last executing test programs: 1.147274337s ago: executing program 2 (id=3): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x1a9100, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="340200000298af352516826e5b8c85cdf1d78960978764bb0b678e85186de2ab4398a8eb39b3c06e24ae2f2528ece41e6d5f116266189c3d6a898ba75b7d5edde105b109f60135bc765a2bfd139198254477601979d1aa4e9130c4167ca102afb4825e8467ceb086109c60c081808ef7368d5a08a4ba709ba7f95093a497585a7374356996b1650cc4e70c5561cd2cdda79d811843d353fa86587b0f8a7f06bd8a4be9a9e0bc27bd312b1a806fb8d6", @ANYRES16=r2, @ANYBLOB="04002dbd7000fddbdf25010000000900030073797a3200000000140002007369743000"/44], 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x4004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) munlockall() setrlimit(0x9, &(0x7f0000000000)) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000c00)=""/4096, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 997.050689ms ago: executing program 1 (id=2): r0 = epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(r12, &(0x7f0000002200)=[{{&(0x7f0000000340)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000003c0)="c8079610af27f0dc5f8f2cabea43cb1a88728e645d4650a57ed2fc84692f47a0be38453f2b37a484a53f956be2e8c84a3eedcb5b3c79ccf1cf9213d325f883e035fe3a3ac9007488ffeb37b36e8d2cc05adb458376eca7f46dbc4dbcdebd0954a6e89174f02b8888a77952c5abaccf5b062a75b220303c5d9f57eb08fc2c4333cb7b3cf9248065d1b5", 0x89}, {&(0x7f0000000a00)="fc608d81d877184c54c15252c00854443cdbcc4609a0724e6ab8d63c76a6c0f64babb2e82b299b8a3532d7d4acce9cacb4cad259ee1e96928dd05a5377eca61efc7152b1dcabc27c9a0bf670cb69dfc908c17e03ee6e9ad588b011a65c41c845106e011dee38192f40fef8d3d99e1e3ba2c0fe2a52ee21f3eac9fa5afa146567a192f261f8e5863a4be26ffd87a06c33185ef05c85a7ccd46103a2549e3a9107ea831642a5ae5046c1f36dcd5608bb8b1b091339e19fabafe9b738cbfe047c5b2cfbdc47c58d21eda60c0225797ef57017a79a252addb5cb62d7ef9f32d486927770f083154de8d24a248ab564b8ecf88252769a4337d19b7f680716b34eb86882d45d95137e594b39bd882acb510f04594590b424c6ec910a10d89b2ddcb9b8e1eb061657ff2c68d62220e5d799acf9aee36ab5631f36ceaa33dd91172dd9409dc1b2fe6927d5ffa6086f63fc5fdc764b6b650f5b28158c21ef78a30ff0b88d461310bb47c0bede6322e7b85ddb241f9963ccb6256877b01b1178d1ef3c94d9823621018f9e31a1ec4c1e254e0ae378cff7287ab2d8454234bdf52b5493119e866388e3d3b28fcfcc45b9bffb590ff28a9bcaf20d39ff4301fe726f7d03e7e592806a7ee4ebdd14bf6a81032c8db5c9a7af84a44e5b9ed01597e962b5a629e0b3e2c12298b8421311b27c6e722f59efc1be10afbc5a8c1409eea82ff5f923cee04b9db4870e930e154b59d6a9c622dd6005b593944eb8224cae45881603057e918606eb8f6a49637db10445577b999775eb40acffe8741c945faac85e295f58a67d3f70e0d8d257fee7907ce80235d66de1f57d79a521fa7f0cda255cd836d8d6d9ec3d8674756a4d744239ac6335f46913591a5bba0e2897395e5d5e1dd170cb4b4cf7dfc1f3ade3f3e624a08ce948a3558f101f2631bf7246a09511f428e0e921a904257454e04d2a2ec194335c1a60046777526d87187fdeeb1601c39e1f608cb9b82a26694042fad14c0e9b3e8aa691abbc6c06dfc7debac47c1892f5565c9a117d8ad495eab28594710221d9423ea43f47ca648da317b4071ba803364373d801b55d0ca04e0777bcff37b0853fd8f3847e5433be7cc54d1758db25214ed83d4c7a20b53b5f2f4fd3bf060c741d252cac30c94535ac3b6d50371ade0e1008666f55fae7bbbf411e140e814a22e1ab1c1882a8b27351bf05fd43cba16bb7abca7709fbd3f15bb70737a5766bdc901e678e110473067f7b250f6f16651b16e06f2ab11a8822e54ab71f35f70a177f533501af17168f9ee0c084fd517acd870a5554f838f525d8c7e1aa9cf5ed6a744b4e30052c3a0076d0c6ce3db24cc1a32d70bfae38104ceb3a679649f125e337832d42df21a2d78552baccc189a275c1c0c7933a5b9ea7cb14fce01386fc0ac54e8414c355cf16caa7a8b0e80414c05fa5c78812f959345ae9d0730274b7f6c1df3dcb0eef5d50a24c7ae739021f9618bf4272686a32477ee6465143e590efc9fe5de29ad5bf8651f619b1896530ec2800e74f44e90b59475fb8dbc36673cecfcf18162baf87fcc4aee94d0908a518022c48d1a0913cc0899c19dca60aed7eccbc605d0c57b4f53d09fc904da97ce96e1725521d7b4ed78330806a66eaaffd9102201c299a8fa5b645f5807d5f5663bdfd92a6e187e96d8e86713d6d0087503a6800d3cd9e59efa5e4a10606742bc6414e378cb779a2a54eeb12007aa0e7412ab7878a1b694738e32598c4f466c296ae82cf2422a0154fbb7838df6c4e72eb18174fd7b2618d5d1a11b592f107aedcf4e6f8893938aaaf64f5d56a441b612f20640c3fda808171b439d5e675c612d7574d99f6f634599e929d1ec6f5d541aa3ca96affde6f49f92538abc26ad5dbe74b630fda6c6f6ba939d68b8ab4ab3f722bcc3f2e19a977af70fb66d384c69cb741a8d1ce733850d5033c6ae885ba8de4f1f6b1c625d34fb985d6b472b8cc2c3c570908db7ec29314258dddbb965a1d990f9bc3551b63b1fa12f181b78545f8c005f771751611554ee6d55a0301c781380eda15154f93fb3b2d9383b5090e6b3efb04e009cea08fb4a6ad1c477d7151bce5a8dc49912b7f212073fa8116e0bbfd219ae139a5a38b2d839b44cebbff7e42e9e4837e3c3830b32f7bfc3630e61bf9f66e6b480fa8876525fbbc5287df7223274317fdb67439217f2ac3121c91dd045c9124bb77eacd6cac1bd01ed89aa94a5a848f7818980cdef04d69df4f974a036a033ca55a7c16140e2218be4966e0a035cf77d3303b863550e187738ec96b9f18f255512872ddd298416f69483bbd5d977f73dfbed188f2217d24a3eba550a6a334681a31571acd9fcc28f75748bbf53ab5eba3b13d48e50a3e3e6721c7464599f6ea083f27bcf85acacc441df913c8901e0e9c259d0d1afccf22640ca7e0846556abb5a68b5484d847702abff68d37fb5c62ec618396cdbea33d69f1fa5bc0d30afaf9c4df020352a0de616cc6de4d0041b60bd334494272781cc12e12633c3f7c8b650626a6be39a1b96a36b7375661f64139e669972d4ac602c2c6b3a6b4715fcfcf765819870c912b3eb204d207bbe41b4024be23b19145dfc4859a3158cd29a9b1182de7c757292cd62dc183631abadbef06e7da3026c3b50ac6f842d4872d58b10bdbebea2a254ccc8feff88c0325312fd1a9e4910b6e27e42f5b1314aa30766914186f1b8f3f4319792d4f8c4f0d3346897a5140064b8f92cd322f06594a8f57131ce781bb96c9f312603a7212d92503b1b7d62cf4c09e510bbab1547161ed81d47572115767b8a81e9a8bd27a171dd189f644d95b8cb928f7ec33e4400437e1aef497bc5a9b5fd4c30f946a5b9660165d76da14f4d35863a66586e44472b7cd1d29822f17cc7c1e89b04b71165591dbf90261d452bd56c278a1f6335a410010d9751d3eda660e7f34186f8b5c4da961faf6793afb0713411e6e02f3a29d1dc1e4b0eca74dd6139bc404dd1a3d51a8e5e948e11743535f5dbc49ba79d18603eb978e4dff2ce2163ce9391b6a189e2b0f2544fc6b15ee38695d6cf4551d28e0a91a9f1690acdb8cff7fd9a56d993aa98e0120f66068f91f92b1c331ba908cb38dc3a08e60631f0ad8f8aed365d6d11dc09399523763430958bc7e005264672a4d768e896f6d642ae68dc91848d4e540ac535d68948e7b0ba44d6f402f06e2314f29a4c4e4a683841171b2e26e992ba7e91ef6d9a2fb9903809b0a552e61459f9f3d196e34dfc118765dba2e1603520edc6b2a447ffe3a3189c56a34b0c8c10b38674d873a1bc3e816b905d9f18fbd2e61937042dce118d0ff7a90d8439657476e40fdf9cbdbd9687f07fdbb023559a8f1f52df25e20699842ae27401c96c8b6ae0c90071ab8fcbe9515f49f1c6f13bfe9542fbb98c62fa5ddf090ed8dcae86ea1673fcc09fd402ceb6d3074b039396805683e50a7d58ca0129ab032729742ebc1bce9e84e8a95cf4d5434274b756c7bb9759dd1b5241829d0d03a835a932f83289b7f847d5daf0f9848b40a03779697fcf75b1f94dd95485941a0dec3794a4e55c4c278f8d4d29584d19dfc8f3d3929bbc97be4ca2f35165244a1b93cb82983bb0506789538c48c15e1d67c670786485056144663f57d1224310e0e9f78f0d4e351de3c9be6b7e24f23513cafc7e692942eac27e2c6d5ebdf02ecea19f5c79edc562b2d9d7840ec940e0efb33d9f66ea5e41b11ee9f333d0fe48ee10074ec26c61b775c092b9d8822f3f999567127a3b0b16d645ad80fbf36370b27fa5e7023995f726d95ffd4afd9f5601b49db73496998e079c71010824b596f24164d57fa4cb554e59d7ee928641677cb6fc43f28d50a9d012ba2e9f28c970eaef8d278571348c39dfe973a551309eca59bf8be3ea86d98ea996b95196d053c09272b5840b19b0deccc706a95c833e60e77fd22d95075bb23e1f1f465464803578d1cf0c7ec5b58db47e9390e0e0017068f0dd5ea1754583ddbd9421c4893e128e1cf32d4bfdee083b4c71f639fed4a57e384b89c2741ba72ca16f15b30bf63814291f935bb38f290cd664be75d91e55a83459db0bdd32fcd28367bc1889e633c5c797896abbe534ff0afb7aa9ac913a5e45383c992f15ff75a445c264d8c28aa61187c5f0afe38a8801dc025783c10fdb6b78cd1b709a24e4eaecfd32969cea3b2a123e18a6691ac54a1798f8a4815715970f649ef79a7b30606162cd68c569461377bee346512b8b928607f0780362a1e0c9161ab42035b632d3c1745a3f7796f836760a5e839a1e7da9780869d79ec4360945da8efebb5c158107c30796559a5bae9e4963a5e09ad76c142b97b6f4eccf997aa3c8a2d0d0060130adf4984719abe90fe8596d8d59b8be8db64fd9de5a078662ecc1afe75614a1079a43fcb0dd02ed30d61eab9b2479dab762dcdbbf3be7bbbb4ff371dbdc0037d9d2cfe4b2113adc958b6c34bc506ecc290a35e1bcb44e2c1c9edbf05b6456dc2dbdba9d8b21ed528671b702dfbdd1226ac499fc9d77148aa118eb6251b6f5609a02864262af27e566927e3373fc68f9a63e23865017da80fc8c6a578804c88df8874192a15e64696bc6567d6b1dea38e3820d025ac0689db2b9fa2ca6c90c9e796b713a831888e302ac11db0995a37dc160da6bf4054e3cdd0f8866101b1f75ce3daf6c28f3a9b5ae012fcd58933ab817592a844d41de5e3beef333b89ab97684dd9c72968204450abf2ff272ba53ab52614cbee1f6a59fc396b1d81724131a456e0a107c411f8b818cad906cbe5cbe0d8ad8b4e420bf30824831c0d9ba33c02f2bf3024480fae43a710571265a7fa118b9e4405da2ee897e0ad0e01269e48090b248587fc9b76b780a8cd43b97d65d162c92500bc37d67250a8d5e3f812cf6d576bac200c696b7d664a8147f382ba3d66320dbfaa6f902e133c57b15f75415123024674c17af63ebb8619f568300333795288be0f69691028aec55e31f53bc9dcc4487a87c483e9e629d74a4a8951ee5fd2c7115ee9145fe834636bff472a0b0580db4971e278c557368a33b6a22a87e62cef681c0030e5495abaafdc904ad85702e83ca60c98d3172401ecf5b10b1770ce10f24775b2a6fbeef65b8b58e252fbca0b455ea3d2b9a221a5bf694cd9b22bf4598d4a25a5556008b58fc824f647105112e4f3fdf4d89e5ee125bb11647ebc6e2e7ff142a6597f323d6513c5ba05f0d523b59f99bfe61d7785e49cb287236d08c16a277401a4839ba742a5048dde75a29433d0ea0be4d33a62872a95bd469b24279fde88241f7c9d673e08f6ff5869647d2ed25739e8e4d6871cb74b38d1f4821e11b8a43cbf2b7b8ccf3ad6f2df0e222b3adde491d12b99dbc03c431ce7137c8e20ebcf6f94789c4ef3b9a092f116c4f9f204dd3f7d87cb6ba2328fe28dee3de5ddc719f1408bfdae0a7f3f81b3fc0056054e6296ed4ab0306c8e7f1e82f82827954230e8c473baef6e7cbe98a2ce8476417ad5a5dc67199e8fb5c335f85fa1894c9a4271a2b22883a67060a9bc8c21b6e9c8e67f85685cde3fc374a56bdab896e702d8e0b3c7d29a6bd05279b257839897a03592524c7f5a680a4e7be119bcc44320f895f8523af8f825cd56dd030f0f867c1f2d1a6e5da1722771e4668b00f0d73ec3f22f68ef48fd2b6798b005cb4970ae8dcbcc2fd4b0cce502088bf7ad69575dbbef1996f3d8aebb005443f579091aac2e5bbd68f8be454d9fa854a93422e772b357e179007cd3d20bb07453bf9c9a89564d", 0x1000}, {&(0x7f0000000740)="e4427574def8232483a361940b52bade7cca1873e0059034b2a658bd58acc6a4f2173b8372fb0684bf656eb872bf9b0f0f6161c949fb4740a2ae5ac519ceed4b0539f7ceacf8749695d52a8f358d11ca859ed7dfce3a793bebfb2e1207c8d93d5b3a499be890e87c89d2e9f9cbc9e0220cbacf0d4cfd6dc2f53cf49aacf8d8c9be8f1ddc69ea816776e00c52dc8e4042dae5c1eca076ab250122e7f2b2381af7f96145fe8082d15d9c5aab21758d2224ec6a961db8f4b89ee5e3d4339c918e4a15040e8fe5541f344a3ab255e74afe6c39c392a007f9601a6309f01ca20c911cd874604224c24cb7e4308faed3de580f3b644adb7e1df63d67", 0xf9}, {&(0x7f0000000840)="982a1cdc87a76990524b997a5f7b22ae76c9744637ec3874cc485da05256fa9b7df02942fb34165045d487ae466b4a947d832753742cee2d62811e31bf9c4a00899d5877cf4ba47eb15c77d5618d7eca5a926b3c3ebeda8ac0c3bc6d8899b26a0dbc597c6db72db96dbc785e18b215205292c58848da79cb4fe5903f82", 0x7d}, {}, {&(0x7f0000000940)}, {&(0x7f0000001a00)="6482e9d685c744b2fd86ab4c6ab8012f09faaef3ce04cdd481eb3f400e2d7daa7077305e3b0430a0ad6c216fa2bcd7e806ab7ea3892d5a305e0cf487fff7ba32be2a39f756a28b7b8268aec02d21b7d3c2c073c3a54e97d73d4cd3e876a43e9630b2842c46b6474477b5be30ec41eb59fcc339f2856eb6e982c64aeb66286518818e22faa803caeada53553a4b3069e842f355608b621d9d64f0377912d8e9a5bdf73a60de5ad1e9ccb4f6452fbc7652f9592ee0f332c159a16d84abf5b74be39d4ab478491d35eaafe8ccfedf267cb432a9a18b7f7b9091995b95157ec33cb727ff01e0843a960b85abafe70a960a5e", 0xf0}], 0x7, &(0x7f0000001b80)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x18}}, {{&(0x7f0000001bc0)=@xdp={0x2c, 0xb, 0x0, 0xd}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c40)="b9c9bd6a61569e803e8fa899bd7ce5aa63de33a9bd53b646c0fffee7f7ea9651b355910fe20c0590b045236f988e91f4204d705e8caedaf857e1876187645c048941f8e2bc4e404d896d907cc74935e68c16b29c62b852ab9d0d191fce8aabae48b7d0dd7accd3f81529a335eccad943530a21d0492feb869fc2b7b9620116bf7185312d17574d8ee20c2402d1e71cfbb23f18ef843cded36fe2a83dcf44bab9091982003c319312166aafc0a6761a2011df55d25f5fc4ecae5ce9e763b9d88bb57301b86e6a89997e1300333b91e02bf827c4f7a77deaa8f63abf", 0xdb}, {0x0}, {&(0x7f0000001e40)="0b24379e22", 0x5}, {&(0x7f0000001e80)="f84b9f6399cfcb9e7b03c92627e80bfcdaab163f5c880a235ed1fb0aebf9c9d50ded997606ac6a9522330f67a2bf83a9951d32e0417ec679eee261d97a63da809a6a895b6b13c915a58284e284271eb5aa6131244977eeaf7e89c13dcd21ed0b566cd0dc7b93dd2f9719b89a90654e30bca3951d850a6150e1626b1b8eef57849166314257d918", 0x87}, {&(0x7f0000001f40)="9b1ee4deeb8f254ccd025075af0a49371e5e1a78c70524bcfdb8f86b32bce4dcf6096361d4ce17f8771e64a24de01f2a69e66e4c2086d542eb2f3e7c9543e1c14ee2a6d004232dc2afe961f7bdfa362d8c14a0b038ebe4681ae9faafb85ef92820e9de3a210cdf304cd59a052a4f330a1957601cf888d0f6ace5364e3ba93f4147f9ea51ad0a75034937670c4535b5e376ae3dd6c65c0300a02b7e95566fa147cdb7ab6e8dc5afcbea74003881cc5d27ba2e452dca4200859c0a21e914", 0xbd}, {&(0x7f0000002000)="364e5182cc88d0808508c1cc62f806d5f98d4f2551e2ebaeb521fbc03b80c0f63afa8bde624e075e52495da724d2711e9ea77a61b63bf4067f8da6174d440d146734a2b2e634c563a69d9e3f707253b0", 0x50}, {&(0x7f0000002080)="09d4106086244c057e67c993dd9e1d974e3fae8f477d3682a609db01d78255c6d84f75616ff78fdce0", 0x29}], 0x7, &(0x7f0000002140)=[@txtime={{0x18, 0x1, 0x3d, 0x1c}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa78a}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x456c}}, @mark={{0x14, 0x1, 0x24, 0x53e7cb54}}], 0x90}}], 0x2, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r11, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000300)={0x60000001}) epoll_wait(r8, &(0x7f0000000180)=[{}, {}], 0x2, 0x4000005) 990.000609ms ago: executing program 0 (id=1): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0xfe2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 933.460914ms ago: executing program 2 (id=6): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semget$private(0x0, 0x3, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0xfffffffe, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000002c40)=ANY=[@ANYBLOB="000006038c03000042010000090000005403000004000000000000000000000082cd360771c53c40746575a76878639634a96283c2baac30e5d3cdbea93ecaa3c846f03380253339efbe7fb6de486489797b9f4a2ecd8aaf0b005370fcc6e71108941d81153c75e2d0daea2d3da0ebcaac9ae83edf2fb6b82ffb8a5459fabaa3bbc6ee8592840f4fb47bb6e9d45285ca91baf777b8996b43ade90733162893b5a4c197a8fcaa887c8f8ef3de5e03c55467cb3aa55a8f3109dab5f5fd98c32e7ce7e1d4e74c7010e67ffadcc43283d5e1a191b7e6f5fa6f0ec53c38c8248569141eead396b4c029925ac4e72076a7fc72f115df5a668c271a598a7a330694c3f2c611f919cec5ef712f5cf54994ecce070000000000000000000000000000000000000000000000000000000000005272907c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000464173523a437b461fffd1eb150b82c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000523dd25c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064bb4b8b34b5412d0055d7ebe308f407692ee35c7d5247b7410659e8f9af788048828a4de21f20f180ef8977c58860f30793e8b7d9da11ca00778abe163256750442ead83f40b9e9ac36a7e42bdd9e864e167a088e8af4e1f4f582665f2fa249dc5089ca3e4af2b10a7f9bbe70368482988eeedfc0f725856dc02407bdc1939947c9f8c8d5b29bfa846ac9b2db4482d71d3d988b36c9730b1929c83bda266e9aa33ec9c557b797ca03b62a1d03b7"], 0xb10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)=""/238) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='task_rename\x00', r6, 0x0, 0x1049c}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x634ee65321fe8875, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}}}}]}, 0x4c}}, 0x20000000) recvfrom$packet(r7, &(0x7f0000000080)=""/127, 0x7f, 0x40000026, &(0x7f0000000240)={0x11, 0x11, r9, 0x1, 0x7, 0x6, @random="ce4195da3d9b"}, 0x14) fdatasync(r5) 886.780068ms ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000a37883e468d7a88aac777e29714f8aea0000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f0000000540)}, 0x20) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) close(r4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x9b9d5000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 753.930089ms ago: executing program 2 (id=7): fsopen(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x28000) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x20000880) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@errors_remount}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) timer_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close_range(r7, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 751.266109ms ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="150a00000000000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x2000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x8, 0x3, 0x4, 0x20090, r3, 0x5, '\x00', r6, r3, 0x5, 0x1, 0x5}, 0x50) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @loopback}}) getsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f0000000280), &(0x7f0000000300)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 624.483049ms ago: executing program 1 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x8000000000000000}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 457.473333ms ago: executing program 3 (id=9): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) preadv(r1, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x3, 0xa) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000a00000a140000001100010000000000000000000000000a000000"], 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = msgget$private(0x0, 0x100) msgsnd(r6, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x18}, 0x0, 0x0, 0x5, 0x1418, 0x10041, 0x4e, 0x5, 0xf, 0x8582, 0x6}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0xfffffffffffffffb, 0x58, 0x0, 0x80000, 0x65, 0x200000000080], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32]}, 0x7c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) 283.820346ms ago: executing program 3 (id=10): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05"], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000db1f9501174000000004a36f025ada1bd00000000000000000a000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0xfffffffffffffd66, &(0x7f0000000540)}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x2, @loopback}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNOTTY(r10, 0x5422) 240.50715ms ago: executing program 3 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x3}, 0x18) r13 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r13, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f725d256c6f67645f7661725f72756e5f3a7310202f7573722f8969552f74656c6570612d6e5f5b78a411b17468792f6d697377696f6e2d636f6e74726f6c2d3520303030"], 0x5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 101.144891ms ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r0, 0x0, r0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pwritev2(r2, &(0x7f0000001100)=[{&(0x7f0000000340)="77dea376d927864f74856d75287d06ba95192e42ead9ef1a5b1f7526a9af758ab312c204aa857a7a1a30d05d8f67af5023b1cab6", 0x34}, {&(0x7f0000000540)="b59c0e3db2f47f0de91724e5488d18d6d28451cd77467761088e9eacc50ebcddda6a2bde2f9f2813445c4d63671db9896f7dbf3ca9ae46aec582d8871dc184d1dc99e18013c0fc3abd88051875f0d22bfbc9669675f6f3045807ad522d879f1a94409faf69d864836b00c639ebdd1abe9f84b99d9890b7da677e34b187744b722de93de841d5b0aba7bd5f912997f920bdb0d1b9222ea289ce5403d568276781c312f5a3f9bda08bb0032dfd1b3275e3ba35", 0xb2}, {&(0x7f0000000c80)="d872af9a9c1540ff6c776fac4e9c744828a2225590f5363f08424ccb8021683669ea40a8c36ce591b45e2a311228170b37fa320a454693d5ea3a4b804aa363656088b1a5c48b06318cafeb09146291f8dc24d9c764c7e1eb4c79f74e1d62ca9066eb90f65094b6a75340d9d14b6477e11e229fe1619e600901361d150696be2e256ab87326c41c0b661f12c70dd80af1dd85fecd106bb02309c0304c5ffbdf82140834c0352981fa74ea5078d6e9baf2b68d23e3a3894b3cb461de074dfe07087d9f6910f9d3cb5353204e516666635190f80c466df4fcb0bb8971de", 0xdc}, {&(0x7f0000000400)="ecb1261dc8ad45a561dc571bcba3c2909357", 0x12}, {&(0x7f0000000d80)="b6a2b9a63121689a83e62e11a063e4675547a6e530b895af6573edc672fa8a2e5ff4b18be879e17c117b178fdc30af4af8d753f4ec6cc5cbcbc7afa7ac16a0e4e45281b88f9bb8703d03c97e83159ea8e36dcce24a6fa7c0a9c8aa1efa79b6f38f9e7a218dac2411b2c3d81bacefe7de71e9415c057c4954dd85121ab418b546fb2aa2f4", 0x84}, {&(0x7f0000000e40)="e21cad9d3b366d6391d6b8b273244f363ae152cff6236cbce548356b07a828d47faf5663d10f706172c37e01bd90bc75cc5a9daed40122f14be41a710f124abdd5c9a461016a1895b1824f4e59f9923c49332c2da73190e4c55d5d3be80cdd90cb10a31012983ebe8e1ff512be348c650ac0d00cd2e8ece3a5cec6bb96340753e431393887875c14283208cf41454cb6a8393350077524cee52e8e338300ee581a69020b7e7d4d610962117c", 0xac}, {&(0x7f0000000b80)="a6cab9fabdec4088d86da98900eaee0c29759d85eadd4a35e5f5e8b9bba91f115eca66e0fc871f0fc6a1d6e188ff582d2add9427a58391aa145308cf9ee799fc5873ad270c01bdce4477d3a829499e5147c97645bb7c05f4c079", 0x5a}, {&(0x7f0000000f80)="56539055be0b34b8d4356977a9d86a8d9dad70d081dd45b82f7fd41181704f66f8b69331e8e1404e3ff6e938c639a4694d36880a932f252d15c0921841e09ac2c54fec1c083941867f230afaf74fe2594f9016a742e0f15b5212e9040b8a7a69a1081fa49ea41b95ed97960ccef9cf191b7e65d9c5069f5220da1cac18ce4fc12f8085802aceeb2cef14ab40b7b27e4584a3235303a6403bcda6de34c7b9f9e186a44e40be80cc539c778a94cffe5fc137af4838f6c3cce66f13", 0xba}, {&(0x7f0000001040)="4eeadc4209d7cd382d1941996cba9b98a15fecca87abe2b194f19dea04761be97dc7b9b7eddd8f5082ed187d1cd87448ba5a86607a786aefc5b6e8316d193d4f269c15b6631c139125ed6793a6d9a4cb34984bf10b0092c1d5b33cead4125b16a44dd80d543179498864b3a936c7a020eb71f3a5dba5e4acba5cfb2eddc8a9af7b016eca80dce8184240e22d75d9146c828f28e9fbcf38b5d77cbdec879cd0af02567e9ec7518995afe87ebecfce4c40f68111", 0xb3}], 0x9, 0x16a, 0x800, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7c9}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040844) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r6 = gettid() sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) 80.171953ms ago: executing program 3 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x181000, 0x0) fgetxattr(r3, &(0x7f0000001240)=@known='system.posix_acl_default\x00', &(0x7f0000001280)=""/150, 0x96) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x31, 0x4, 0x0, 0x51, @local, @loopback, 0x8, 0x7800, 0x3, 0x1}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x68}}, 0x4048000) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x10c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4005000}, 0x6e29bbbf671c345a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r16, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0) 0s ago: executing program 1 (id=14): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 25.633315][ T29] audit: type=1400 audit(1753873082.419:62): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.634468][ T3269] cgroup: Unknown subsys name 'net' [ 25.656317][ T29] audit: type=1400 audit(1753873082.419:63): avc: denied { mount } for pid=3269 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.683534][ T29] audit: type=1400 audit(1753873082.439:64): avc: denied { unmount } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.802924][ T3269] cgroup: Unknown subsys name 'cpuset' [ 25.809372][ T3269] cgroup: Unknown subsys name 'rlimit' [ 25.901753][ T29] audit: type=1400 audit(1753873082.679:65): avc: denied { setattr } for pid=3269 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.926360][ T29] audit: type=1400 audit(1753873082.689:66): avc: denied { create } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.947401][ T29] audit: type=1400 audit(1753873082.689:67): avc: denied { write } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.967908][ T29] audit: type=1400 audit(1753873082.689:68): avc: denied { read } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.988366][ T29] audit: type=1400 audit(1753873082.689:69): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.997127][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.013244][ T29] audit: type=1400 audit(1753873082.689:70): avc: denied { mount } for pid=3269 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.045199][ T29] audit: type=1400 audit(1753873082.799:71): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.084924][ T3269] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.147835][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.183368][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.242298][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.249414][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.257032][ T3298] bridge_slave_0: entered allmulticast mode [ 28.263647][ T3298] bridge_slave_0: entered promiscuous mode [ 28.270869][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.278014][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.285334][ T3298] bridge_slave_1: entered allmulticast mode [ 28.291803][ T3298] bridge_slave_1: entered promiscuous mode [ 28.310668][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.317796][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.325002][ T3297] bridge_slave_0: entered allmulticast mode [ 28.331372][ T3297] bridge_slave_0: entered promiscuous mode [ 28.340453][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.347598][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.354821][ T3297] bridge_slave_1: entered allmulticast mode [ 28.361366][ T3297] bridge_slave_1: entered promiscuous mode [ 28.375764][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.401815][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.413647][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.446291][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.466112][ T3298] team0: Port device team_slave_0 added [ 28.476629][ T3298] team0: Port device team_slave_1 added [ 28.493956][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.513067][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.520069][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.546186][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.558290][ T3297] team0: Port device team_slave_0 added [ 28.566791][ T3297] team0: Port device team_slave_1 added [ 28.587269][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.594299][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.620386][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.631191][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.650170][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.657223][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.683208][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.696806][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.703833][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.729767][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.800163][ T3298] hsr_slave_0: entered promiscuous mode [ 28.806363][ T3298] hsr_slave_1: entered promiscuous mode [ 28.812534][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.836608][ T3297] hsr_slave_0: entered promiscuous mode [ 28.842709][ T3297] hsr_slave_1: entered promiscuous mode [ 28.848590][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 28.854384][ T3297] Cannot create hsr debugfs directory [ 28.873649][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.880790][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.888226][ T3306] bridge_slave_0: entered allmulticast mode [ 28.894827][ T3306] bridge_slave_0: entered promiscuous mode [ 28.914990][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.922126][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.929390][ T3303] bridge_slave_0: entered allmulticast mode [ 28.936209][ T3303] bridge_slave_0: entered promiscuous mode [ 28.942954][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.950114][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.957409][ T3306] bridge_slave_1: entered allmulticast mode [ 28.963745][ T3306] bridge_slave_1: entered promiscuous mode [ 28.980111][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.987264][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.994533][ T3303] bridge_slave_1: entered allmulticast mode [ 29.001044][ T3303] bridge_slave_1: entered promiscuous mode [ 29.047474][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.060648][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.070974][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.106411][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.123379][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.130568][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.138924][ T3300] bridge_slave_0: entered allmulticast mode [ 29.145418][ T3300] bridge_slave_0: entered promiscuous mode [ 29.154995][ T3303] team0: Port device team_slave_0 added [ 29.176906][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.184047][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.191180][ T3300] bridge_slave_1: entered allmulticast mode [ 29.197733][ T3300] bridge_slave_1: entered promiscuous mode [ 29.208970][ T3303] team0: Port device team_slave_1 added [ 29.230853][ T3306] team0: Port device team_slave_0 added [ 29.249689][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.256703][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.282728][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.296405][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.303425][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.329500][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.341129][ T3306] team0: Port device team_slave_1 added [ 29.348129][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.379610][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.401862][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.408917][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.434897][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.461965][ T3303] hsr_slave_0: entered promiscuous mode [ 29.468189][ T3303] hsr_slave_1: entered promiscuous mode [ 29.474658][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 29.480425][ T3303] Cannot create hsr debugfs directory [ 29.492942][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.499980][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.526218][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.544718][ T3300] team0: Port device team_slave_0 added [ 29.555192][ T3300] team0: Port device team_slave_1 added [ 29.600062][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.607176][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.633191][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.646262][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.653365][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.679548][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.692301][ T3306] hsr_slave_0: entered promiscuous mode [ 29.698339][ T3306] hsr_slave_1: entered promiscuous mode [ 29.704241][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 29.709990][ T3306] Cannot create hsr debugfs directory [ 29.747327][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.766488][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.788546][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.804602][ T3300] hsr_slave_0: entered promiscuous mode [ 29.810677][ T3300] hsr_slave_1: entered promiscuous mode [ 29.816610][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 29.822456][ T3300] Cannot create hsr debugfs directory [ 29.831017][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.876294][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.885151][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.906522][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.917846][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.972030][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.981124][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.004137][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.016119][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.036703][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.052703][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.081048][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.090038][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.115377][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.123432][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.132610][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.148003][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.156868][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.182814][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.190606][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.210009][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.217320][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.248417][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.255582][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.268636][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.282890][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.304011][ T2097] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311147][ T2097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.323769][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.332840][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339924][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.354537][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.385950][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.398096][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.405238][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.421531][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.428692][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.441969][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.454720][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.466931][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.479933][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.487139][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.510730][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.517896][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.528851][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.536032][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.550302][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.562765][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.569890][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.600022][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.610565][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.639075][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.681162][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.691729][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.748675][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.786070][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.839424][ T3297] veth0_vlan: entered promiscuous mode [ 30.864281][ T3297] veth1_vlan: entered promiscuous mode [ 30.886391][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.918055][ T3297] veth0_macvtap: entered promiscuous mode [ 30.940940][ T3300] veth0_vlan: entered promiscuous mode [ 30.959124][ T3297] veth1_macvtap: entered promiscuous mode [ 30.973274][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.985685][ T3300] veth1_vlan: entered promiscuous mode [ 30.994001][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.010644][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019518][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.028336][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.037293][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056643][ T3303] veth0_vlan: entered promiscuous mode [ 31.063290][ T3298] veth0_vlan: entered promiscuous mode [ 31.078531][ T3303] veth1_vlan: entered promiscuous mode [ 31.085482][ T3298] veth1_vlan: entered promiscuous mode [ 31.107817][ T3300] veth0_macvtap: entered promiscuous mode [ 31.120700][ T3298] veth0_macvtap: entered promiscuous mode [ 31.133027][ T3300] veth1_macvtap: entered promiscuous mode [ 31.143756][ T3303] veth0_macvtap: entered promiscuous mode [ 31.156298][ T3298] veth1_macvtap: entered promiscuous mode [ 31.158873][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.158891][ T29] audit: type=1400 audit(1753873087.939:81): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.dxre75/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.168099][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.170175][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.208533][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.217406][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.226149][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.233389][ T29] audit: type=1400 audit(1753873087.979:82): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.234870][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256768][ T29] audit: type=1400 audit(1753873087.979:83): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.dxre75/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.268736][ T3303] veth1_macvtap: entered promiscuous mode [ 31.290619][ T29] audit: type=1400 audit(1753873087.979:84): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.304390][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.318107][ T29] audit: type=1400 audit(1753873087.979:85): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.dxre75/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.329306][ T3306] veth0_vlan: entered promiscuous mode [ 31.351845][ T29] audit: type=1400 audit(1753873087.979:86): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.dxre75/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.362205][ T3306] veth1_vlan: entered promiscuous mode [ 31.384705][ T29] audit: type=1400 audit(1753873087.979:87): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.409760][ T29] audit: type=1400 audit(1753873087.989:88): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.420302][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.432539][ T29] audit: type=1400 audit(1753873087.989:89): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.450631][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.479366][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.480109][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.493261][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509961][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.518717][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527778][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545114][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.553872][ T29] audit: type=1400 audit(1753873088.329:90): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.578164][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.586948][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.595748][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.616054][ T3468] hub 2-0:1.0: USB hub found [ 31.620759][ T3468] hub 2-0:1.0: 8 ports detected [ 31.640453][ T3306] veth0_macvtap: entered promiscuous mode [ 31.668473][ T3306] veth1_macvtap: entered promiscuous mode [ 31.716502][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.744087][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.766149][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.775080][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.783865][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792661][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.871010][ T3473] syzkaller0: entered promiscuous mode [ 31.876715][ T3473] syzkaller0: entered allmulticast mode [ 31.896966][ T3483] loop2: detected capacity change from 0 to 1024 [ 31.903954][ T3483] ======================================================= [ 31.903954][ T3483] WARNING: The mand mount option has been deprecated and [ 31.903954][ T3483] and is ignored by this kernel. Remove the mand [ 31.903954][ T3483] option from the mount to silence this warning. [ 31.903954][ T3483] ======================================================= [ 31.974758][ T3483] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.999333][ T3483] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7: Invalid block bitmap block 0 in block_group 0 [ 32.013792][ T3483] EXT4-fs (loop2): Remounting filesystem read-only [ 32.020451][ T3483] EXT4-fs (loop2): 1 orphan inode deleted [ 32.032848][ T3483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.054686][ T3486] loop3: detected capacity change from 0 to 512 [ 32.073175][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.100834][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 32.114164][ T3486] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 32.122503][ T3486] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.130442][ T3486] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.4: corrupted inode contents [ 32.143055][ T3486] EXT4-fs (loop3): Remounting filesystem read-only [ 32.149640][ T3486] EXT4-fs (loop3): 1 truncate cleaned up [ 32.156087][ T293] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.166745][ T293] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.177605][ T293] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 32.188467][ T3486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.202579][ T3486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.284136][ T3498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.380883][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 32.626886][ T3520] netlink: 'syz.0.12': attribute type 8 has an invalid length. [ 32.652704][ T3522] sch_fq: defrate 4294967295 ignored. [ 32.659513][ T3522] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.679228][ T3524] loop1: detected capacity change from 0 to 512 [ 32.683272][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 32.694597][ T3522] bridge_slave_1: left allmulticast mode [ 32.700272][ T3522] bridge_slave_1: left promiscuous mode [ 32.706038][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.714556][ T3522] bridge_slave_0: left allmulticast mode [ 32.714931][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.720271][ T3522] bridge_slave_0: left promiscuous mode [ 32.738066][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.020976][ T3530] ================================================================== [ 33.029124][ T3530] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 33.038593][ T3530] [ 33.040957][ T3530] read-write to 0xffff888107201758 of 4 bytes by task 3527 on cpu 0: [ 33.049049][ T3530] __writeback_single_inode+0x1e3/0x7c0 [ 33.054651][ T3530] writeback_single_inode+0x167/0x3e0 [ 33.060081][ T3530] sync_inode_metadata+0x5b/0x90 [ 33.065075][ T3530] generic_buffers_fsync_noflush+0xd9/0x120 [ 33.071011][ T3530] ext4_sync_file+0x1ab/0x690 [ 33.075748][ T3530] vfs_fsync_range+0x10a/0x130 [ 33.080554][ T3530] ext4_buffered_write_iter+0x34f/0x3c0 [ 33.086157][ T3530] ext4_file_write_iter+0xdbf/0xf00 [ 33.091416][ T3530] iter_file_splice_write+0x5ef/0x970 [ 33.096852][ T3530] direct_splice_actor+0x156/0x2a0 [ 33.102030][ T3530] splice_direct_to_actor+0x312/0x680 [ 33.107465][ T3530] do_splice_direct+0xda/0x150 [ 33.112286][ T3530] do_sendfile+0x380/0x650 [ 33.116748][ T3530] __x64_sys_sendfile64+0x105/0x150 [ 33.122000][ T3530] x64_sys_call+0x2bb0/0x2ff0 [ 33.126730][ T3530] do_syscall_64+0xd2/0x200 [ 33.131292][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.137237][ T3530] [ 33.139589][ T3530] read to 0xffff888107201758 of 4 bytes by task 3530 on cpu 1: [ 33.147173][ T3530] generic_buffers_fsync_noflush+0x80/0x120 [ 33.153120][ T3530] ext4_sync_file+0x1ab/0x690 [ 33.157859][ T3530] vfs_fsync_range+0x10a/0x130 [ 33.162680][ T3530] ext4_buffered_write_iter+0x34f/0x3c0 [ 33.168287][ T3530] ext4_file_write_iter+0x383/0xf00 [ 33.173544][ T3530] iter_file_splice_write+0x5ef/0x970 [ 33.178965][ T3530] direct_splice_actor+0x156/0x2a0 [ 33.184143][ T3530] splice_direct_to_actor+0x312/0x680 [ 33.189577][ T3530] do_splice_direct+0xda/0x150 [ 33.194396][ T3530] do_sendfile+0x380/0x650 [ 33.198953][ T3530] __x64_sys_sendfile64+0x105/0x150 [ 33.204281][ T3530] x64_sys_call+0x2bb0/0x2ff0 [ 33.209008][ T3530] do_syscall_64+0xd2/0x200 [ 33.213573][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.219497][ T3530] [ 33.222029][ T3530] value changed: 0x00000022 -> 0x00000000 [ 33.227777][ T3530] [ 33.230125][ T3530] Reported by Kernel Concurrency Sanitizer on: [ 33.236322][ T3530] CPU: 1 UID: 0 PID: 3530 Comm: syz.1.14 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 33.248259][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.258338][ T3530] ================================================================== [ 33.641003][ T3524] syz.1.14 (3524) used greatest stack depth: 10904 bytes left [ 33.667813][ T3527] syz.1.14 (3527) used greatest stack depth: 9648 bytes left [ 33.676175][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.872314][ T3483] syz.2.7 (3483) used greatest stack depth: 9320 bytes left [ 34.889476][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.