0033:0x7f9b00d9e559
[  172.934499][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.954230][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  172.962662][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  172.970647][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  172.978631][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  172.986619][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.994612][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  173.002605][ T3353]  </TASK>
[  173.005637][ T3353] ---[ end trace 0000000000000000 ]---
[  173.011150][ T3353] ------------[ cut here ]------------
[  173.016644][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  173.026907][ T3353] Modules linked in:
[  173.030832][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  173.039608][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.049692][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  173.055523][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  173.075161][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  173.081240][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  173.089229][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  173.097213][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  173.105204][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  173.113188][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  173.121176][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  173.130122][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.136717][ T3353] CR2: 00007f3425b59670 CR3: 000000012dae1000 CR4: 00000000003506b0
[  173.144705][ T3353] Call Trace:
[  173.147992][ T3353]  <TASK>
[  173.150949][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  173.156605][ T3353]  ? __kasan_check_write+0x14/0x20
[  173.161732][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  173.166434][ T3353]  rb_advance_reader+0x2b/0x770
[  173.171305][ T3353]  ring_buffer_consume+0x1e7/0x370
[  173.176438][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  173.182091][ T3353]  ? print_trace_line+0x393/0x6b0
[  173.187148][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  173.192109][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  173.197587][ T3353]  vfs_read+0x286/0x930
[  173.201761][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  173.206454][ T3353]  ? __cfi_do_futex+0x10/0x10
[  173.211151][ T3353]  ? __kasan_check_read+0x11/0x20
[  173.216194][ T3353]  ? __fdget_pos+0x2d4/0x380
[  173.220804][ T3353]  ksys_read+0x14a/0x260
[  173.225058][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  173.229836][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  173.235500][ T3353]  __x64_sys_read+0x7b/0x90
[  173.240032][ T3353]  x64_sys_call+0x2f/0x9a0
[  173.244464][ T3353]  do_syscall_64+0x4c/0xa0
[  173.248892][ T3353]  ? clear_bhb_loop+0x30/0x80
[  173.253593][ T3353]  ? clear_bhb_loop+0x30/0x80
[  173.258286][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.264204][ T3353] RIP: 0033:0x7f9b00d9e559
[  173.268629][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.288245][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.296688][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  173.304697][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  173.312704][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  173.320713][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.328739][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  173.336761][ T3353]  </TASK>
[  173.339812][ T3353] ---[ end trace 0000000000000000 ]---
[  173.351451][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.358862][ T3353] ------------[ cut here ]------------
[  173.364381][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  173.373945][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.374673][ T3353] Modules linked in:
[  173.385626][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  173.394432][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.397115][ T3505] device bridge_slave_1 entered promiscuous mode
[  173.404525][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  173.413138][ T3515] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  173.416736][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  173.416759][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  173.416779][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  173.416795][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  173.428958][ T3515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  173.445754][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  173.445780][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  173.445796][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  173.445812][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  173.445834][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.517027][ T3353] CR2: 00007f3424573d58 CR3: 000000012dae1000 CR4: 00000000003506b0
[  173.525043][ T3353] Call Trace:
[  173.528347][ T3353]  <TASK>
[  173.531304][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  173.536978][ T3353]  ? __schedule+0xcbb/0x1700
[  173.541603][ T3353]  ? __kasan_check_write+0x14/0x20
[  173.546786][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  173.551516][ T3353]  rb_buffer_peek+0x5f/0x930
[  173.556150][ T3353]  ring_buffer_peek+0x184/0x3b0
[  173.561036][ T3353]  ? __kasan_check_read+0x11/0x20
[  173.566100][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  173.571506][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  173.577696][ T3353]  ? _find_next_bit+0x8a/0x130
[  173.582522][ T3353]  __find_next_entry+0x33c/0x6c0
[  173.587596][ T3353]  ? trace_find_next_entry+0x380/0x380
[  173.593103][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  173.598778][ T3353]  ? print_trace_line+0x393/0x6b0
[  173.603834][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  173.608810][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  173.614324][ T3353]  vfs_read+0x286/0x930
[  173.618519][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  173.623227][ T3353]  ? __cfi_do_futex+0x10/0x10
[  173.627947][ T3353]  ? __kasan_check_read+0x11/0x20
[  173.633002][ T3353]  ? __fdget_pos+0x2d4/0x380
[  173.637622][ T3353]  ksys_read+0x14a/0x260
[  173.641876][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  173.646643][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  173.652288][ T3353]  __x64_sys_read+0x7b/0x90
[  173.656799][ T3353]  x64_sys_call+0x2f/0x9a0
[  173.661230][ T3353]  do_syscall_64+0x4c/0xa0
[  173.665669][ T3353]  ? clear_bhb_loop+0x30/0x80
[  173.670353][ T3353]  ? clear_bhb_loop+0x30/0x80
[  173.675038][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.680933][ T3353] RIP: 0033:0x7f9b00d9e559
[  173.685349][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.704959][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.713412][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  173.721392][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  173.729717][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  173.737697][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.745674][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  173.753672][ T3353]  </TASK>
[  173.756693][ T3353] ---[ end trace 0000000000000000 ]---
[  173.762662][ T3353] ------------[ cut here ]------------
[  173.768184][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  173.778444][ T3353] Modules linked in:
[  173.782344][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  173.791106][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.801166][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  173.806986][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  173.826611][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  173.832780][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  173.840802][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  173.848776][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  173.856753][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  173.864732][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  173.872741][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  173.881675][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.888258][ T3353] CR2: 00007f3425bebc40 CR3: 000000012dae1000 CR4: 00000000003506a0
[  173.896232][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.904200][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  173.912169][ T3353] Call Trace:
[  173.915451][ T3353]  <TASK>
[  173.918405][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  173.924065][ T3353]  ? __kasan_check_write+0x14/0x20
[  173.929192][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  173.933909][ T3353]  rb_buffer_peek+0x5f/0x930
[  173.938541][ T3353]  ring_buffer_consume+0x1aa/0x370
[  173.943683][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  173.949338][ T3353]  ? print_trace_line+0x393/0x6b0
[  173.954382][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  173.959338][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  173.964814][ T3353]  vfs_read+0x286/0x930
[  173.968983][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  173.973673][ T3353]  ? __cfi_do_futex+0x10/0x10
[  173.978368][ T3353]  ? __kasan_check_read+0x11/0x20
[  173.983416][ T3353]  ? __fdget_pos+0x2d4/0x380
[  173.988030][ T3353]  ksys_read+0x14a/0x260
[  173.992316][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  173.997114][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  174.002856][ T3353]  __x64_sys_read+0x7b/0x90
[  174.007382][ T3353]  x64_sys_call+0x2f/0x9a0
[  174.011840][ T3353]  do_syscall_64+0x4c/0xa0
[  174.016281][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.020981][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.025675][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.031583][ T3353] RIP: 0033:0x7f9b00d9e559
[  174.036013][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.055656][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.064091][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  174.072073][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  174.080062][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  174.088066][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.096061][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  174.104056][ T3353]  </TASK>
[  174.107097][ T3353] ---[ end trace 0000000000000000 ]---
[  174.112618][ T3353] ------------[ cut here ]------------
[  174.118084][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  174.128347][ T3353] Modules linked in:
[  174.132254][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  174.141034][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.151156][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  174.156993][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  174.176612][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  174.182711][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  174.190701][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  174.198701][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  174.206687][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  174.214702][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  174.222686][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  174.231638][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.238236][ T3353] CR2: 00007f3425bebc40 CR3: 000000012dae1000 CR4: 00000000003506a0
[  174.246225][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.254307][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  174.262306][ T3353] Call Trace:
[  174.265594][ T3353]  <TASK>
[  174.268545][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  174.274204][ T3353]  ? __kasan_check_write+0x14/0x20
[  174.279331][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  174.284037][ T3353]  rb_advance_reader+0x2b/0x770
[  174.288904][ T3353]  ring_buffer_consume+0x1e7/0x370
[  174.294031][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  174.299679][ T3353]  ? print_trace_line+0x393/0x6b0
[  174.304729][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  174.309729][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  174.315209][ T3353]  vfs_read+0x286/0x930
[  174.319384][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  174.324100][ T3353]  ? __cfi_do_futex+0x10/0x10
[  174.328795][ T3353]  ? __kasan_check_read+0x11/0x20
[  174.333837][ T3353]  ? __fdget_pos+0x2d4/0x380
[  174.338444][ T3353]  ksys_read+0x14a/0x260
[  174.342706][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  174.347487][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  174.353134][ T3353]  __x64_sys_read+0x7b/0x90
[  174.357654][ T3353]  x64_sys_call+0x2f/0x9a0
[  174.362087][ T3353]  do_syscall_64+0x4c/0xa0
[  174.366518][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.371215][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.375913][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.381850][ T3353] RIP: 0033:0x7f9b00d9e559
[  174.386283][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.405914][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.414384][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  174.422486][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  174.430493][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  174.438511][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.446497][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  174.454493][ T3353]  </TASK>
[  174.457522][ T3353] ---[ end trace 0000000000000000 ]---
[  174.470942][ T3353] ------------[ cut here ]------------
[  174.476457][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  174.486734][ T3353] Modules linked in:
[  174.490652][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  174.499426][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.509493][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  174.515322][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  174.534954][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  174.541085][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  174.549089][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  174.557090][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  174.565099][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  174.573087][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  174.581074][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  174.590015][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.596710][ T3353] CR2: 00007f3424573d58 CR3: 000000012dae1000 CR4: 00000000003506b0
[  174.604751][ T3353] Call Trace:
[  174.608063][ T3353]  <TASK>
[  174.611012][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  174.616663][ T3353]  ? __schedule+0xcbb/0x1700
[  174.621263][ T3353]  ? __kasan_check_write+0x14/0x20
[  174.626393][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  174.631090][ T3353]  rb_buffer_peek+0x5f/0x930
[  174.635692][ T3353]  ring_buffer_peek+0x184/0x3b0
[  174.640556][ T3353]  ? __kasan_check_read+0x11/0x20
[  174.645597][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  174.650983][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  174.657156][ T3353]  ? _find_next_bit+0x8a/0x130
[  174.661938][ T3353]  __find_next_entry+0x33c/0x6c0
[  174.666903][ T3353]  ? trace_find_next_entry+0x380/0x380
[  174.672383][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  174.678060][ T3353]  ? print_trace_line+0x393/0x6b0
[  174.683099][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  174.688058][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  174.693533][ T3353]  vfs_read+0x286/0x930
[  174.697700][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  174.702394][ T3353]  ? __cfi_do_futex+0x10/0x10
[  174.707084][ T3353]  ? __kasan_check_read+0x11/0x20
[  174.712125][ T3353]  ? __fdget_pos+0x2d4/0x380
[  174.716759][ T3353]  ksys_read+0x14a/0x260
[  174.721048][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  174.725838][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  174.731492][ T3353]  __x64_sys_read+0x7b/0x90
[  174.736009][ T3353]  x64_sys_call+0x2f/0x9a0
[  174.740458][ T3353]  do_syscall_64+0x4c/0xa0
[  174.744885][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.749574][ T3353]  ? clear_bhb_loop+0x30/0x80
[  174.754272][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.760355][ T3353] RIP: 0033:0x7f9b00d9e559
[  174.764785][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.784588][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.793025][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  174.801030][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  174.809018][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  174.817179][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.825435][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  174.833444][ T3353]  </TASK>
[  174.836474][ T3353] ---[ end trace 0000000000000000 ]---
[  174.843752][ T3353] ------------[ cut here ]------------
[  174.849262][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  174.859549][ T3353] Modules linked in:
[  174.863471][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  174.872251][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.882317][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  174.888172][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  174.907797][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  174.913922][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  174.921911][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  174.929896][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  174.937906][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  174.945894][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  174.953884][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  174.962829][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.969437][ T3353] CR2: 000056102e11f660 CR3: 000000012dae1000 CR4: 00000000003506a0
[  174.977440][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.985424][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  174.993413][ T3353] Call Trace:
[  174.996711][ T3353]  <TASK>
[  174.999659][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  175.005322][ T3353]  ? __kasan_check_write+0x14/0x20
[  175.010448][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  175.015152][ T3353]  rb_buffer_peek+0x5f/0x930
[  175.019764][ T3353]  ring_buffer_consume+0x1aa/0x370
[  175.024891][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  175.030538][ T3353]  ? print_trace_line+0x393/0x6b0
[  175.035598][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  175.040562][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  175.046042][ T3353]  vfs_read+0x286/0x930
[  175.050216][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  175.054904][ T3353]  ? __cfi_do_futex+0x10/0x10
[  175.059597][ T3353]  ? __kasan_check_read+0x11/0x20
[  175.064632][ T3353]  ? __fdget_pos+0x2d4/0x380
[  175.069238][ T3353]  ksys_read+0x14a/0x260
[  175.073494][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  175.078272][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  175.083923][ T3353]  __x64_sys_read+0x7b/0x90
[  175.088446][ T3353]  x64_sys_call+0x2f/0x9a0
[  175.092893][ T3353]  do_syscall_64+0x4c/0xa0
[  175.097323][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.102018][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.106715][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.112630][ T3353] RIP: 0033:0x7f9b00d9e559
[  175.117061][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.136690][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.145138][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  175.153143][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  175.161140][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  175.169135][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.177128][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  175.185148][ T3353]  </TASK>
[  175.188198][ T3353] ---[ end trace 0000000000000000 ]---
[  175.193741][ T3353] ------------[ cut here ]------------
[  175.199205][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  175.209467][ T3353] Modules linked in:
[  175.213373][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  175.222143][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.232220][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  175.238054][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  175.257707][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  175.263795][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  175.271788][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  175.279786][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  175.287816][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  175.295805][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  175.303800][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  175.312746][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.319348][ T3353] CR2: 000056102e11f660 CR3: 000000012dae1000 CR4: 00000000003506a0
[  175.327345][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  175.335358][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  175.343349][ T3353] Call Trace:
[  175.346640][ T3353]  <TASK>
[  175.349596][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  175.355269][ T3353]  ? __kasan_check_write+0x14/0x20
[  175.360409][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  175.365113][ T3353]  rb_advance_reader+0x2b/0x770
[  175.369992][ T3353]  ring_buffer_consume+0x1e7/0x370
[  175.375128][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  175.380788][ T3353]  ? print_trace_line+0x393/0x6b0
[  175.385831][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  175.390792][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  175.396279][ T3353]  vfs_read+0x286/0x930
[  175.400453][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  175.405172][ T3353]  ? __cfi_do_futex+0x10/0x10
[  175.409866][ T3353]  ? __kasan_check_read+0x11/0x20
[  175.414909][ T3353]  ? __fdget_pos+0x2d4/0x380
[  175.419515][ T3353]  ksys_read+0x14a/0x260
[  175.423776][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  175.428553][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  175.434220][ T3353]  __x64_sys_read+0x7b/0x90
[  175.438744][ T3353]  x64_sys_call+0x2f/0x9a0
[  175.443178][ T3353]  do_syscall_64+0x4c/0xa0
[  175.447605][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.452303][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.456995][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.462910][ T3353] RIP: 0033:0x7f9b00d9e559
[  175.467360][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.486981][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.495585][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  175.503590][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  175.511575][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  175.519565][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.527549][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  175.535542][ T3353]  </TASK>
[  175.538571][ T3353] ---[ end trace 0000000000000000 ]---
[  175.545037][ T3353] ------------[ cut here ]------------
[  175.550543][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  175.560839][ T3353] Modules linked in:
[  175.564772][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  175.573556][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.583633][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  175.589656][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  175.609279][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010006
[  175.615386][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  175.623376][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  175.631454][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  175.639443][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  175.647427][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  175.655417][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  175.664364][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.670966][ T3353] CR2: 00007f6185a4be80 CR3: 000000012dae1000 CR4: 00000000003506b0
[  175.678958][ T3353] Call Trace:
[  175.682271][ T3353]  <TASK>
[  175.685240][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  175.690895][ T3353]  ? __schedule+0xcbb/0x1700
[  175.695520][ T3353]  ? __kasan_check_write+0x14/0x20
[  175.700662][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  175.705360][ T3353]  rb_buffer_peek+0x5f/0x930
[  175.709970][ T3353]  ring_buffer_peek+0x184/0x3b0
[  175.714834][ T3353]  ? __kasan_check_read+0x11/0x20
[  175.719870][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  175.725291][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  175.731477][ T3353]  ? _find_next_bit+0x8a/0x130
[  175.736262][ T3353]  __find_next_entry+0x33c/0x6c0
[  175.741226][ T3353]  ? trace_find_next_entry+0x380/0x380
[  175.746708][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  175.752359][ T3353]  ? print_trace_line+0x393/0x6b0
[  175.757400][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  175.762359][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  175.767841][ T3353]  vfs_read+0x286/0x930
[  175.772016][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  175.776714][ T3353]  ? __cfi_do_futex+0x10/0x10
[  175.781436][ T3353]  ? __kasan_check_read+0x11/0x20
[  175.786502][ T3353]  ? __fdget_pos+0x2d4/0x380
[  175.791128][ T3353]  ksys_read+0x14a/0x260
[  175.795425][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  175.800218][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  175.805931][ T3353]  __x64_sys_read+0x7b/0x90
[  175.810459][ T3353]  x64_sys_call+0x2f/0x9a0
[  175.815019][ T3353]  do_syscall_64+0x4c/0xa0
[  175.819478][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.824185][ T3353]  ? clear_bhb_loop+0x30/0x80
[  175.828884][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.834800][ T3353] RIP: 0033:0x7f9b00d9e559
[  175.839237][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.858865][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.867296][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  175.875283][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  175.883267][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  175.891253][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.899238][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  175.907239][ T3353]  </TASK>
[  175.910275][ T3353] ---[ end trace 0000000000000000 ]---
[  175.915880][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.928037][ T3353] ==================================================================
[  175.936170][ T3353] BUG: KASAN: out-of-bounds in ring_buffer_peek+0x306/0x3b0
[  175.943500][ T3353] Read of size 4 at addr ffff8881163b6a65 by task syz.3.780/3353
[  175.951256][ T3353] 
[  175.953621][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G        W          syzkaller #0
[  175.962423][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.972512][ T3353] Call Trace:
[  175.975828][ T3353]  <TASK>
[  175.978799][ T3353]  __dump_stack+0x21/0x24
[  175.983182][ T3353]  dump_stack_lvl+0x110/0x170
[  175.987916][ T3353]  ? __cfi_dump_stack_lvl+0x8/0x8
[  175.992994][ T3353]  ? preempt_schedule_irq+0xca/0x120
[  175.998325][ T3353]  ? ring_buffer_peek+0x306/0x3b0
[  176.003436][ T3353]  print_address_description+0x71/0x200
[  176.009044][ T3353]  print_report+0x4a/0x60
[  176.013450][ T3353]  kasan_report+0x122/0x150
[  176.018006][ T3353]  ? ring_buffer_peek+0x306/0x3b0
[  176.023081][ T3353]  __asan_report_load4_noabort+0x14/0x20
[  176.028757][ T3353]  ring_buffer_peek+0x306/0x3b0
[  176.033647][ T3353]  ? __kasan_check_read+0x11/0x20
[  176.038721][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  176.044139][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  176.050342][ T3353]  ? _find_next_bit+0x8a/0x130
[  176.055157][ T3353]  __find_next_entry+0x33c/0x6c0
[  176.060158][ T3353]  ? trace_find_next_entry+0x380/0x380
[  176.065679][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  176.071367][ T3353]  ? print_trace_line+0x393/0x6b0
[  176.076443][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  176.081432][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  176.086944][ T3353]  vfs_read+0x286/0x930
[  176.091149][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  176.095876][ T3353]  ? __cfi_do_futex+0x10/0x10
[  176.100635][ T3353]  ? __kasan_check_read+0x11/0x20
[  176.105708][ T3353]  ? __fdget_pos+0x2d4/0x380
[  176.110352][ T3353]  ksys_read+0x14a/0x260
[  176.114646][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  176.119492][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  176.125175][ T3353]  __x64_sys_read+0x7b/0x90
[  176.129730][ T3353]  x64_sys_call+0x2f/0x9a0
[  176.134193][ T3353]  do_syscall_64+0x4c/0xa0
[  176.138664][ T3353]  ? clear_bhb_loop+0x30/0x80
[  176.143373][ T3353]  ? clear_bhb_loop+0x30/0x80
[  176.148109][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.154021][ T3353] RIP: 0033:0x7f9b00d9e559
[  176.158459][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.178080][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  176.186510][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  176.194542][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  176.202535][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  176.210529][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.218517][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  176.226510][ T3353]  </TASK>
[  176.229545][ T3353] 
[  176.231879][ T3353] Allocated by task 3482:
[  176.236217][ T3353]  kasan_set_track+0x4b/0x70
[  176.240850][ T3353]  kasan_save_alloc_info+0x1f/0x30
[  176.245982][ T3353]  __kasan_slab_alloc+0x72/0x80
[  176.250852][ T3353]  slab_post_alloc_hook+0x4f/0x2d0
[  176.255986][ T3353]  kmem_cache_alloc+0x166/0x320
[  176.260856][ T3353]  __kernfs_new_node+0xe1/0x670
[  176.265720][ T3353]  kernfs_new_node+0x150/0x260
[  176.270502][ T3353]  kernfs_create_dir_ns+0x47/0x130
[  176.275634][ T3353]  sysfs_create_dir_ns+0x128/0x290
[  176.280769][ T3353]  kobject_add_internal+0x718/0xc20
[  176.285985][ T3353]  kobject_init_and_add+0x128/0x190
[  176.291202][ T3353]  netdev_queue_update_kobjects+0x1f1/0x470
[  176.297116][ T3353]  netdev_register_kobject+0x281/0x330
[  176.302586][ T3353]  register_netdevice+0xec9/0x1550
[  176.307712][ T3353]  veth_newlink+0x66a/0xd60
[  176.312230][ T3353]  rtnl_newlink+0x14dc/0x20d0
[  176.316935][ T3353]  rtnetlink_rcv_msg+0xb28/0xde0
[  176.321894][ T3353]  netlink_rcv_skb+0x200/0x450
[  176.326674][ T3353]  rtnetlink_rcv+0x1c/0x20
[  176.331114][ T3353]  netlink_unicast+0x8c1/0xa60
[  176.335900][ T3353]  netlink_sendmsg+0x8b9/0xbd0
[  176.340680][ T3353]  __sys_sendto+0x4ac/0x660
[  176.345207][ T3353]  __x64_sys_sendto+0xe5/0x100
[  176.349995][ T3353]  x64_sys_call+0x83/0x9a0
[  176.354426][ T3353]  do_syscall_64+0x4c/0xa0
[  176.358853][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.364766][ T3353] 
[  176.367186][ T3353] The buggy address belongs to the object at ffff8881163b6a28
[  176.367186][ T3353]  which belongs to the cache kernfs_node_cache of size 136
[  176.381771][ T3353] The buggy address is located 61 bytes inside of
[  176.381771][ T3353]  136-byte region [ffff8881163b6a28, ffff8881163b6ab0)
[  176.394978][ T3353] 
[  176.397344][ T3353] The buggy address belongs to the physical page:
[  176.403769][ T3353] page:ffffea000458ed80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1163b6
[  176.414023][ T3353] flags: 0x4000000000000200(slab|zone=1)
[  176.419699][ T3353] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001ede00
[  176.428298][ T3353] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000
[  176.436888][ T3353] page dumped because: kasan: bad access detected
[  176.443322][ T3353] page_owner tracks the page as allocated
[  176.449048][ T3353] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3482, tgid 3482 (syz-executor), ts 175934476261, free_ts 175927049528
[  176.467479][ T3353]  post_alloc_hook+0x1f5/0x210
[  176.472277][ T3353]  prep_new_page+0x1c/0x110
[  176.476812][ T3353]  get_page_from_freelist+0x2ca9/0x2d20
[  176.482387][ T3353]  __alloc_pages+0x1fa/0x610
[  176.486999][ T3353]  alloc_slab_page+0x6e/0xf0
[  176.491611][ T3353]  new_slab+0x98/0x3e0
[  176.495693][ T3353]  ___slab_alloc+0x70f/0xb70
[  176.500305][ T3353]  __slab_alloc+0x5e/0xa0
[  176.504658][ T3353]  kmem_cache_alloc+0x1a8/0x320
[  176.509535][ T3353]  __kernfs_new_node+0xe1/0x670
[  176.514406][ T3353]  kernfs_new_node+0x150/0x260
[  176.519209][ T3353]  __kernfs_create_file+0x4e/0x270
[  176.524454][ T3353]  sysfs_add_file_mode_ns+0x1ce/0x270
[  176.529853][ T3353]  internal_create_group+0x6b7/0xeb0
[  176.535160][ T3353]  sysfs_create_groups+0x58/0x120
[  176.540212][ T3353]  device_add_attrs+0x1ae/0x830
[  176.545085][ T3353] page last free stack trace:
[  176.549768][ T3353]  free_unref_page_prepare+0x81b/0x820
[  176.555252][ T3353]  free_unref_page_list+0x117/0x8d0
[  176.560474][ T3353]  release_pages+0xc7e/0xce0
[  176.565087][ T3353]  __pagevec_release+0x71/0xe0
[  176.569865][ T3353]  invalidate_mapping_pagevec+0x417/0x610
[  176.575601][ T3353]  invalidate_mapping_pages+0x27/0x30
[  176.581010][ T3353]  invalidate_bdev+0xa6/0x150
[  176.585758][ T3353]  ext4_put_super+0x71b/0xab0
[  176.590483][ T3353]  generic_shutdown_super+0x16c/0x480
[  176.595890][ T3353]  kill_block_super+0x7f/0xf0
[  176.600616][ T3353]  deactivate_locked_super+0xb5/0x120
[  176.606013][ T3353]  deactivate_super+0xaf/0xe0
[  176.610749][ T3353]  cleanup_mnt+0x45e/0x4e0
[  176.615188][ T3353]  __cleanup_mnt+0x19/0x20
[  176.619621][ T3353]  task_work_run+0x1e1/0x250
[  176.624239][ T3353]  do_exit+0xb0d/0x29f0
[  176.628430][ T3353] 
[  176.630766][ T3353] Memory state around the buggy address:
[  176.636406][ T3353]  ffff8881163b6900: 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00
[  176.644483][ T3353]  ffff8881163b6980: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  176.652602][ T3353] >ffff8881163b6a00: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00
[  176.660675][ T3353]                                                           ^
[  176.668174][ T3353]  ffff8881163b6a80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00
[  176.676250][ T3353]  ffff8881163b6b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  176.684323][ T3353] ==================================================================
[  176.693090][ T3353] Disabling lock debugging due to kernel taint
[  176.699485][ T3353] ------------[ cut here ]------------
[  176.704964][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  176.715270][ T3353] Modules linked in:
[  176.719209][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  176.728014][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.738120][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  176.743976][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  176.763618][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  176.769737][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  176.777758][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  176.785817][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  176.793852][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  176.801873][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  176.809896][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  176.818878][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.825511][ T3353] CR2: 00007ff5872be43c CR3: 000000012dae1000 CR4: 00000000003506b0
[  176.833534][ T3353] Call Trace:
[  176.836849][ T3353]  <TASK>
[  176.839808][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  176.845487][ T3353]  ? __kasan_check_write+0x14/0x20
[  176.850645][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  176.855391][ T3353]  rb_buffer_peek+0x5f/0x930
[  176.860032][ T3353]  ring_buffer_consume+0x1aa/0x370
[  176.865190][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  176.870879][ T3353]  ? print_trace_line+0x393/0x6b0
[  176.875953][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  176.880943][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  176.886459][ T3353]  vfs_read+0x286/0x930
[  176.890652][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  176.895374][ T3353]  ? __cfi_do_futex+0x10/0x10
[  176.900098][ T3353]  ? __kasan_check_read+0x11/0x20
[  176.905168][ T3353]  ? __fdget_pos+0x2d4/0x380
[  176.909804][ T3353]  ksys_read+0x14a/0x260
[  176.914089][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  176.918898][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  176.924576][ T3353]  __x64_sys_read+0x7b/0x90
[  176.929125][ T3353]  x64_sys_call+0x2f/0x9a0
[  176.933588][ T3353]  do_syscall_64+0x4c/0xa0
[  176.938051][ T3353]  ? clear_bhb_loop+0x30/0x80
[  176.942770][ T3353]  ? clear_bhb_loop+0x30/0x80
[  176.947512][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.953463][ T3353] RIP: 0033:0x7f9b00d9e559
[  176.957923][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.977576][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  176.986130][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  176.994145][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  177.002158][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  177.010180][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.018192][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  177.026217][ T3353]  </TASK>
[  177.029279][ T3353] ---[ end trace 0000000000000000 ]---
[  177.034827][ T3353] ------------[ cut here ]------------
[  177.040316][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  177.050612][ T3353] Modules linked in:
[  177.054551][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  177.063352][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.073467][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  177.079327][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  177.099030][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  177.105140][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  177.113162][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  177.121185][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  177.129196][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  177.137224][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  177.145246][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  177.154232][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.160865][ T3353] CR2: 00007ff5872be43c CR3: 000000012dae1000 CR4: 00000000003506b0
[  177.168883][ T3353] Call Trace:
[  177.172205][ T3353]  <TASK>
[  177.175176][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  177.180863][ T3353]  ? __kasan_check_write+0x14/0x20
[  177.186039][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  177.190783][ T3353]  rb_advance_reader+0x2b/0x770
[  177.195684][ T3353]  ring_buffer_consume+0x1e7/0x370
[  177.200842][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  177.206522][ T3353]  ? print_trace_line+0x393/0x6b0
[  177.211600][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  177.216599][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  177.222106][ T3353]  vfs_read+0x286/0x930
[  177.226307][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  177.231030][ T3353]  ? __cfi_do_futex+0x10/0x10
[  177.235762][ T3353]  ? __kasan_check_read+0x11/0x20
[  177.240823][ T3353]  ? __fdget_pos+0x2d4/0x380
[  177.245507][ T3353]  ksys_read+0x14a/0x260
[  177.249806][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  177.254619][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  177.260311][ T3353]  __x64_sys_read+0x7b/0x90
[  177.264865][ T3353]  x64_sys_call+0x2f/0x9a0
[  177.269335][ T3353]  do_syscall_64+0x4c/0xa0
[  177.273801][ T3353]  ? clear_bhb_loop+0x30/0x80
[  177.278515][ T3353]  ? clear_bhb_loop+0x30/0x80
[  177.283241][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.289176][ T3353] RIP: 0033:0x7f9b00d9e559
[  177.293646][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.313295][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.321767][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  177.329786][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  177.337804][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  177.345814][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.353829][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  177.361854][ T3353]  </TASK>
[  177.364904][ T3353] ---[ end trace 0000000000000000 ]---
[  177.372967][ T3353] ------------[ cut here ]------------
[  177.378487][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  177.388783][ T3353] Modules linked in:
[  177.392727][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  177.401527][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.411625][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  177.417486][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  177.437143][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  177.443252][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  177.451259][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  177.459266][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  177.467274][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  177.475282][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  177.483379][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  177.492345][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.498970][ T3353] CR2: 00007ff5872be43c CR3: 000000012dae1000 CR4: 00000000003506b0
[  177.507079][ T3353] Call Trace:
[  177.510393][ T3353]  <TASK>
[  177.513359][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  177.519033][ T3353]  ? __schedule+0xcbb/0x1700
[  177.523683][ T3353]  ? __kasan_check_write+0x14/0x20
[  177.528845][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  177.533578][ T3353]  rb_buffer_peek+0x5f/0x930
[  177.538209][ T3353]  ring_buffer_peek+0x184/0x3b0
[  177.543099][ T3353]  ? __kasan_check_read+0x11/0x20
[  177.548160][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  177.553566][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  177.559767][ T3353]  ? _find_next_bit+0x8a/0x130
[  177.564599][ T3353]  __find_next_entry+0x33c/0x6c0
[  177.569595][ T3353]  ? trace_find_next_entry+0x380/0x380
[  177.575101][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  177.580784][ T3353]  ? print_trace_line+0x393/0x6b0
[  177.585852][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  177.590829][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  177.596332][ T3353]  vfs_read+0x286/0x930
[  177.600532][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  177.605263][ T3353]  ? __cfi_do_futex+0x10/0x10
[  177.610007][ T3353]  ? __kasan_check_read+0x11/0x20
[  177.615094][ T3353]  ? __fdget_pos+0x2d4/0x380
[  177.619732][ T3353]  ksys_read+0x14a/0x260
[  177.624007][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  177.628808][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  177.634490][ T3353]  __x64_sys_read+0x7b/0x90
[  177.639041][ T3353]  x64_sys_call+0x2f/0x9a0
[  177.643499][ T3353]  do_syscall_64+0x4c/0xa0
[  177.647945][ T3353]  ? clear_bhb_loop+0x30/0x80
[  177.652655][ T3353]  ? clear_bhb_loop+0x30/0x80
[  177.657376][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.663319][ T3353] RIP: 0033:0x7f9b00d9e559
[  177.667784][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.687431][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.695900][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  177.703988][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  177.711986][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  177.720020][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.728032][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  177.736041][ T3353]  </TASK>
[  177.739093][ T3353] ---[ end trace 0000000000000000 ]---
[  177.745062][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.757436][ T3016] EXT4-fs (loop8): unmounting filesystem.
[  177.776440][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.806231][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.814745][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.823049][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.830140][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.839183][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.847074][ T3353] ------------[ cut here ]------------
[  177.852580][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  177.862876][ T3353] Modules linked in:
[  177.866818][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  177.875619][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.885719][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  177.891583][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  177.911225][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  177.917389][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  177.925411][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  177.933449][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  177.941481][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  177.949500][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  177.957614][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  177.966677][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.973343][ T3353] CR2: 0000563be86beda8 CR3: 000000012dae1000 CR4: 00000000003506b0
[  177.981364][ T3353] Call Trace:
[  177.984677][ T3353]  <TASK>
[  177.987648][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  177.993339][ T3353]  ? __kasan_check_write+0x14/0x20
[  177.998504][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  178.003241][ T3353]  rb_buffer_peek+0x5f/0x930
[  178.007881][ T3353]  ring_buffer_consume+0x1aa/0x370
[  178.013041][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  178.018730][ T3353]  ? print_trace_line+0x393/0x6b0
[  178.023792][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  178.028786][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  178.034303][ T3353]  vfs_read+0x286/0x930
[  178.038504][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  178.043223][ T3353]  ? __cfi_do_futex+0x10/0x10
[  178.047945][ T3353]  ? __kasan_check_read+0x11/0x20
[  178.053014][ T3353]  ? __fdget_pos+0x2d4/0x380
[  178.057656][ T3353]  ksys_read+0x14a/0x260
[  178.061964][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  178.066772][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  178.072476][ T3353]  __x64_sys_read+0x7b/0x90
[  178.077033][ T3353]  x64_sys_call+0x2f/0x9a0
[  178.081503][ T3353]  do_syscall_64+0x4c/0xa0
[  178.085970][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.090689][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.095403][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  178.101343][ T3353] RIP: 0033:0x7f9b00d9e559
[  178.105804][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.125463][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.133932][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  178.141945][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  178.149955][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  178.157966][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.165982][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  178.174002][ T3353]  </TASK>
[  178.177048][ T3353] ---[ end trace 0000000000000000 ]---
[  178.182604][ T3353] ------------[ cut here ]------------
[  178.188134][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  178.198438][ T3353] Modules linked in:
[  178.202371][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  178.211185][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  178.221284][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  178.227146][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  178.246805][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  178.252934][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  178.260946][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  178.268965][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  178.276974][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  178.284992][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  178.287106][ T3505] device veth0_vlan entered promiscuous mode
[  178.293005][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  178.293032][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.293048][ T3353] CR2: 0000563be86beda8 CR3: 000000012dae1000 CR4: 00000000003506b0
[  178.322558][ T3353] Call Trace:
[  178.325870][ T3353]  <TASK>
[  178.328832][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  178.334513][ T3353]  ? __kasan_check_write+0x14/0x20
[  178.339675][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  178.344408][ T3353]  rb_advance_reader+0x2b/0x770
[  178.349310][ T3353]  ring_buffer_consume+0x1e7/0x370
[  178.354478][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  178.360165][ T3353]  ? print_trace_line+0x393/0x6b0
[  178.365229][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  178.370216][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  178.375721][ T3353]  vfs_read+0x286/0x930
[  178.379921][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  178.384648][ T3353]  ? __cfi_do_futex+0x10/0x10
[  178.389372][ T3353]  ? __kasan_check_read+0x11/0x20
[  178.394456][ T3353]  ? __fdget_pos+0x2d4/0x380
[  178.399102][ T3353]  ksys_read+0x14a/0x260
[  178.403399][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  178.408241][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  178.413919][ T3353]  __x64_sys_read+0x7b/0x90
[  178.416564][ T3505] device veth1_macvtap entered promiscuous mode
[  178.418462][ T3353]  x64_sys_call+0x2f/0x9a0
[  178.429143][ T3353]  do_syscall_64+0x4c/0xa0
[  178.433599][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.438316][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.443044][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  178.448998][ T3353] RIP: 0033:0x7f9b00d9e559
[  178.453450][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.473186][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.481651][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  178.489767][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  178.497952][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  178.505973][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.513981][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  178.522026][ T3353]  </TASK>
[  178.525078][ T3353] ---[ end trace 0000000000000000 ]---
[  178.544268][ T3353] ------------[ cut here ]------------
[  178.549792][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  178.560105][ T3353] Modules linked in:
[  178.564030][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  178.572858][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  178.582946][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  178.588801][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  178.608451][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010012
[  178.614572][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  178.622581][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  178.630592][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  178.638597][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  178.646601][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  178.654604][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  178.663584][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.670205][ T3353] CR2: 00007fb14961b2fe CR3: 000000012dae1000 CR4: 00000000003506b0
[  178.678224][ T3353] Call Trace:
[  178.681541][ T3353]  <TASK>
[  178.684504][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  178.690180][ T3353]  ? __schedule+0xcbb/0x1700
[  178.694811][ T3353]  ? __kasan_check_write+0x14/0x20
[  178.699960][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  178.704721][ T3353]  rb_buffer_peek+0x5f/0x930
[  178.709372][ T3353]  ring_buffer_peek+0x184/0x3b0
[  178.714263][ T3353]  ? __kasan_check_read+0x11/0x20
[  178.719321][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  178.724732][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  178.730928][ T3353]  ? _find_next_bit+0x8a/0x130
[  178.735733][ T3353]  __find_next_entry+0x33c/0x6c0
[  178.740719][ T3353]  ? trace_find_next_entry+0x380/0x380
[  178.746229][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  178.751899][ T3353]  ? print_trace_line+0x393/0x6b0
[  178.756968][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  178.761966][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  178.767470][ T3353]  vfs_read+0x286/0x930
[  178.771665][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  178.776378][ T3353]  ? __cfi_do_futex+0x10/0x10
[  178.781101][ T3353]  ? __kasan_check_read+0x11/0x20
[  178.786159][ T3353]  ? __fdget_pos+0x2d4/0x380
[  178.790787][ T3353]  ksys_read+0x14a/0x260
[  178.795085][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  178.799885][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  178.805560][ T3353]  __x64_sys_read+0x7b/0x90
[  178.810105][ T3353]  x64_sys_call+0x2f/0x9a0
[  178.814556][ T3353]  do_syscall_64+0x4c/0xa0
[  178.819013][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.823771][ T3353]  ? clear_bhb_loop+0x30/0x80
[  178.828510][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  178.834434][ T3353] RIP: 0033:0x7f9b00d9e559
[  178.838883][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.858527][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.866987][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  178.874996][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  178.882997][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  178.891002][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.899011][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  178.907020][ T3353]  </TASK>
[  178.910070][ T3353] ---[ end trace 0000000000000000 ]---
[  178.915898][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.938417][ T3353] ------------[ cut here ]------------
[  178.943951][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  178.950194][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.954230][ T3353] Modules linked in:
[  178.954244][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  178.954270][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  178.954282][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  178.977738][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.985120][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  178.985144][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  178.985164][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  178.997323][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.999099][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  179.048844][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  179.051107][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.056853][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  179.072826][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  179.080834][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  179.083632][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.089794][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.096961][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.103426][ T3353] CR2: 00007f62420ce368 CR3: 000000012dae1000 CR4: 00000000003506b0
[  179.118626][ T3353] Call Trace:
[  179.121940][ T3353]  <TASK>
[  179.124905][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  179.130588][ T3353]  ? __kasan_check_write+0x14/0x20
[  179.135744][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  179.137466][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.140464][ T3353]  rb_buffer_peek+0x5f/0x930
[  179.152745][ T3353]  ring_buffer_consume+0x1aa/0x370
[  179.157903][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  179.159960][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  179.163576][ T3353]  ? print_trace_line+0x393/0x6b0
[  179.175823][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  179.180818][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  179.186317][ T3353]  vfs_read+0x286/0x930
[  179.190520][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  179.192357][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  179.195227][ T3353]  ? __cfi_do_futex+0x10/0x10
[  179.207122][ T3353]  ? __kasan_check_read+0x11/0x20
[  179.212188][ T3353]  ? __fdget_pos+0x2d4/0x380
[  179.214270][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.216815][ T3353]  ksys_read+0x14a/0x260
[  179.228987][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  179.233800][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  179.236871][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.239481][ T3353]  __x64_sys_read+0x7b/0x90
[  179.251204][ T3353]  x64_sys_call+0x2f/0x9a0
[  179.255669][ T3353]  do_syscall_64+0x4c/0xa0
[  179.260123][ T3353]  ? clear_bhb_loop+0x30/0x80
[  179.264840][ T3353]  ? clear_bhb_loop+0x30/0x80
[  179.268370][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.269555][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.278831][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.282662][ T3353] RIP: 0033:0x7f9b00d9e559
[  179.295188][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.311126][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.314851][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  179.331287][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  179.332491][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.339303][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  179.346461][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.355103][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  179.355122][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.378350][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  179.386376][ T3353]  </TASK>
[  179.389423][ T3353] ---[ end trace 0000000000000000 ]---
[  179.394972][ T3353] ------------[ cut here ]------------
[  179.397359][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.400445][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  179.418757][ T3353] Modules linked in:
[  179.422685][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  179.430393][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.431477][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.449540][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  179.452065][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.455397][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  179.462529][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.482046][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  179.482068][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  179.482086][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  179.511341][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  179.519358][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  179.527054][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.527360][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  179.543085][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  179.549089][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.552142][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.566524][ T3353] CR2: 00007f62420ce368 CR3: 000000012dae1000 CR4: 00000000003506b0
[  179.571101][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.574533][ T3353] Call Trace:
[  179.585643][ T3353]  <TASK>
[  179.588609][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  179.593085][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.594282][ T3353]  ? __kasan_check_write+0x14/0x20
[  179.607134][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  179.611866][ T3353]  rb_advance_reader+0x2b/0x770
[  179.614072][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.616751][ T3353]  ring_buffer_consume+0x1e7/0x370
[  179.629685][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  179.635401][ T3353]  ? print_trace_line+0x393/0x6b0
[  179.636106][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.640507][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  179.653286][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  179.658811][ T3353]  vfs_read+0x286/0x930
[  179.663014][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  179.667730][ T3353]  ? __cfi_do_futex+0x10/0x10
[  179.672448][ T3353]  ? __kasan_check_read+0x11/0x20
[  179.677537][ T3353]  ? __fdget_pos+0x2d4/0x380
[  179.682167][ T3353]  ksys_read+0x14a/0x260
[  179.686450][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  179.691261][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  179.696940][ T3353]  __x64_sys_read+0x7b/0x90
[  179.701479][ T3353]  x64_sys_call+0x2f/0x9a0
[  179.705957][ T3353]  do_syscall_64+0x4c/0xa0
[  179.710407][ T3353]  ? clear_bhb_loop+0x30/0x80
[  179.715128][ T3353]  ? clear_bhb_loop+0x30/0x80
[  179.719867][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.725882][ T3353] RIP: 0033:0x7f9b00d9e559
[  179.730326][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.749978][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  179.758436][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  179.766444][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  179.774464][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  179.782507][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.790520][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  179.798533][ T3353]  </TASK>
[  179.801585][ T3353] ---[ end trace 0000000000000000 ]---
[  179.825582][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.841573][ T3353] ------------[ cut here ]------------
[  179.844234][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  179.847096][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  179.865419][ T3353] Modules linked in:
[  179.869357][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  179.878156][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.885511][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  179.888273][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  179.902165][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  179.921905][ T3353] RSP: 0000:ffffc9000ceaf820 EFLAGS: 00010002
[  179.922876][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  179.928006][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  179.928025][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  179.928040][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  179.928056][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  179.928073][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  179.937327][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.943714][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  179.943739][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.943753][ T3353] CR2: 00007f99c52892d0 CR3: 000000012dae1000 CR4: 00000000003506b0
[  179.943774][ T3353] Call Trace:
[  179.943782][ T3353]  <TASK>
[  179.943796][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  179.986017][ T3482] device veth0_vlan entered promiscuous mode
[  179.992546][ T3353]  ? __schedule+0xcbb/0x1700
[  179.992577][ T3353]  ? __kasan_check_write+0x14/0x20
[  179.992601][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  180.003825][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.007187][ T3353]  rb_buffer_peek+0x5f/0x930
[  180.012230][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.013436][ T3353]  ring_buffer_peek+0x184/0x3b0
[  180.063372][ T3353]  ? __kasan_check_read+0x11/0x20
[  180.066790][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.068448][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  180.068478][ T3353]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  180.068506][ T3353]  ? _find_next_bit+0x8a/0x130
[  180.077404][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.081807][ T3353]  __find_next_entry+0x33c/0x6c0
[  180.081848][ T3353]  ? trace_find_next_entry+0x380/0x380
[  180.081881][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  180.108490][ T3482] device veth1_macvtap entered promiscuous mode
[  180.111314][ T3353]  ? print_trace_line+0x393/0x6b0
[  180.128373][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  180.133361][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  180.138866][ T3353]  vfs_read+0x286/0x930
[  180.143077][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  180.147801][ T3353]  ? __cfi_do_futex+0x10/0x10
[  180.152580][ T3353]  ? __kasan_check_read+0x11/0x20
[  180.157652][ T3353]  ? __fdget_pos+0x2d4/0x380
[  180.159018][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.162284][ T3353]  ksys_read+0x14a/0x260
[  180.173925][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  180.178702][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.178741][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  180.192371][ T3353]  __x64_sys_read+0x7b/0x90
[  180.196928][ T3353]  x64_sys_call+0x2f/0x9a0
[  180.199401][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.201391][ T3353]  do_syscall_64+0x4c/0xa0
[  180.214353][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.219098][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.223855][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.229798][ T3353] RIP: 0033:0x7f9b00d9e559
[  180.232651][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.234251][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.254928][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.261888][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.278410][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  180.286421][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  180.294430][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  180.302443][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.310449][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  180.318458][ T3353]  </TASK>
[  180.321503][ T3353] ---[ end trace 0000000000000000 ]---
[  180.348542][ T3353] ------------[ cut here ]------------
[  180.354059][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  180.364350][ T3353] Modules linked in:
[  180.368284][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  180.377083][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  180.387161][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  180.393002][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  180.412651][ T3353] RSP: 0000:ffffc9000ceaf940 EFLAGS: 00010006
[  180.418737][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  180.426746][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  180.434733][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  180.442716][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  180.450706][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  180.458695][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  180.467641][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.474238][ T3353] CR2: 0000561a7d6f2da8 CR3: 000000012dae1000 CR4: 00000000003506b0
[  180.482258][ T3353] Call Trace:
[  180.485549][ T3353]  <TASK>
[  180.488499][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  180.494161][ T3353]  ? __kasan_check_write+0x14/0x20
[  180.499293][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  180.503993][ T3353]  rb_buffer_peek+0x5f/0x930
[  180.508603][ T3353]  ring_buffer_consume+0x1aa/0x370
[  180.513731][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  180.519377][ T3353]  ? print_trace_line+0x393/0x6b0
[  180.524413][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  180.529399][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  180.534902][ T3353]  vfs_read+0x286/0x930
[  180.539074][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  180.543783][ T3353]  ? __cfi_do_futex+0x10/0x10
[  180.548491][ T3353]  ? __kasan_check_read+0x11/0x20
[  180.553535][ T3353]  ? __fdget_pos+0x2d4/0x380
[  180.558144][ T3353]  ksys_read+0x14a/0x260
[  180.562431][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  180.567219][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  180.572876][ T3353]  __x64_sys_read+0x7b/0x90
[  180.577399][ T3353]  x64_sys_call+0x2f/0x9a0
[  180.581847][ T3353]  do_syscall_64+0x4c/0xa0
[  180.586279][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.590975][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.595674][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.601586][ T3353] RIP: 0033:0x7f9b00d9e559
[  180.606013][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.625637][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.634067][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  180.642062][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  180.650066][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  180.658095][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.666086][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  180.674084][ T3353]  </TASK>
[  180.677121][ T3353] ---[ end trace 0000000000000000 ]---
[  180.682645][ T3353] ------------[ cut here ]------------
[  180.688108][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  180.698387][ T3353] Modules linked in:
[  180.702294][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  180.711070][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  180.721137][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  180.726966][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  180.746587][ T3353] RSP: 0000:ffffc9000ceaf940 EFLAGS: 00010002
[  180.752676][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  180.760669][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  180.768665][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  180.776655][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  180.784649][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  180.792636][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  180.801578][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.808195][ T3353] CR2: 0000561a7d6f2da8 CR3: 000000012dae1000 CR4: 00000000003506b0
[  180.816209][ T3353] Call Trace:
[  180.819509][ T3353]  <TASK>
[  180.822462][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  180.828117][ T3353]  rb_advance_reader+0x2b/0x770
[  180.832997][ T3353]  ring_buffer_consume+0x1e7/0x370
[  180.838135][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  180.843787][ T3353]  ? print_trace_line+0x393/0x6b0
[  180.848830][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  180.853789][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  180.859296][ T3353]  vfs_read+0x286/0x930
[  180.863492][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  180.868200][ T3353]  ? __cfi_do_futex+0x10/0x10
[  180.872902][ T3353]  ? __kasan_check_read+0x11/0x20
[  180.877944][ T3353]  ? __fdget_pos+0x2d4/0x380
[  180.882549][ T3353]  ksys_read+0x14a/0x260
[  180.886812][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  180.891594][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  180.897286][ T3353]  __x64_sys_read+0x7b/0x90
[  180.901822][ T3353]  x64_sys_call+0x2f/0x9a0
[  180.906262][ T3353]  do_syscall_64+0x4c/0xa0
[  180.910691][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.915383][ T3353]  ? clear_bhb_loop+0x30/0x80
[  180.920079][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.925987][ T3353] RIP: 0033:0x7f9b00d9e559
[  180.930444][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.950075][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.958550][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  180.966651][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  180.974743][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  180.982757][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.990771][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  180.998770][ T3353]  </TASK>
[  181.001800][ T3353] ---[ end trace 0000000000000000 ]---
[  181.034090][ T3353] ------------[ cut here ]------------
[  181.039629][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  181.049931][ T3353] Modules linked in:
[  181.053857][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  181.062662][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.072756][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  181.078619][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  181.098277][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  181.104388][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  181.112408][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  181.120415][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  181.128424][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  181.136449][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  181.144557][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  181.153707][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.160333][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  181.168344][ T3353] Call Trace:
[  181.171668][ T3353]  <TASK>
[  181.174638][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  181.180316][ T3353]  ? __schedule+0xcbb/0x1700
[  181.184976][ T3353]  ? __kasan_check_write+0x14/0x20
[  181.190125][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  181.195038][ T3353]  rb_buffer_peek+0x5f/0x930
[  181.200586][ T3353]  ring_buffer_peek+0x184/0x3b0
[  181.205518][ T3353]  ? __kasan_check_read+0x11/0x20
[  181.210590][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  181.215996][ T3353]  ? _find_next_bit+0x8a/0x130
[  181.220832][ T3353]  __find_next_entry+0x33c/0x6c0
[  181.225828][ T3353]  ? trace_find_next_entry+0x380/0x380
[  181.231335][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  181.237010][ T3353]  ? print_trace_line+0x393/0x6b0
[  181.242069][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  181.247046][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  181.252547][ T3353]  vfs_read+0x286/0x930
[  181.256743][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  181.261457][ T3353]  ? __cfi_do_futex+0x10/0x10
[  181.266182][ T3353]  ? __kasan_check_read+0x11/0x20
[  181.271266][ T3353]  ? __fdget_pos+0x2d4/0x380
[  181.275915][ T3353]  ksys_read+0x14a/0x260
[  181.280218][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  181.285020][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  181.290689][ T3353]  __x64_sys_read+0x7b/0x90
[  181.295251][ T3353]  x64_sys_call+0x2f/0x9a0
[  181.299715][ T3353]  do_syscall_64+0x4c/0xa0
[  181.304164][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.308885][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.313606][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.319537][ T3353] RIP: 0033:0x7f9b00d9e559
[  181.324011][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.343654][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  181.352103][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  181.360110][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  181.368142][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  181.376158][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.384177][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  181.392239][ T3353]  </TASK>
[  181.395290][ T3353] ---[ end trace 0000000000000000 ]---
[  181.407291][ T3353] ------------[ cut here ]------------
[  181.412814][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  181.423098][ T3353] Modules linked in:
[  181.427034][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  181.435835][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.445934][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  181.451800][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  181.471989][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  181.478117][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  181.486132][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  181.494185][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  181.502208][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  181.510227][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  181.518250][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  181.527217][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.533836][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  181.541847][ T3353] Call Trace:
[  181.545145][ T3353]  <TASK>
[  181.548131][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  181.553823][ T3353]  ? __kasan_check_write+0x14/0x20
[  181.558976][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  181.563710][ T3353]  rb_buffer_peek+0x5f/0x930
[  181.568364][ T3353]  ring_buffer_consume+0x1aa/0x370
[  181.573523][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  181.579197][ T3353]  ? print_trace_line+0x393/0x6b0
[  181.584265][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  181.589256][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  181.594763][ T3353]  vfs_read+0x286/0x930
[  181.598952][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  181.603657][ T3353]  ? __cfi_do_futex+0x10/0x10
[  181.608371][ T3353]  ? __kasan_check_read+0x11/0x20
[  181.613441][ T3353]  ? __fdget_pos+0x2d4/0x380
[  181.618078][ T3353]  ksys_read+0x14a/0x260
[  181.622354][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  181.627152][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  181.632858][ T3353]  __x64_sys_read+0x7b/0x90
[  181.637401][ T3353]  x64_sys_call+0x2f/0x9a0
[  181.641856][ T3353]  do_syscall_64+0x4c/0xa0
[  181.646306][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.651022][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.655738][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.661666][ T3353] RIP: 0033:0x7f9b00d9e559
[  181.666114][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.685755][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  181.694221][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  181.702245][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  181.710261][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  181.718275][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.726278][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  181.734322][ T3353]  </TASK>
[  181.737367][ T3353] ---[ end trace 0000000000000000 ]---
[  181.742919][ T3353] ------------[ cut here ]------------
[  181.748393][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  181.758666][ T3353] Modules linked in:
[  181.762577][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  181.771366][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.781453][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  181.787287][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  181.806909][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  181.813006][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  181.820992][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  181.829078][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  181.837099][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  181.845105][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  181.853097][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  181.862045][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.868650][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  181.876644][ T3353] Call Trace:
[  181.879946][ T3353]  <TASK>
[  181.882898][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  181.888562][ T3353]  rb_advance_reader+0x2b/0x770
[  181.893461][ T3353]  ring_buffer_consume+0x1e7/0x370
[  181.898616][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  181.904272][ T3353]  ? print_trace_line+0x393/0x6b0
[  181.909338][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  181.914301][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  181.919784][ T3353]  vfs_read+0x286/0x930
[  181.923962][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  181.928655][ T3353]  ? __cfi_do_futex+0x10/0x10
[  181.933351][ T3353]  ? __kasan_check_read+0x11/0x20
[  181.938394][ T3353]  ? __fdget_pos+0x2d4/0x380
[  181.943006][ T3353]  ksys_read+0x14a/0x260
[  181.947268][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  181.952051][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  181.957703][ T3353]  __x64_sys_read+0x7b/0x90
[  181.962399][ T3353]  x64_sys_call+0x2f/0x9a0
[  181.966929][ T3353]  do_syscall_64+0x4c/0xa0
[  181.971359][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.976234][ T3353]  ? clear_bhb_loop+0x30/0x80
[  181.980936][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  181.986856][ T3353] RIP: 0033:0x7f9b00d9e559
[  181.991285][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.010909][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.019348][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  182.027335][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  182.035320][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  182.043307][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.051300][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  182.059295][ T3353]  </TASK>
[  182.062331][ T3353] ---[ end trace 0000000000000000 ]---
[  182.102399][ T3353] ------------[ cut here ]------------
[  182.107931][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  182.118232][ T3353] Modules linked in:
[  182.122191][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  182.130985][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.141088][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  182.146951][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  182.166601][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  182.172706][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  182.180722][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  182.188728][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  182.196739][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  182.204753][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  182.212850][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  182.221836][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.228495][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  182.236512][ T3353] Call Trace:
[  182.239829][ T3353]  <TASK>
[  182.242795][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  182.248465][ T3353]  ? __schedule+0xcbb/0x1700
[  182.253096][ T3353]  ? __kasan_check_write+0x14/0x20
[  182.258246][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  182.262972][ T3353]  rb_buffer_peek+0x5f/0x930
[  182.267594][ T3353]  ring_buffer_peek+0x184/0x3b0
[  182.272476][ T3353]  ? __kasan_check_read+0x11/0x20
[  182.277543][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  182.282952][ T3353]  ? _find_next_bit+0x8a/0x130
[  182.287760][ T3353]  __find_next_entry+0x33c/0x6c0
[  182.292748][ T3353]  ? trace_find_next_entry+0x380/0x380
[  182.298264][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  182.303937][ T3353]  ? print_trace_line+0x393/0x6b0
[  182.309041][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  182.314029][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  182.319546][ T3353]  vfs_read+0x286/0x930
[  182.323752][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  182.328470][ T3353]  ? __cfi_do_futex+0x10/0x10
[  182.333199][ T3353]  ? __kasan_check_read+0x11/0x20
[  182.338277][ T3353]  ? __fdget_pos+0x2d4/0x380
[  182.342905][ T3353]  ksys_read+0x14a/0x260
[  182.347180][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  182.351980][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  182.357651][ T3353]  __x64_sys_read+0x7b/0x90
[  182.362186][ T3353]  x64_sys_call+0x2f/0x9a0
[  182.366644][ T3353]  do_syscall_64+0x4c/0xa0
[  182.371090][ T3353]  ? clear_bhb_loop+0x30/0x80
[  182.375831][ T3353]  ? clear_bhb_loop+0x30/0x80
[  182.380549][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.386499][ T3353] RIP: 0033:0x7f9b00d9e559
[  182.390949][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.410621][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.419078][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  182.427085][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  182.435088][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  182.443104][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.451102][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  182.459197][ T3353]  </TASK>
[  182.462256][ T3353] ---[ end trace 0000000000000000 ]---
[  182.471631][ T3353] ------------[ cut here ]------------
[  182.477191][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  182.487503][ T3353] Modules linked in:
[  182.491438][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  182.500245][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.510511][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  182.516498][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  182.536246][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  182.542354][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  182.550368][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  182.558370][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  182.566386][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  182.574411][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  182.582439][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  182.591497][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.598133][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  182.606168][ T3353] Call Trace:
[  182.609479][ T3353]  <TASK>
[  182.612449][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  182.618129][ T3353]  ? __kasan_check_write+0x14/0x20
[  182.623302][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  182.628056][ T3353]  rb_buffer_peek+0x5f/0x930
[  182.632698][ T3353]  ring_buffer_consume+0x1aa/0x370
[  182.637854][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  182.643527][ T3353]  ? print_trace_line+0x393/0x6b0
[  182.648586][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  182.653552][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  182.659032][ T3353]  vfs_read+0x286/0x930
[  182.663223][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  182.667918][ T3353]  ? __cfi_do_futex+0x10/0x10
[  182.672610][ T3353]  ? __kasan_check_read+0x11/0x20
[  182.677649][ T3353]  ? __fdget_pos+0x2d4/0x380
[  182.682257][ T3353]  ksys_read+0x14a/0x260
[  182.686558][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  182.691339][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  182.696995][ T3353]  __x64_sys_read+0x7b/0x90
[  182.701515][ T3353]  x64_sys_call+0x2f/0x9a0
[  182.705953][ T3353]  do_syscall_64+0x4c/0xa0
[  182.710381][ T3353]  ? clear_bhb_loop+0x30/0x80
[  182.715082][ T3353]  ? clear_bhb_loop+0x30/0x80
[  182.719788][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.725708][ T3353] RIP: 0033:0x7f9b00d9e559
[  182.730154][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.749789][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.758238][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  182.766233][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  182.774227][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  182.782219][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.790216][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  182.798230][ T3353]  </TASK>
[  182.801270][ T3353] ---[ end trace 0000000000000000 ]---
[  182.806788][ T3353] ------------[ cut here ]------------
[  182.812257][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  182.822530][ T3353] Modules linked in:
[  182.826437][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  182.835241][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.845318][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  182.851152][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  182.870777][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  182.876862][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  182.884853][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  182.892866][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  182.900857][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  182.908843][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  182.916839][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  182.925789][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.932420][ T3353] CR2: 00005608a6be5300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  182.940411][ T3353] Call Trace:
[  182.943704][ T3353]  <TASK>
[  182.946660][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  182.952327][ T3353]  rb_advance_reader+0x2b/0x770
[  182.957199][ T3353]  ring_buffer_consume+0x1e7/0x370
[  182.962329][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  182.967990][ T3353]  ? print_trace_line+0x393/0x6b0
[  182.973051][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  182.978013][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  182.983493][ T3353]  vfs_read+0x286/0x930
[  182.987664][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  182.992354][ T3353]  ? __cfi_do_futex+0x10/0x10
[  182.997046][ T3353]  ? __kasan_check_read+0x11/0x20
[  183.002085][ T3353]  ? __fdget_pos+0x2d4/0x380
[  183.006710][ T3353]  ksys_read+0x14a/0x260
[  183.010968][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  183.015747][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  183.021667][ T3353]  __x64_sys_read+0x7b/0x90
[  183.026188][ T3353]  x64_sys_call+0x2f/0x9a0
[  183.030653][ T3353]  do_syscall_64+0x4c/0xa0
[  183.035083][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.039848][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.044547][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.050459][ T3353] RIP: 0033:0x7f9b00d9e559
[  183.054891][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.074516][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.082955][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  183.090946][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  183.098937][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  183.106925][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.114915][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  183.122909][ T3353]  </TASK>
[  183.125950][ T3353] ---[ end trace 0000000000000000 ]---
[  183.153257][ T3353] ------------[ cut here ]------------
[  183.158802][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  183.169112][ T3353] Modules linked in:
[  183.173036][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  183.181849][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.191948][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  183.197814][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  183.217462][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  183.223659][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  183.231686][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  183.239720][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  183.247761][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  183.255778][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  183.264492][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  183.273485][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.280117][ T3353] CR2: 00005608a6bfbda8 CR3: 000000012dae1000 CR4: 00000000003506a0
[  183.288128][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  183.296134][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  183.304139][ T3353] Call Trace:
[  183.307444][ T3353]  <TASK>
[  183.310409][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  183.316093][ T3353]  ? __schedule+0xcbb/0x1700
[  183.320720][ T3353]  ? __kasan_check_write+0x14/0x20
[  183.325875][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  183.330613][ T3353]  rb_buffer_peek+0x5f/0x930
[  183.335249][ T3353]  ring_buffer_peek+0x184/0x3b0
[  183.340136][ T3353]  ? __kasan_check_read+0x11/0x20
[  183.345197][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  183.350619][ T3353]  ? _find_next_bit+0x8a/0x130
[  183.355443][ T3353]  __find_next_entry+0x33c/0x6c0
[  183.360437][ T3353]  ? trace_find_next_entry+0x380/0x380
[  183.365942][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  183.371609][ T3353]  ? print_trace_line+0x393/0x6b0
[  183.376670][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  183.381657][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  183.387158][ T3353]  vfs_read+0x286/0x930
[  183.391356][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  183.396152][ T3353]  ? __cfi_do_futex+0x10/0x10
[  183.400876][ T3353]  ? __kasan_check_read+0x11/0x20
[  183.405932][ T3353]  ? __fdget_pos+0x2d4/0x380
[  183.410555][ T3353]  ksys_read+0x14a/0x260
[  183.414831][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  183.419638][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  183.425315][ T3353]  __x64_sys_read+0x7b/0x90
[  183.429856][ T3353]  x64_sys_call+0x2f/0x9a0
[  183.434323][ T3353]  do_syscall_64+0x4c/0xa0
[  183.438784][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.443505][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.448245][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.454180][ T3353] RIP: 0033:0x7f9b00d9e559
[  183.458637][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.478281][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.486762][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  183.494785][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  183.502819][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  183.510836][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.518865][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  183.526982][ T3353]  </TASK>
[  183.530029][ T3353] ---[ end trace 0000000000000000 ]---
[  183.541779][ T3353] ------------[ cut here ]------------
[  183.547308][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  183.557616][ T3353] Modules linked in:
[  183.561560][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  183.570363][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.580467][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  183.586332][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  183.605975][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  183.612084][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  183.620146][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  183.628170][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  183.636188][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  183.644194][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  183.652231][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  183.661201][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.667814][ T3353] CR2: 000056102e11f660 CR3: 000000012dae1000 CR4: 00000000003506b0
[  183.675857][ T3353] Call Trace:
[  183.679174][ T3353]  <TASK>
[  183.682140][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  183.687826][ T3353]  ? __kasan_check_write+0x14/0x20
[  183.692994][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  183.697825][ T3353]  rb_buffer_peek+0x5f/0x930
[  183.702459][ T3353]  ring_buffer_consume+0x1aa/0x370
[  183.707603][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  183.713255][ T3353]  ? print_trace_line+0x393/0x6b0
[  183.718296][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  183.723261][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  183.729259][ T3353]  vfs_read+0x286/0x930
[  183.733433][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  183.738124][ T3353]  ? __cfi_do_futex+0x10/0x10
[  183.742821][ T3353]  ? __kasan_check_read+0x11/0x20
[  183.747865][ T3353]  ? __fdget_pos+0x2d4/0x380
[  183.752474][ T3353]  ksys_read+0x14a/0x260
[  183.756742][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  183.761604][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  183.767256][ T3353]  __x64_sys_read+0x7b/0x90
[  183.771781][ T3353]  x64_sys_call+0x2f/0x9a0
[  183.776214][ T3353]  do_syscall_64+0x4c/0xa0
[  183.780644][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.785380][ T3353]  ? clear_bhb_loop+0x30/0x80
[  183.790079][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.795991][ T3353] RIP: 0033:0x7f9b00d9e559
[  183.800426][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.820058][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.828503][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  183.836509][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  183.844495][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  183.852607][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.860596][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  183.868589][ T3353]  </TASK>
[  183.871626][ T3353] ---[ end trace 0000000000000000 ]---
[  183.877155][ T3353] ------------[ cut here ]------------
[  183.882624][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  183.892889][ T3353] Modules linked in:
[  183.896802][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  183.905578][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.915648][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  183.921478][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  183.941101][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010006
[  183.947195][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  183.955181][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  183.963173][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  183.971163][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  183.979151][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  183.987136][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  183.996084][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.002683][ T3353] CR2: 000056102e11f660 CR3: 000000012dae1000 CR4: 00000000003506b0
[  184.010764][ T3353] Call Trace:
[  184.014058][ T3353]  <TASK>
[  184.017008][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  184.022668][ T3353]  rb_advance_reader+0x2b/0x770
[  184.027562][ T3353]  ring_buffer_consume+0x1e7/0x370
[  184.032707][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  184.038355][ T3353]  ? print_trace_line+0x393/0x6b0
[  184.043399][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  184.048474][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  184.053955][ T3353]  vfs_read+0x286/0x930
[  184.058135][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  184.062831][ T3353]  ? __cfi_do_futex+0x10/0x10
[  184.067527][ T3353]  ? __kasan_check_read+0x11/0x20
[  184.072566][ T3353]  ? __fdget_pos+0x2d4/0x380
[  184.077180][ T3353]  ksys_read+0x14a/0x260
[  184.081434][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  184.086212][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  184.091867][ T3353]  __x64_sys_read+0x7b/0x90
[  184.096401][ T3353]  x64_sys_call+0x2f/0x9a0
[  184.100840][ T3353]  do_syscall_64+0x4c/0xa0
[  184.105277][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.109981][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.114684][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.120610][ T3353] RIP: 0033:0x7f9b00d9e559
[  184.125045][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.144756][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.153190][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  184.161212][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  184.169207][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  184.177219][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.185207][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  184.193202][ T3353]  </TASK>
[  184.196244][ T3353] ---[ end trace 0000000000000000 ]---
[  184.214227][ T3353] ------------[ cut here ]------------
[  184.219753][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  184.230050][ T3353] Modules linked in:
[  184.233987][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  184.242864][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.252945][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  184.258824][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  184.278495][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  184.284606][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  184.292637][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  184.300638][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  184.308650][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  184.316666][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  184.324687][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  184.333658][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.340281][ T3353] CR2: 00007f756e7dae9c CR3: 000000012dae1000 CR4: 00000000003506a0
[  184.348286][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  184.356287][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  184.364288][ T3353] Call Trace:
[  184.367590][ T3353]  <TASK>
[  184.370551][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  184.376223][ T3353]  ? __schedule+0xcbb/0x1700
[  184.380847][ T3353]  ? __kasan_check_write+0x14/0x20
[  184.385994][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  184.390718][ T3353]  rb_buffer_peek+0x5f/0x930
[  184.395345][ T3353]  ring_buffer_peek+0x184/0x3b0
[  184.400236][ T3353]  ? __kasan_check_read+0x11/0x20
[  184.405303][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  184.410759][ T3353]  ? _find_next_bit+0x8a/0x130
[  184.415589][ T3353]  __find_next_entry+0x33c/0x6c0
[  184.420600][ T3353]  ? trace_find_next_entry+0x380/0x380
[  184.426108][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  184.431772][ T3353]  ? print_trace_line+0x393/0x6b0
[  184.436920][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  184.441910][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  184.447418][ T3353]  vfs_read+0x286/0x930
[  184.451638][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  184.456354][ T3353]  ? __cfi_do_futex+0x10/0x10
[  184.461064][ T3353]  ? __kasan_check_read+0x11/0x20
[  184.466137][ T3353]  ? __fdget_pos+0x2d4/0x380
[  184.470775][ T3353]  ksys_read+0x14a/0x260
[  184.475063][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  184.479878][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  184.485552][ T3353]  __x64_sys_read+0x7b/0x90
[  184.490084][ T3353]  x64_sys_call+0x2f/0x9a0
[  184.494535][ T3353]  do_syscall_64+0x4c/0xa0
[  184.499011][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.503732][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.508448][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.514379][ T3353] RIP: 0033:0x7f9b00d9e559
[  184.518828][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.538482][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.546940][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  184.554945][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  184.562950][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  184.570973][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.578975][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  184.586981][ T3353]  </TASK>
[  184.590029][ T3353] ---[ end trace 0000000000000000 ]---
[  184.597502][ T3353] ------------[ cut here ]------------
[  184.603051][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  184.613478][ T3353] Modules linked in:
[  184.617401][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  184.626197][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.636291][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  184.642193][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  184.661835][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010016
[  184.667937][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  184.675939][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  184.683943][ T3353] RBP: ffffc9000ceafab0 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  184.691970][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  184.699994][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  184.708003][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  184.716966][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.723583][ T3353] CR2: 00007f756e7dae9c CR3: 000000012dae1000 CR4: 00000000003506a0
[  184.731598][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  184.739614][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  184.747652][ T3353] Call Trace:
[  184.750951][ T3353]  <TASK>
[  184.753908][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  184.759581][ T3353]  ? __kasan_check_write+0x14/0x20
[  184.764729][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  184.769565][ T3353]  rb_buffer_peek+0x5f/0x930
[  184.774209][ T3353]  ring_buffer_consume+0x1aa/0x370
[  184.779391][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  184.785075][ T3353]  ? print_trace_line+0x393/0x6b0
[  184.790143][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  184.795135][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  184.800639][ T3353]  vfs_read+0x286/0x930
[  184.804829][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  184.809539][ T3353]  ? __cfi_do_futex+0x10/0x10
[  184.814258][ T3353]  ? __kasan_check_read+0x11/0x20
[  184.819313][ T3353]  ? __fdget_pos+0x2d4/0x380
[  184.823941][ T3353]  ksys_read+0x14a/0x260
[  184.828213][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  184.833010][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  184.838731][ T3353]  __x64_sys_read+0x7b/0x90
[  184.843299][ T3353]  x64_sys_call+0x2f/0x9a0
[  184.847760][ T3353]  do_syscall_64+0x4c/0xa0
[  184.852312][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.857056][ T3353]  ? clear_bhb_loop+0x30/0x80
[  184.861789][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.867727][ T3353] RIP: 0033:0x7f9b00d9e559
[  184.872176][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.891825][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.900287][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  184.908307][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  184.916408][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  184.924511][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.932529][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  184.940543][ T3353]  </TASK>
[  184.943603][ T3353] ---[ end trace 0000000000000000 ]---
[  184.949151][ T3353] ------------[ cut here ]------------
[  184.954633][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  184.964930][ T3353] Modules linked in:
[  184.968846][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  184.977639][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.987720][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  184.993579][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  185.013221][ T3353] RSP: 0018:ffffc9000ceaf940 EFLAGS: 00010002
[  185.019345][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  185.027360][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  185.035367][ T3353] RBP: ffffc9000ceafab8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  185.043369][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  185.051390][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  185.059394][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  185.068361][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.074997][ T3353] CR2: 00007f756e7dae9c CR3: 000000012dae1000 CR4: 00000000003506a0
[  185.083027][ T3353] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[  185.091030][ T3353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  185.099059][ T3353] Call Trace:
[  185.102387][ T3353]  <TASK>
[  185.105355][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  185.111121][ T3353]  rb_advance_reader+0x2b/0x770
[  185.116006][ T3353]  ring_buffer_consume+0x1e7/0x370
[  185.121236][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  185.126904][ T3353]  ? print_trace_line+0x393/0x6b0
[  185.131970][ T3353]  tracing_read_pipe+0x5b3/0xaf0
[  185.136952][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  185.142450][ T3353]  vfs_read+0x286/0x930
[  185.146643][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  185.151351][ T3353]  ? __cfi_do_futex+0x10/0x10
[  185.156095][ T3353]  ? __kasan_check_read+0x11/0x20
[  185.161153][ T3353]  ? __fdget_pos+0x2d4/0x380
[  185.165866][ T3353]  ksys_read+0x14a/0x260
[  185.170154][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  185.174960][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  185.180737][ T3353]  __x64_sys_read+0x7b/0x90
[  185.185286][ T3353]  x64_sys_call+0x2f/0x9a0
[  185.189741][ T3353]  do_syscall_64+0x4c/0xa0
[  185.194189][ T3353]  ? clear_bhb_loop+0x30/0x80
[  185.198902][ T3353]  ? clear_bhb_loop+0x30/0x80
[  185.203616][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.209551][ T3353] RIP: 0033:0x7f9b00d9e559
[  185.213996][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.233640][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  185.242091][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  185.250210][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  185.258215][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  185.266218][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.274215][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  185.282259][ T3353]  </TASK>
[  185.285313][ T3353] ---[ end trace 0000000000000000 ]---
[  185.301453][ T3353] ------------[ cut here ]------------
[  185.306981][ T3353] WARNING: CPU: 0 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  185.317281][ T3353] Modules linked in:
[  185.321212][ T3353] CPU: 0 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  185.330013][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  185.340104][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60
[  185.345970][ T3353] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe
[  185.365681][ T3353] RSP: 0018:ffffc9000ceaf820 EFLAGS: 00010002
[  185.371799][ T3353] RAX: 1ffff1102002eb01 RBX: ffff888100052600 RCX: ffffffff8173ccd6
[  185.379877][ T3353] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  185.387897][ T3353] RBP: ffffc9000ceaf990 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  185.395923][ T3353] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000
[  185.403946][ T3353] R13: 1ffff11020073e46 R14: 1ffff11020073e43 R15: 0000000000000fec
[  185.411987][ T3353] FS:  00007f9b01bb56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  185.420963][ T3353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.427587][ T3353] CR2: 0000561b11056300 CR3: 000000012dae1000 CR4: 00000000003506b0
[  185.435622][ T3353] Call Trace:
[  185.438931][ T3353]  <TASK>
[  185.441907][ T3353]  ? ring_buffer_read_page+0x1260/0x1260
[  185.447604][ T3353]  ? __schedule+0xcbb/0x1700
[  185.452248][ T3353]  ? __kasan_check_write+0x14/0x20
[  185.457402][ T3353]  ? _raw_spin_lock+0x94/0xf0
[  185.462136][ T3353]  rb_buffer_peek+0x5f/0x930
[  185.466762][ T3353]  ring_buffer_peek+0x184/0x3b0
[  185.471821][ T3353]  ? __kasan_check_read+0x11/0x20
[  185.476888][ T3353]  ? __cfi_ring_buffer_peek+0x10/0x10
[  185.482350][ T3353]  ? _find_next_bit+0x8a/0x130
[  185.487172][ T3353]  __find_next_entry+0x33c/0x6c0
[  185.492166][ T3353]  ? trace_find_next_entry+0x380/0x380
[  185.497678][ T3353]  ? __cfi_ring_buffer_consume+0x10/0x10
[  185.503352][ T3353]  ? print_trace_line+0x393/0x6b0
[  185.508424][ T3353]  tracing_read_pipe+0x3d2/0xaf0
[  185.513413][ T3353]  ? __cfi_tracing_read_pipe+0x10/0x10
[  185.518920][ T3353]  vfs_read+0x286/0x930
[  185.523136][ T3353]  ? __cfi_vfs_read+0x10/0x10
[  185.527869][ T3353]  ? __cfi_do_futex+0x10/0x10
[  185.532605][ T3353]  ? __kasan_check_read+0x11/0x20
[  185.537777][ T3353]  ? __fdget_pos+0x2d4/0x380
[  185.542418][ T3353]  ksys_read+0x14a/0x260
[  185.546701][ T3353]  ? __cfi_ksys_read+0x10/0x10
[  185.551501][ T3353]  ? fpregs_restore_userregs+0x128/0x260
[  185.557195][ T3353]  __x64_sys_read+0x7b/0x90
[  185.561748][ T3353]  x64_sys_call+0x2f/0x9a0
[  185.566209][ T3353]  do_syscall_64+0x4c/0xa0
[  185.570666][ T3353]  ? clear_bhb_loop+0x30/0x80
[  185.575391][ T3353]  ? clear_bhb_loop+0x30/0x80
[  185.580117][ T3353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.586050][ T3353] RIP: 0033:0x7f9b00d9e559
[  185.590502][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.610146][ T3353] RSP: 002b:00007f9b01bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  185.618607][ T3353] RAX: ffffffffffffffda RBX: 00007f9b01025fa0 RCX: 00007f9b00d9e559
[  185.626622][ T3353] RDX: 0000000000004000 RSI: 0000200000001ec0 RDI: 0000000000000005
[  185.634642][ T3353] RBP: 00007f9b00e35ab8 R08: 0000000000000000 R09: 0000000000000000
[  185.642664][ T3353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.650693][ T3353] R13: 00007f9b01026038 R14: 00007f9b01025fa0 R15: 00007fff08ae3db8
[  185.658719][ T3353]  </TASK>
[  185.661771][ T3353] ---[ end trace 0000000000000000 ]---
[  185.667608][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  185.857934][ T3353] ------------[ cut here ]------------
[  185.863553][ T3353] WARNING: CPU: 1 PID: 3353 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60
[  185.873851][ T3353] Modules linked in:
[  185.877771][ T3353] CPU: 1 PID: 3353 Comm: syz.3.780 Tainted: G    B   W          syzkaller #0
[  185.886577][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  185.896663][ T3353] RIP: 0010:rb_get_reader_page+0xada/0xc60