last executing test programs: 2.598950305s ago: executing program 0 (id=1): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB="ec62013386a087ba63ef8d85746b0438975603195cd71343bda36ef5a57b89d152e261e51ec93a97ddc2d7b70103dd5081b7eff41e01029ceec6685e9ea89b90c1f655fe15d774cdc36a9bf6347703ddbef132691e6993c30646e15cad37a9acf9bc37cc538eb77d4cdffb59c098447897f5e1750d08075a577e341d662a573ebdf6c859cba71bdd8f37002cfb2edc3453277f3feaf959134b43d889489b245584e30f9898446b5ad2d6714377dfe981d3c738df553d4fdd0389680ac0b798a1b7e16d637f2088d41b770e6c5c3f2c9485c85cd1183ff34576f79f51c0b9f0784f949be8f6c500af19659bec0128a202ed"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xfffffec7, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x4}}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000200)="330520000a0016000600b34eb67eabe2f3febf306dce92cc8bde1d664d697d8213", 0x21, 0x4001, &(0x7f0000000080)={0x11, 0x4, r7, 0x1, 0xff, 0x6, @local}, 0x14) r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000500)={0x0, 0x4d7f, 0x8000, 0xfffffffd, 0xef}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0x0, 0x1) mlock(&(0x7f0000044000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r9) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r11, 0x8948, &(0x7f00000006c0)="a93a") write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r5, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x13f, 0x4}}, 0x20) 2.522948798s ago: executing program 2 (id=8): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) (fail_nth: 2) 2.522735007s ago: executing program 3 (id=4): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2.522661198s ago: executing program 2 (id=9): r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/state\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2.468431558s ago: executing program 2 (id=10): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9b, 0x40}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x1) pipe(&(0x7f0000000140)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, 0x0, 0x0, 0x6, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370"], 0x0, 0x8e}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000009139f7a3", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x4}, 0x94) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000002804000012000000000000ce3ac6fe00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) 2.446918879s ago: executing program 3 (id=11): r0 = syz_clone(0x880a2600, 0x0, 0x1f, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000140)) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x24000804) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x108000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, 0x0, 0x0, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x22020400) syz_clone(0x80000011, 0x0, 0x20, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x18b7842, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r3 = socket(0x2b, 0x80801, 0x1) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0xd0, 0xd0, 0xffffffff, 0xd0, 0x1a0, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast2, 0xff000000, 0x0, 'macvtap0\x00', 'syz_tun\x00', {}, {}, 0x1, 0x2, 0xb}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x12, @remote, @remote, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@loopback, @loopback, 0xffffffff, 0xffffff00, 'macsec0\x00', 'batadv0\x00', {0xff}, {}, 0x16, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0xa, 0x2, 0x2, 0x2, 0x7, 0x5], 0x0, 0x1}, {0x4, [0x3, 0x4, 0x1, 0x1, 0x6, 0x7], 0x5, 0x7}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x32, 0x2, 0x51}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr=0x64010102, @gre_key=0x9, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x4, 0x4, 0x2, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x3, 0x3, 0x0, 0x5, 0x1], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 2.343254451s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x13, &(0x7f0000000140)={0x3e, 0xc000, 0x80000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x2, 0x8}, @sack_perm, @mss, @window={0x3, 0x7, 0xfff}], 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000020000fddbdf250900000030000380140002006c6f00000000000000000000000000000800030001000000080001000000000008000500ac1414aad1b3690882a45b9f6c4fd0c2f1cf2220e6aed43ac7c54e1513aa9546632ef6267856e97ee3cb5d3486e0d67bc44d49"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = openat(r5, &(0x7f0000000340)='./file1/file0\x00', 0x8840, 0xa2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x4c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @device_b, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x278a0f5c, 0x10}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x50) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040050) 2.150812756s ago: executing program 0 (id=12): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x2, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x1800, @empty}}, 0x80000000, 0x2, 0x0, 0x0, 0x6a0a65d351a03541, 0x7}, 0x9c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0) r2 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r2, 0x2000000008, 0x0) memfd_create(0x0, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c05166b0e20000cb2b1d4e3b36d6"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) 2.029842159s ago: executing program 0 (id=14): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) ioctl$FITRIM(r3, 0x40e8662e, &(0x7f0000000080)={0xc3e2, 0xd000003, 0x7}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @f={0xd6, 0x1, 0x5, 0x2, 0x7, 0xc, 0x8, {0x6}, 0x40, 0x6, 0x40, 0x3}}, 0x11) 1.946897581s ago: executing program 4 (id=15): syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x8, 0x9) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x40, 0xf) syz_emit_ethernet(0xaf, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x5}}, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0xffff9}, {0x100, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x40}], @ipv4=@tcp={{0x5, 0x4, 0x2, 0x6, 0x81, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @private=0xa010100}, {{0x4e21, 0x4e24, r0, r1, 0x1, 0x0, 0x13, 0xc2, 0x0, 0x0, 0x2c33, {[@nop, @md5sig={0x13, 0x12, "27f9b1d1809f808829b05b282165aed3"}, @md5sig={0x13, 0x12, "fb38e837d10aa44e6d876b4071abb4a5"}, @generic={0x22, 0xb, "f081d495a0a3915c46"}, @sack={0x5, 0x6, [0x5]}]}}, {"5856b9e2e2cdac1e864cc853296fb4a15f92854d526baa7225c3f31cf7f2fdaa97"}}}}}}}, &(0x7f0000000340)={0x0, 0x1, [0xa8a, 0x2fe, 0x1b1, 0x6ef]}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x10000000001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008810) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x2, @perf_config_ext={0x800, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0), 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7701006a6f00", @ANYRES8=r1, @ANYBLOB="d944"]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000003c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) 1.867567443s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='nfs4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x10003, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x7ff, 0x12) r3 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) stat(&(0x7f0000000180)='./proc/sys/vm/nr_hugepages\x00', &(0x7f00000003c0)) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r9, 0x8000000) 1.619655309s ago: executing program 1 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) 1.595930161s ago: executing program 1 (id=18): perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x65, 0x1, 0x10, 0x0, 0x0, 0x8, 0xf40e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x48ac}, 0x700, 0x1, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000400)='./file1\x00', 0x1, &(0x7f0000000080)=ANY=[], 0x4, 0x5ab, &(0x7f00000013c0)="$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") (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) (async) unshare(0x24020400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2df, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f0000000d00)=[{&(0x7f0000000000)="e3", 0x1}, {&(0x7f0000000580)="eb", 0x1}], 0x2, 0x1) (async) fcntl$setpipe(r1, 0x407, 0x176) (async) sendmsg$nl_route(r0, 0x0, 0x0) (async) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x9, 0x401d031, r3, 0x0) r4 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x20, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='veth0_to_batadv\x00', 0x7, 0x9, 0x6}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x4040840) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x425, 0xbe4b, 0x0, 0x0, 0x9, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000a80)=""/115, 0x73}], 0x5, 0x5fae, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mlock(&(0x7f0000420000/0x2000)=nil, 0x2000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.342449427s ago: executing program 1 (id=19): r0 = io_uring_setup(0x2d08, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x4, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}, {0x0}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/236, 0xec}], &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff]}, 0x20) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000000000020810000000000feffffffffff07000f"], 0x24}}, 0x0) 1.339919097s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='nfs4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x10003, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x15) stat(&(0x7f0000000180)='./proc/sys/vm/nr_hugepages\x00', &(0x7f00000003c0)) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r7, 0x8000000) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x28) munmap$IORING_OFF_SQ_RING(r8, 0x1) munmap$IORING_OFF_CQ_RING(r8, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 1.107288652s ago: executing program 1 (id=21): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x100002, 0x8, 0x0, 0x5, 0x8000, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xe, 0x1000001, 0x44033, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x8, 0xc, 0x3, 0x40}, {0x800, 0x2, 0x1e, 0xb4}, {0x1, 0x81, 0x7, 0x9}, {0xd3a, 0x3, 0xfa, 0xd}, {0x4000, 0x3, 0x0, 0xffffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 836.479789ms ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000a00)="000002") (fail_nth: 1) 567.514116ms ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) io_pgetevents(r0, 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={r1, r2+60000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d00, &(0x7f0000000a00)="000002") 566.399866ms ago: executing program 3 (id=24): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getresgid(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000040)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) kexec_load(0x4, 0x0, 0x0, 0x1) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000ff0700000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024"], 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00007718000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = getgid() lchown(&(0x7f0000000100)='./file0/file0\x00', r3, r5) 564.047696ms ago: executing program 1 (id=25): r0 = io_uring_setup(0xa88, &(0x7f0000000300)={0x0, 0xf12b, 0x400, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f00000001c0)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x647, @loopback, 0x880}, {0xa, 0xea5, 0xc, @local, 0xc}, r7, 0x6}}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 543.464587ms ago: executing program 4 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) io_setup(0x9, &(0x7f0000000000)=0x0) r3 = eventfd2(0x1, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_submit(r2, 0x4, &(0x7f0000001440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xdb3, 0xffffffffffffffff, &(0x7f00000000c0)="5147869e61569b21aa7cd1a781b6279562f5eebf2af9c91e0c1eee257a0f9da5e9370969fac3e777d53ae7fb9637bd08a7ed8e2ac52e1ef957a5aa7e6b5acc8e763b2f92146a0ad71e6c82", 0x4b, 0x47, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f00000001c0)="1aea013fe18bb92e92d041963247587ebbcd88285880b528faa35a5f55bfe29e720b792819ba44d0177b0a5783a3bbd6263edc13ec80c95998a1f101c863dbd4f2cc93f94db212b9ae190a66f7167b3eb2ea177d002d7911ceaee7098a81d81a8fc12a3db43ab2e4e00b908ad8abb67e27fcb3eb8b6964ae1f94933396db050cf4078726ef3a0e9fab3f1936958dc39131dfef5f7c28c24fb594e404c356f3ac30", 0xa1, 0x2, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f00000002c0)="467ee176b467511218a7ae6dbf81bd6f3312d2", 0x13, 0xa, 0x0, 0x1, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000003c0)="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", 0x1000, 0x2, 0x0, 0x0, r7}]) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 377.276531ms ago: executing program 2 (id=27): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0) mlock(&(0x7f000034c000/0x3000)=nil, 0x3000) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00008b2000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000140)=0x2, 0x44, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x39}, 0x11}, 0x1c) 0s ago: executing program 3 (id=28): r0 = io_uring_setup(0xa88, &(0x7f0000000300)={0x0, 0xf12b, 0x400, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f00000001c0)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x647, @loopback, 0x880}, {0xa, 0xea5, 0xc, @local, 0xc}, r7, 0x6}}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 29.003440][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.003456][ T29] audit: type=1400 audit(1791401908.470:117): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.003652][ T29] audit: type=1400 audit(1791401908.470:118): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.004112][ T3288] cgroup: Unknown subsys name 'net' [ 29.004328][ T29] audit: type=1400 audit(1791401908.470:119): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.121540][ T3288] cgroup: Unknown subsys name 'cpuset' [ 29.122087][ T3288] cgroup: Unknown subsys name 'rlimit' [ 29.226544][ T29] audit: type=1400 audit(1791401908.690:120): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.227554][ T29] audit: type=1400 audit(1791401908.690:121): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.227707][ T29] audit: type=1400 audit(1791401908.690:122): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.227915][ T29] audit: type=1400 audit(1791401908.690:123): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.232782][ T29] audit: type=1400 audit(1791401908.700:124): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.232812][ T29] audit: type=1400 audit(1791401908.700:125): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.290213][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.290431][ T29] audit: type=1400 audit(1791401908.750:126): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.399911][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.688233][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.688264][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.688340][ T3299] bridge_slave_0: entered allmulticast mode [ 30.688834][ T3299] bridge_slave_0: entered promiscuous mode [ 30.717915][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.717943][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.717996][ T3299] bridge_slave_1: entered allmulticast mode [ 30.718336][ T3299] bridge_slave_1: entered promiscuous mode [ 30.787415][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.787444][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.787540][ T3304] bridge_slave_0: entered allmulticast mode [ 30.788122][ T3304] bridge_slave_0: entered promiscuous mode [ 30.801310][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.801358][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.801419][ T3305] bridge_slave_0: entered allmulticast mode [ 30.801934][ T3305] bridge_slave_0: entered promiscuous mode [ 30.803164][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.803214][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.803325][ T3305] bridge_slave_1: entered allmulticast mode [ 30.803874][ T3305] bridge_slave_1: entered promiscuous mode [ 30.807732][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.812548][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.812577][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.812656][ T3304] bridge_slave_1: entered allmulticast mode [ 30.813048][ T3304] bridge_slave_1: entered promiscuous mode [ 30.824393][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.825323][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.852848][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.866696][ T3304] team0: Port device team_slave_0 added [ 30.891843][ T3304] team0: Port device team_slave_1 added [ 30.897394][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.898203][ T3299] team0: Port device team_slave_0 added [ 30.907632][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.913049][ T3299] team0: Port device team_slave_1 added [ 30.923339][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.923353][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.923433][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.938072][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.938092][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.938147][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.948509][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.948542][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.948677][ T3306] bridge_slave_0: entered allmulticast mode [ 30.949213][ T3306] bridge_slave_0: entered promiscuous mode [ 30.953396][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.953410][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.953438][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.953977][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.953987][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.954034][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.957878][ T3305] team0: Port device team_slave_0 added [ 30.958980][ T3305] team0: Port device team_slave_1 added [ 30.959178][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.959207][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.959334][ T3306] bridge_slave_1: entered allmulticast mode [ 30.959790][ T3306] bridge_slave_1: entered promiscuous mode [ 30.997304][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.998621][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.013843][ T3304] hsr_slave_0: entered promiscuous mode [ 31.014298][ T3304] hsr_slave_1: entered promiscuous mode [ 31.025621][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.025636][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.025663][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.026418][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.026435][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.026460][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.032197][ T3299] hsr_slave_0: entered promiscuous mode [ 31.032969][ T3299] hsr_slave_1: entered promiscuous mode [ 31.033373][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 31.033386][ T3299] Cannot create hsr debugfs directory [ 31.091269][ T3306] team0: Port device team_slave_0 added [ 31.093779][ T3306] team0: Port device team_slave_1 added [ 31.101436][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.101467][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.101516][ T3300] bridge_slave_0: entered allmulticast mode [ 31.102077][ T3300] bridge_slave_0: entered promiscuous mode [ 31.122067][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.122101][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.122152][ T3300] bridge_slave_1: entered allmulticast mode [ 31.122723][ T3300] bridge_slave_1: entered promiscuous mode [ 31.128592][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.128607][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.128634][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.143737][ T3305] hsr_slave_0: entered promiscuous mode [ 31.144135][ T3305] hsr_slave_1: entered promiscuous mode [ 31.144368][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.144381][ T3305] Cannot create hsr debugfs directory [ 31.144725][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.144735][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.144764][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.171075][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.187525][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.270311][ T3306] hsr_slave_0: entered promiscuous mode [ 31.270668][ T3306] hsr_slave_1: entered promiscuous mode [ 31.271281][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.271293][ T3306] Cannot create hsr debugfs directory [ 31.277923][ T3300] team0: Port device team_slave_0 added [ 31.287632][ T3300] team0: Port device team_slave_1 added [ 31.304775][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.304790][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.304857][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.311128][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.311141][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.311169][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.339198][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.344430][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.364041][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.368188][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.370850][ T3300] hsr_slave_0: entered promiscuous mode [ 31.371293][ T3300] hsr_slave_1: entered promiscuous mode [ 31.371558][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.371571][ T3300] Cannot create hsr debugfs directory [ 31.384204][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.387773][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.393777][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.400571][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.416934][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.420636][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.433664][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.452974][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.465344][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.468891][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.478824][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.484862][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.487008][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.492023][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.504278][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.518209][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.533915][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.537328][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.542982][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.543013][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.543176][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.543201][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.565680][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.568983][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.587864][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.587901][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.587973][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.588077][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.621487][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.621521][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.621634][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.621659][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.643111][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.656516][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.670891][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.679084][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.685758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.698360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.703868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.709747][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.723626][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.848887][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.854827][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.967314][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.967974][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.974360][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.977412][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.984308][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.988509][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.992446][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.992477][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.993799][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.002904][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.008523][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.016449][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.018885][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.018915][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.021046][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.024362][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.033434][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.033464][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.034737][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.036957][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.047606][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.047660][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.050651][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.051301][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.056987][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.070163][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070196][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.088927][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.088961][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.227285][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.238847][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.250561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.250602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.267468][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.267498][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.322274][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.339929][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.353803][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.353833][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.366659][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.366697][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.441605][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.449935][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.513526][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.581244][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.604417][ T3299] veth0_vlan: entered promiscuous mode [ 32.609484][ T3299] veth1_vlan: entered promiscuous mode [ 32.623651][ T3299] veth0_macvtap: entered promiscuous mode [ 32.626576][ T3299] veth1_macvtap: entered promiscuous mode [ 32.651051][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.653801][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.654840][ T3304] veth0_vlan: entered promiscuous mode [ 32.656832][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.661653][ T3304] veth1_vlan: entered promiscuous mode [ 32.711038][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711135][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711255][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711448][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.720600][ T3304] veth0_macvtap: entered promiscuous mode [ 32.735428][ T3304] veth1_macvtap: entered promiscuous mode [ 32.783793][ T3305] veth0_vlan: entered promiscuous mode [ 32.786588][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.805182][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.808160][ T3305] veth1_vlan: entered promiscuous mode [ 32.827556][ T3299] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.851161][ T364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.876698][ T3306] veth0_vlan: entered promiscuous mode [ 32.881235][ T364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.881349][ T364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.908415][ T3305] veth0_macvtap: entered promiscuous mode [ 32.919466][ T3305] veth1_macvtap: entered promiscuous mode [ 32.927017][ T3306] veth1_vlan: entered promiscuous mode [ 32.936267][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.944995][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.951591][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.963888][ T3306] veth0_macvtap: entered promiscuous mode [ 32.976422][ T3306] veth1_macvtap: entered promiscuous mode [ 33.010275][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.021719][ T313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.023012][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.048183][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048220][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048330][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048374][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048406][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048624][ T364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052506][ T364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.094612][ T3513] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 33.094760][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.122868][ T3300] veth0_vlan: entered promiscuous mode [ 33.145388][ T3300] veth1_vlan: entered promiscuous mode [ 33.163213][ T3504] syz.1.6 (3504) used greatest stack depth: 11080 bytes left [ 33.179476][ T3300] veth0_macvtap: entered promiscuous mode [ 33.187120][ T3300] veth1_macvtap: entered promiscuous mode [ 33.198064][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.209633][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.231764][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.231940][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232300][ T3530] FAULT_INJECTION: forcing a failure. [ 33.232300][ T3530] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.232330][ T3530] CPU: 0 UID: 0 PID: 3530 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.232399][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.232418][ T3530] Call Trace: [ 33.232423][ T3530] [ 33.232430][ T3530] __dump_stack+0x1d/0x30 [ 33.232456][ T3530] dump_stack_lvl+0x95/0xd0 [ 33.232477][ T3530] dump_stack+0x15/0x1b [ 33.232547][ T3530] should_fail_ex+0x262/0x280 [ 33.232571][ T3530] ? __pfx_ucma_get_event+0x10/0x10 [ 33.232595][ T3530] should_fail+0xb/0x20 [ 33.232618][ T3530] should_fail_usercopy+0x1a/0x20 [ 33.232677][ T3530] _copy_from_user+0x1c/0xb0 [ 33.232758][ T3530] ucma_get_event+0x77/0x3d0 [ 33.232782][ T3530] ? should_fail_ex+0xdb/0x280 [ 33.232806][ T3530] ? __pfx_ucma_get_event+0x10/0x10 [ 33.232830][ T3530] ucma_write+0x1c9/0x260 [ 33.232935][ T3530] ? __pfx_ucma_write+0x10/0x10 [ 33.232954][ T3530] vfs_write+0x254/0x9a0 [ 33.232988][ T3530] ? __fget_files+0x184/0x1c0 [ 33.233018][ T3530] ksys_write+0xdc/0x1a0 [ 33.233108][ T3530] __x64_sys_write+0x40/0x50 [ 33.233143][ T3530] x64_sys_call+0x154e/0x2550 [ 33.233293][ T3530] do_syscall_64+0x112/0x360 [ 33.233321][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.233354][ T3530] RIP: 0033:0x7f8897dfe199 [ 33.233460][ T3530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.233479][ T3530] RSP: 002b:00007f8896857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.233497][ T3530] RAX: ffffffffffffffda RBX: 00007f8898085fa0 RCX: 00007f8897dfe199 [ 33.233511][ T3530] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 33.233525][ T3530] RBP: 00007f8896857090 R08: 0000000000000000 R09: 0000000000000000 [ 33.233538][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.233615][ T3530] R13: 00007f8898086038 R14: 00007f8898085fa0 R15: 00007ffe4faf5478 [ 33.233635][ T3530] [ 33.250276][ T3526] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 33.282657][ T3536] Zero length message leads to an empty skb [ 33.422474][ T3435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423698][ T3435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.433531][ T3540] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 33.470691][ T3540] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 33.556991][ T3540] loop2: detected capacity change from 0 to 512 [ 33.605362][ T3547] loop4: detected capacity change from 0 to 128 [ 33.607385][ T3547] ======================================================= [ 33.607385][ T3547] WARNING: The mand mount option has been deprecated and [ 33.607385][ T3547] and is ignored by this kernel. Remove the mand [ 33.607385][ T3547] option from the mount to silence this warning. [ 33.607385][ T3547] ======================================================= [ 33.620487][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.621618][ T3540] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.653747][ T3547] FAT-fs (loop4): bogus number of FAT structure [ 33.653763][ T3547] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 33.653780][ T3547] FAT-fs (loop4): Can't find a valid FAT filesystem [ 33.749779][ T3552] syz.0.12 (3552) used greatest stack depth: 10752 bytes left [ 33.783927][ T3562] loop0: detected capacity change from 0 to 512 [ 33.801680][ T3562] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.14: bg 0: block 5: invalid block bitmap [ 33.801713][ T3562] loop0: lost filesystem error report for type 5 error -117 [ 33.801958][ T3562] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 33.801978][ T3562] loop0: lost filesystem error report for type 5 error -117 [ 33.802174][ T3562] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.14: invalid indirect mapped block 3 (level 2) [ 33.802203][ T3562] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.802390][ T3562] EXT4-fs (loop0): 1 orphan inode deleted [ 33.802406][ T3562] EXT4-fs (loop0): 1 truncate cleaned up [ 33.802914][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.865328][ T3569] 9p: Bad value for 'rfdno' [ 34.018531][ T3560] loop1: detected capacity change from 0 to 512 [ 34.065242][ T3560] EXT4-fs: quotafile must be on filesystem root [ 34.235728][ T3576] loop1: detected capacity change from 0 to 2048 [ 34.251082][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 34.251098][ T29] audit: type=1400 audit(1791401913.680:207): avc: denied { wake_alarm } for pid=3575 comm="syz.1.18" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.251118][ T29] audit: type=1400 audit(1791401913.680:208): avc: denied { create } for pid=3575 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.307947][ T29] audit: type=1400 audit(1791401913.770:209): avc: denied { mounton } for pid=3575 comm="syz.1.18" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.417903][ T3584] netlink: 'syz.1.19': attribute type 15 has an invalid length. [ 34.538258][ T29] audit: type=1400 audit(1791401914.000:210): avc: denied { execute } for pid=3586 comm="syz.1.20" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.538827][ T29] audit: type=1400 audit(1791401914.000:211): avc: denied { ioctl } for pid=3586 comm="syz.1.20" path="socket:[5177]" dev="sockfs" ino=5177 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.667917][ T29] audit: type=1400 audit(1791401914.130:212): avc: denied { read } for pid=3590 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.668021][ T29] audit: type=1400 audit(1791401914.130:213): avc: denied { read open } for pid=3590 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.668120][ T29] audit: type=1400 audit(1791401914.130:214): avc: denied { getattr } for pid=3590 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.848518][ T29] audit: type=1400 audit(1791401914.310:215): avc: denied { write } for pid=3589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.848581][ T29] audit: type=1400 audit(1791401914.310:216): avc: denied { add_name } for pid=3589 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.942119][ T3540] syz.2.10 (3540) used greatest stack depth: 10504 bytes left [ 35.136920][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.173740][ T3611] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 35.258368][ T3617] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 35.364899][ T3621] loop3: detected capacity change from 0 to 512 [ 35.380520][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.380663][ T3621] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.388536][ T3632] vlan2: entered allmulticast mode [ 35.388555][ T3632] bond0: entered allmulticast mode [ 35.388650][ T3632] bond_slave_0: entered allmulticast mode [ 35.388665][ T3632] bond_slave_1: entered allmulticast mode [ 35.433809][ T3640] coredump: 19(syz.2.27): Core dump to core aborted: cannot preserve file permissions [ 35.517072][ T3621] ext4: Unknown parameter 'mpol' [ 35.701217][ T42] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.701336][ T42] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.701372][ T42] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.701450][ T42] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.773956][ T3621] syz.3.24 (3621) used greatest stack depth: 10080 bytes left [ 35.775842][ T3306] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.776043][ T3306] EXT4-fs (loop3): Remounting filesystem read-only [ 35.778236][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.794521][ T313] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.794546][ T313] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.794568][ T313] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.897332][ T3629] loop1: detected capacity change from 0 to 512 [ 35.899622][ T2984] ================================================================== [ 35.899657][ T2984] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 35.899702][ T2984] [ 35.899708][ T2984] write to 0xffff88810061bb70 of 8 bytes by task 3292 on cpu 1: [ 35.899726][ T2984] dentry_unlink_inode+0x65/0x260 [ 35.899757][ T2984] d_delete+0x164/0x180 [ 35.899784][ T2984] d_delete_notify+0x32/0x100 [ 35.899800][ T2984] vfs_unlink+0x287/0x490 [ 35.899816][ T2984] filename_unlinkat+0x1dc/0x410 [ 35.899833][ T2984] __se_sys_unlink+0x2b/0xe0 [ 35.899851][ T2984] __x64_sys_unlink+0x1f/0x30 [ 35.899870][ T2984] x64_sys_call+0x18ee/0x2550 [ 35.899897][ T2984] do_syscall_64+0x112/0x360 [ 35.899921][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.899949][ T2984] [ 35.899954][ T2984] read to 0xffff88810061bb70 of 8 bytes by task 2984 on cpu 0: [ 35.899968][ T2984] step_into_slowpath+0x12c/0x4c0 [ 35.899995][ T2984] path_lookupat+0x2eb/0x4c0 [ 35.900020][ T2984] filename_lookup+0x18f/0x390 [ 35.900047][ T2984] do_readlinkat+0x74/0x2f0 [ 35.900074][ T2984] __x64_sys_readlink+0x47/0x60 [ 35.900099][ T2984] x64_sys_call+0x1d41/0x2550 [ 35.900124][ T2984] do_syscall_64+0x112/0x360 [ 35.900144][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.900163][ T2984] [ 35.900167][ T2984] value changed: 0xffff88811b877998 -> 0x0000000000000000 [ 35.900178][ T2984] [ 35.900181][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 35.900191][ T2984] CPU: 0 UID: 0 PID: 2984 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 35.900214][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.900226][ T2984] ================================================================== [ 36.042655][ T3659] coredump: 21(syz.2.27): Core dump to core aborted: cannot preserve file permissions [ 36.086399][ T3629] EXT4-fs: quotafile must be on filesystem root [ 36.245245][ T3657] loop3: detected capacity change from 0 to 512 [ 36.276642][ T3657] EXT4-fs: quotafile must be on filesystem root [ 36.770394][ T3562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.787301][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.