last executing test programs: 9.082440798s ago: executing program 1 (id=14): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@noinit_itable}, {@acl}, {@bsdgroups}]}, 0x0, 0x48a, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 7.794225283s ago: executing program 1 (id=21): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) 5.460095119s ago: executing program 1 (id=33): creat(&(0x7f0000000100)='./bus\x00', 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 4.830531496s ago: executing program 0 (id=38): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 4.723266507s ago: executing program 4 (id=40): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 3.836215917s ago: executing program 4 (id=43): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 3.681330088s ago: executing program 2 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 3.612305589s ago: executing program 1 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x1, '\x00', [@generic={0xf}, @ra, @generic]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "2dc9c01da586ff0b"}}}}, &(0x7f0000000240)={0x0, 0x4, [0x8da, 0x376, 0x9c3, 0xef6]}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000005c0)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/26, 0x1a}, 0x800}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213, 0xd5}, {&(0x7f0000001e40)=""/2, 0x2}], 0x2, &(0x7f0000001ec0)}, 0x3}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001640)=""/125, 0x7d}, {&(0x7f00000014c0)=""/101, 0x65}], 0x4}}], 0x3, 0x40000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.438621102s ago: executing program 0 (id=47): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 3.361482222s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/53, 0x35) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000240)={0x9, 0x2, 0x5de, 0x6, 0x2, "bff1183f468121f15957dde428100ebe8e7122"}) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xa}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4048084) syz_usb_connect$uac3(0x3, 0x89, &(0x7f0000001f40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x34, 0xd0, 0x1, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x13, 0x5f2}, [@processing_unit={0x9, 0x24, 0x9, 0x2, 0x3, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x6, 0x3, {0xa, 0x25, 0x25, 0x4c0, 0x7, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x8, {0xa, 0x25, 0x25, 0xffffffc0, 0x8, 0x8}}}}}}}}]}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000100)={0x8, 0x2b29}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 3.130485295s ago: executing program 3 (id=52): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7fff, 0x80, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x402, 0x7, 0x3, 0x4, 0x4, 0x3, 0x3f1, 0x0, 0x8, 0x0, 0x51}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6ebfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.959997297s ago: executing program 3 (id=53): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7fff, 0x80, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x402, 0x7, 0x3, 0x4, 0x4, 0x3, 0x3f1, 0x0, 0x8, 0x0, 0x51}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6ebfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.798538629s ago: executing program 4 (id=54): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2.776556049s ago: executing program 3 (id=55): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.598250001s ago: executing program 2 (id=56): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) set_mempolicy(0x3, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 2.497701012s ago: executing program 0 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3ff}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.398009343s ago: executing program 0 (id=58): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 1.927185078s ago: executing program 4 (id=59): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}}}}}}, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9fd1bf1b9e7835e5bc3c3d9ab54cc2d16ef0d42a7fb75eb3f1a9dd19067bdf499e02fd4457541d3311e", @ANYBLOB="fb7fa670bdee", @ANYBLOB="0096d7bee69605fbbd656c7b6f1d42351e3c7d1ce6d6d95720566ec6565f64e99afdacb99666f2851764cc7d7cf72e975ff5bd40b7b97cd4709b78223a69764ad2242a3351a3095f5661d303b8038e92317c75b9ff537674f2c3d457f5fd0aac50398c45eea3a6ce78397f46ae3274b8d9f61c1e0a6adff0ac5ddfe1d93e759ec783a182cb43f642583023a2b47a23c049bfacd1bae4bb02d405476ebed12c58a058afe270779ffe991a17d407b1021d29c6c0c4af7248fa79563558f30070f33626f2ecc28747b0839f6fe13fef7e1fdff15da09c52f1ff330c6525811ab6aa5fd160eb13e3e0d5", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="e308bcef0cf706767687d83f1bf4cbfe71a6e02e6e756303dc1ed91a0e4795097a8d3560e966334d80f2c4c776e0d50c75146f24c8c94536ff2cd2a2c452a255296fbbf00cdbdc8d63afb2"], &(0x7f00000001c0)='syzkaller\x00', 0x5536, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendto$inet(r4, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) 1.889210679s ago: executing program 3 (id=60): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.502725063s ago: executing program 2 (id=61): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) tee(r1, r2, 0x1fc, 0x0) 1.452110184s ago: executing program 0 (id=62): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) set_mempolicy(0x3, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 983.277239ms ago: executing program 4 (id=63): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x20000000) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x2, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0xa, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRES8], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f0000000240)="a7c842d2420fc518bfa67b864461d3dd946d67bdd729b8b40522d17fb9eabb3ed5e70e8ed2107cdd3720659dda4b566978a4daa78c6233ec5aaef0a522d45b05e01bdff27f955d353e0286badc36795023c2806a38c948e1166dcbe3397e4cd9483e2992bd50b50a897f95701e92ae796ce0", &(0x7f0000000380)=""/62, 0x4}, 0x20) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4) 829.994311ms ago: executing program 3 (id=64): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 537.329584ms ago: executing program 2 (id=65): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/71, 0x47) rmdir(&(0x7f00000002c0)='./control\x00') 481.457704ms ago: executing program 3 (id=66): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 372.166596ms ago: executing program 2 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x24048844) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000340)="448b7cff0000000000", 0x9}, {&(0x7f0000000100)="301ed9f9a338ef93", 0x8}, {&(0x7f0000000180)="dd4eccbd98c039", 0x7}], 0x4) 351.480896ms ago: executing program 0 (id=68): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f0000001d80)='ns/mnt\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 323.017366ms ago: executing program 1 (id=69): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) set_mempolicy(0x3, 0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 103.107879ms ago: executing program 4 (id=70): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r2, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') 0s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x24048844) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000340)="448b7cff00", 0x5}, {&(0x7f0000000100)="301ed9f9a338ef93", 0x8}, {&(0x7f0000000180)="dd4eccbd98c039", 0x7}], 0x4) kernel console output (not intermixed with test programs): [ 24.589565][ T28] audit: type=1400 audit(1778535747.978:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.612351][ T28] audit: type=1400 audit(1778535747.978:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.635162][ T28] audit: type=1400 audit(1778535747.978:105): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.658284][ T28] audit: type=1400 audit(1778535747.978:106): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.681487][ T28] audit: type=1400 audit(1778535747.978:107): avc: denied { read } for pid=3181 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.704604][ T28] audit: type=1400 audit(1778535747.978:108): avc: denied { read open } for pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.730038][ T28] audit: type=1400 audit(1778535747.978:109): avc: denied { getattr } for pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.755325][ T28] audit: type=1400 audit(1778535748.118:110): avc: denied { write } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.778885][ T28] audit: type=1400 audit(1778535748.118:111): avc: denied { add_name } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.801659][ T28] audit: type=1400 audit(1778535748.168:112): avc: denied { write } for pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 30.824047][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 30.824065][ T28] audit: type=1400 audit(1778535754.208:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.853379][ T28] audit: type=1400 audit(1778535754.238:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.855821][ T3285] cgroup: Unknown subsys name 'net' [ 30.881531][ T28] audit: type=1400 audit(1778535754.268:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.978770][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.985200][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.077763][ T28] audit: type=1400 audit(1778535754.458:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.116924][ T28] audit: type=1400 audit(1778535754.468:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.133422][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.139158][ T28] audit: type=1400 audit(1778535754.468:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.167695][ T28] audit: type=1400 audit(1778535754.468:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.188493][ T28] audit: type=1400 audit(1778535754.478:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.213547][ T28] audit: type=1400 audit(1778535754.478:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.237532][ T28] audit: type=1400 audit(1778535754.488:135): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.271417][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.688341][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.695591][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.702947][ T3298] bridge_slave_0: entered allmulticast mode [ 32.709603][ T3298] bridge_slave_0: entered promiscuous mode [ 32.732493][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.739653][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.746822][ T3298] bridge_slave_1: entered allmulticast mode [ 32.753336][ T3298] bridge_slave_1: entered promiscuous mode [ 32.771414][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.778614][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.785754][ T3299] bridge_slave_0: entered allmulticast mode [ 32.792363][ T3299] bridge_slave_0: entered promiscuous mode [ 32.808143][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.815284][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.822546][ T3303] bridge_slave_0: entered allmulticast mode [ 32.829125][ T3303] bridge_slave_0: entered promiscuous mode [ 32.840145][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.847221][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.854390][ T3299] bridge_slave_1: entered allmulticast mode [ 32.860878][ T3299] bridge_slave_1: entered promiscuous mode [ 32.875143][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.882333][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.889588][ T3303] bridge_slave_1: entered allmulticast mode [ 32.896097][ T3303] bridge_slave_1: entered promiscuous mode [ 32.913270][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.937837][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.957306][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.967917][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.987049][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.013728][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.038144][ T3298] team0: Port device team_slave_0 added [ 33.044046][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.051256][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.058523][ T3306] bridge_slave_0: entered allmulticast mode [ 33.065006][ T3306] bridge_slave_0: entered promiscuous mode [ 33.081152][ T3299] team0: Port device team_slave_0 added [ 33.087786][ T3298] team0: Port device team_slave_1 added [ 33.098441][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.105733][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.112906][ T3306] bridge_slave_1: entered allmulticast mode [ 33.119401][ T3306] bridge_slave_1: entered promiscuous mode [ 33.126664][ T3303] team0: Port device team_slave_0 added [ 33.133295][ T3303] team0: Port device team_slave_1 added [ 33.139153][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.146318][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.153520][ T3304] bridge_slave_0: entered allmulticast mode [ 33.160256][ T3304] bridge_slave_0: entered promiscuous mode [ 33.167467][ T3299] team0: Port device team_slave_1 added [ 33.186877][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.194020][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.201301][ T3304] bridge_slave_1: entered allmulticast mode [ 33.207968][ T3304] bridge_slave_1: entered promiscuous mode [ 33.219359][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.226370][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.252433][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.281903][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.288974][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.315052][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.327313][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.336737][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.343859][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.369815][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.385617][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.392641][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.418874][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.433710][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.443112][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.450171][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.476363][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.488491][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.498048][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.505027][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.531092][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.557993][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.580781][ T3306] team0: Port device team_slave_0 added [ 33.596781][ T3304] team0: Port device team_slave_0 added [ 33.621245][ T3306] team0: Port device team_slave_1 added [ 33.634639][ T3298] hsr_slave_0: entered promiscuous mode [ 33.641193][ T3298] hsr_slave_1: entered promiscuous mode [ 33.647998][ T3304] team0: Port device team_slave_1 added [ 33.661036][ T3299] hsr_slave_0: entered promiscuous mode [ 33.667217][ T3299] hsr_slave_1: entered promiscuous mode [ 33.673191][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.678954][ T3299] Cannot create hsr debugfs directory [ 33.694363][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.701370][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.727891][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.750517][ T3303] hsr_slave_0: entered promiscuous mode [ 33.756654][ T3303] hsr_slave_1: entered promiscuous mode [ 33.762752][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.768579][ T3303] Cannot create hsr debugfs directory [ 33.774849][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.781922][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.808138][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.819456][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.826476][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.852432][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.881879][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.889209][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.915213][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.949533][ T3306] hsr_slave_0: entered promiscuous mode [ 33.955597][ T3306] hsr_slave_1: entered promiscuous mode [ 33.961647][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 33.967403][ T3306] Cannot create hsr debugfs directory [ 34.020367][ T3304] hsr_slave_0: entered promiscuous mode [ 34.026752][ T3304] hsr_slave_1: entered promiscuous mode [ 34.033069][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.039098][ T3304] Cannot create hsr debugfs directory [ 34.205038][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.213404][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.221414][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.230161][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.238234][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.247188][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.257870][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.266849][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.289764][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.300189][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.308260][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.317163][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.325245][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.333942][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.342442][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.351232][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.390141][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.399063][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.406887][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.416719][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.426654][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.435862][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.444051][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.452916][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.496016][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.506135][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.515609][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.524404][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.533302][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.542015][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.550877][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.558802][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.567899][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.592364][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.621836][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.628990][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.638207][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.647185][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.655033][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.663823][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.671762][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.680526][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.688901][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.697316][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.712322][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.719406][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.755403][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.767489][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.802962][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.810693][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.829992][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.838216][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.845332][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.854417][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.861518][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.877224][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.884376][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.893504][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.900626][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.928879][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.952784][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.959902][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.972602][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.988835][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.001053][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.008151][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.038194][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.058580][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.065756][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.085698][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.092844][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.162334][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.305735][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.390784][ T3303] veth0_vlan: entered promiscuous mode [ 35.405170][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.418045][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.435280][ T3303] veth1_vlan: entered promiscuous mode [ 35.448370][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.502813][ T3299] veth0_vlan: entered promiscuous mode [ 35.513976][ T3303] veth0_macvtap: entered promiscuous mode [ 35.525380][ T3303] veth1_macvtap: entered promiscuous mode [ 35.539844][ T3299] veth1_vlan: entered promiscuous mode [ 35.555913][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.589418][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.608500][ T3299] veth0_macvtap: entered promiscuous mode [ 35.635192][ T3299] veth1_macvtap: entered promiscuous mode [ 35.642552][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.651892][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.670762][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.679732][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.688800][ T3306] veth0_vlan: entered promiscuous mode [ 35.701550][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.717098][ T3306] veth1_vlan: entered promiscuous mode [ 35.727558][ T3298] veth0_vlan: entered promiscuous mode [ 35.735032][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.757385][ T3298] veth1_vlan: entered promiscuous mode [ 35.767882][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.776897][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.795067][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.805763][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.825775][ T3306] veth0_macvtap: entered promiscuous mode [ 35.843009][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.853361][ T3306] veth1_macvtap: entered promiscuous mode [ 35.871062][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 35.871080][ T28] audit: type=1400 audit(1778535759.258:155): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.917067][ T28] audit: type=1400 audit(1778535759.258:156): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.941472][ T28] audit: type=1400 audit(1778535759.258:157): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.977251][ T3503] syzkaller0: entered promiscuous mode [ 35.977961][ T28] audit: type=1400 audit(1778535759.358:158): avc: denied { create } for pid=3502 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.985488][ T3503] syzkaller0: entered allmulticast mode [ 36.009748][ T3304] veth0_vlan: entered promiscuous mode [ 36.018413][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.029625][ T3298] veth0_macvtap: entered promiscuous mode [ 36.042673][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.053044][ T3304] veth1_vlan: entered promiscuous mode [ 36.053884][ T28] audit: type=1400 audit(1778535759.438:159): avc: denied { prog_load } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.083963][ T3298] veth1_macvtap: entered promiscuous mode [ 36.090007][ T28] audit: type=1400 audit(1778535759.438:160): avc: denied { bpf } for pid=3506 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.092971][ T307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.111718][ T28] audit: type=1400 audit(1778535759.468:161): avc: denied { setopt } for pid=3502 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.120960][ T307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.147823][ T28] audit: type=1400 audit(1778535759.468:162): avc: denied { write } for pid=3502 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.168351][ T28] audit: type=1400 audit(1778535759.468:163): avc: denied { open } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.187758][ T28] audit: type=1400 audit(1778535759.468:164): avc: denied { perfmon } for pid=3506 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.421856][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.429578][ T307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.439264][ T307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.453625][ T3304] veth0_macvtap: entered promiscuous mode [ 36.465256][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.509104][ T3304] veth1_macvtap: entered promiscuous mode [ 36.515878][ T410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.526297][ T410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.540714][ T410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.641187][ T3513] hub 8-0:1.0: USB hub found [ 36.645995][ T3513] hub 8-0:1.0: 8 ports detected [ 37.107025][ T410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.126165][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.138004][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.157937][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.167235][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.239848][ T3522] hub 8-0:1.0: USB hub found [ 37.244805][ T3522] hub 8-0:1.0: 8 ports detected [ 37.556670][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.745026][ T3521] syzkaller0: entered promiscuous mode [ 37.750699][ T3521] syzkaller0: entered allmulticast mode [ 37.787299][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.804946][ T3529] syzkaller0: entered promiscuous mode [ 37.810565][ T3529] syzkaller0: entered allmulticast mode [ 38.463540][ T3550] Zero length message leads to an empty skb [ 38.500875][ T3550] loop0: detected capacity change from 0 to 1024 [ 38.509959][ T3550] ======================================================= [ 38.509959][ T3550] WARNING: The mand mount option has been deprecated and [ 38.509959][ T3550] and is ignored by this kernel. Remove the mand [ 38.509959][ T3550] option from the mount to silence this warning. [ 38.509959][ T3550] ======================================================= [ 38.565219][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.579204][ T3550] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.599292][ T3550] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.12: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.614320][ T3550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 38.628813][ T3550] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.628813][ T3550] [ 38.688554][ T3550] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.12: Freeing blocks not in datazone - block = 3, count = 1 [ 38.705455][ T3550] syz.0.12 (3550) used greatest stack depth: 9600 bytes left [ 38.726492][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 38.738405][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.878886][ T3559] loop1: detected capacity change from 0 to 512 [ 38.913409][ T3559] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #11: block 327694: comm syz.1.14: lblock 0 mapped to illegal pblock 327694 (length 1) [ 38.942568][ T3559] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.947655][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.950257][ T3565] loop0: detected capacity change from 0 to 512 [ 38.956863][ C0] EXT4-fs (loop1): initial error at time 1778535762: ext4_map_blocks:791: inode 11: block 327694 [ 38.980271][ C0] EXT4-fs (loop1): last error at time 1778535762: ext4_map_blocks:791: inode 11: block 327694 [ 38.998450][ T3559] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.011902][ T3559] ------------[ cut here ]------------ [ 39.017419][ T3559] EA inode 11 i_nlink=2 [ 39.017449][ T3559] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.14/3559 [ 39.032514][ T3559] Modules linked in: [ 39.036477][ T3559] CPU: 0 UID: 0 PID: 3559 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 39.045666][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 39.048179][ T3565] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #11: block 327694: comm syz.0.16: lblock 0 mapped to illegal pblock 327694 (length 1) [ 39.055906][ T3559] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 39.077096][ T3559] Code: 04 5f 98 ff 4c 8d 2d 7d 6c 5c 05 49 8d 7e 40 e8 84 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d5 d7 03 66 66 66 66 66 66 2e [ 39.077920][ T3565] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.096774][ T3559] RSP: 0018:ffffc900018cf778 EFLAGS: 00010246 [ 39.097867][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 39.106041][ T3559] [ 39.112048][ C1] EXT4-fs (loop0): initial error at time 1778535762: ext4_map_blocks:791 [ 39.118611][ T3559] RAX: ffff8881046d4f00 RBX: ffff888107b25618 RCX: ffffffff81c0d228 [ 39.120857][ C1] : inode 11: block 327694 [ 39.120892][ C1] EXT4-fs (loop0): last error at time 1778535762: ext4_map_blocks:791: inode 11: block 327694 [ 39.125106][ T3565] EXT4-fs (loop0): 1 orphan inode deleted [ 39.129460][ T3559] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3e90 [ 39.129480][ T3559] RBP: 000000000000000b R08: 0001888107b255cb R09: 0000000000000000 [ 39.129497][ T3559] R10: ffffc900018cf6a8 R11: 0001c900018cf6a8 R12: ffff888107b255c8 [ 39.169133][ T3565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.174190][ T3559] R13: ffffffff871d3e90 R14: ffff888107b25580 R15: 0000000000000001 [ 39.202216][ T3559] FS: 00007f4dd3d5f6c0(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 39.211356][ T3559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.218060][ T3559] CR2: 00007fc4ed1e37b0 CR3: 000000011ba4a000 CR4: 00000000003506f0 [ 39.226226][ T3559] Call Trace: [ 39.229605][ T3559] [ 39.232569][ T3559] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 39.238710][ T3559] ? errseq_check+0x2c/0x50 [ 39.243284][ T3559] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 39.248866][ T3559] ? ext4_truncate+0x89f/0xa10 [ 39.253696][ T3559] ext4_evict_inode+0xb16/0xe30 [ 39.258921][ T3559] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.264517][ T3559] evict+0x2af/0x510 [ 39.268551][ T3559] ? __dquot_initialize+0x146/0x7c0 [ 39.273940][ T3559] iput+0x41a/0x580 [ 39.277824][ T3559] ext4_process_orphan+0x1a9/0x1c0 [ 39.282996][ T3559] ext4_orphan_cleanup+0x69c/0x9f0 [ 39.288197][ T3559] ext4_fill_super+0x3408/0x37c0 [ 39.293200][ T3559] ? set_blocksize+0x14c/0x270 [ 39.298071][ T3559] ? setup_bdev_super+0x30e/0x370 [ 39.303149][ T3559] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.308509][ T3559] get_tree_bdev_flags+0x291/0x300 [ 39.313666][ T3559] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.319025][ T3559] get_tree_bdev+0x1f/0x30 [ 39.323541][ T3559] ext4_get_tree+0x1c/0x30 [ 39.328079][ T3559] vfs_get_tree+0x57/0x1d0 [ 39.332668][ T3559] do_new_mount+0x288/0x8d0 [ 39.337311][ T3559] path_mount+0x4d0/0xbc0 [ 39.341904][ T3559] __se_sys_mount+0x28c/0x2e0 [ 39.346722][ T3559] __x64_sys_mount+0x67/0x80 [ 39.351404][ T3559] x64_sys_call+0x2d61/0x3020 [ 39.356131][ T3559] do_syscall_64+0x12c/0x3b0 [ 39.360796][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.366806][ T3559] RIP: 0033:0x7f4dd530e04a [ 39.371294][ T3559] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.391089][ T3559] RSP: 002b:00007f4dd3d5ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.399582][ T3559] RAX: ffffffffffffffda RBX: 00007f4dd3d5eee0 RCX: 00007f4dd530e04a [ 39.407600][ T3559] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007f4dd3d5eea0 [ 39.415684][ T3559] RBP: 0000200000000080 R08: 00007f4dd3d5eee0 R09: 0000000000800718 [ 39.423847][ T3559] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 39.431969][ T3559] R13: 00007f4dd3d5eea0 R14: 000000000000048a R15: 0000200000000000 [ 39.440031][ T3559] [ 39.443130][ T3559] ---[ end trace 0000000000000000 ]--- [ 39.451395][ T3559] EXT4-fs (loop1): 1 orphan inode deleted [ 39.457769][ T3559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.777426][ T3578] tipc: Started in network mode [ 39.782847][ T3578] tipc: Node identity 12f4ea68fda9, cluster identity 4711 [ 39.790793][ T3578] tipc: Enabled bearer , priority 0 [ 39.843236][ T3578] syzkaller0: entered promiscuous mode [ 39.849311][ T3578] syzkaller0: entered allmulticast mode [ 39.855861][ T3578] tipc: Resetting bearer [ 39.874584][ T2131] tipc: Resetting bearer [ 39.891263][ T3577] tipc: Resetting bearer [ 39.911347][ T3577] tipc: Disabling bearer [ 40.125369][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.171512][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.330299][ T3591] hub 8-0:1.0: USB hub found [ 40.354907][ T3591] hub 8-0:1.0: 8 ports detected [ 40.879385][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 40.879409][ T28] audit: type=1400 audit(1778535764.268:197): avc: denied { create } for pid=3601 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.953577][ T28] audit: type=1400 audit(1778535764.298:198): avc: denied { write } for pid=3601 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.557759][ T3609] hub 8-0:1.0: USB hub found [ 41.562550][ T3609] hub 8-0:1.0: 8 ports detected [ 42.053572][ T3613] loop4: detected capacity change from 0 to 764 [ 42.090184][ T28] audit: type=1400 audit(1778535765.478:199): avc: denied { mount } for pid=3610 comm="syz.4.28" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.125466][ T28] audit: type=1400 audit(1778535765.488:200): avc: denied { tracepoint } for pid=3610 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.095853][ T28] audit: type=1400 audit(1778535766.478:201): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.547434][ T28] audit: type=1400 audit(1778535766.928:202): avc: denied { write } for pid=3650 comm="syz.2.41" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.681904][ T28] audit: type=1400 audit(1778535766.928:203): avc: denied { open } for pid=3650 comm="syz.2.41" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 44.370782][ T28] audit: type=1400 audit(1778535767.758:204): avc: denied { create } for pid=3668 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.395386][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 44.424307][ T28] audit: type=1400 audit(1778535767.778:205): avc: denied { bind } for pid=3668 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.487991][ T28] audit: type=1400 audit(1778535767.778:206): avc: denied { setopt } for pid=3668 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.635491][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.644180][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.383390][ T3696] loop2: detected capacity change from 0 to 764 [ 45.428422][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 45.449064][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.459032][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.465694][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 45.468325][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.485486][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.495231][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 46.595157][ T3714] loop0: detected capacity change from 0 to 764 [ 47.570421][ T3732] tipc: Started in network mode [ 47.575386][ T3732] tipc: Node identity 2e6e1d3fb78, cluster identity 4711 [ 47.583674][ T3732] tipc: Enabled bearer , priority 0 [ 47.675325][ T3732] syzkaller0: entered promiscuous mode [ 47.698006][ T3732] syzkaller0: entered allmulticast mode [ 47.719350][ T3732] tipc: Resetting bearer [ 47.734946][ T3734] loop1: detected capacity change from 0 to 764 [ 47.781375][ T3731] tipc: Resetting bearer [ 47.831699][ T3731] tipc: Disabling bearer [ 47.926298][ T3728] ================================================================== [ 47.934456][ T3728] BUG: KCSAN: data-race in hrtimer_start_range_ns / print_cpu [ 47.941969][ T3728] [ 47.944327][ T3728] write to 0xffff888237c1b8e8 of 8 bytes by task 3741 on cpu 0: [ 47.952051][ T3728] hrtimer_start_range_ns+0xc6d/0x10a0 [ 47.957562][ T3728] common_hrtimer_rearm+0x85/0x90 [ 47.962623][ T3728] posixtimer_deliver_signal+0x11f/0x300 [ 47.968300][ T3728] dequeue_signal+0x2ce/0x3a0 [ 47.973005][ T3728] get_signal+0x375/0xf20 [ 47.977367][ T3728] arch_do_signal_or_restart+0x96/0x480 [ 47.982952][ T3728] exit_to_user_mode_loop+0x6f/0x820 [ 47.988260][ T3728] do_syscall_64+0x232/0x3b0 [ 47.992979][ T3728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.998895][ T3728] [ 48.001243][ T3728] read to 0xffff888237c1b8e8 of 8 bytes by task 3728 on cpu 1: [ 48.008892][ T3728] print_cpu+0x2fb/0x670 [ 48.013180][ T3728] timer_list_show+0x107/0x170 [ 48.017992][ T3728] seq_read_iter+0x636/0x940 [ 48.022627][ T3728] proc_reg_read_iter+0x110/0x180 [ 48.027701][ T3728] copy_splice_read+0x471/0x6c0 [ 48.032592][ T3728] splice_direct_to_actor+0x26e/0x670 [ 48.038003][ T3728] do_splice_direct+0x119/0x1a0 [ 48.042894][ T3728] do_sendfile+0x382/0x650 [ 48.047344][ T3728] __x64_sys_sendfile64+0x105/0x150 [ 48.052580][ T3728] x64_sys_call+0x2dc4/0x3020 [ 48.057289][ T3728] do_syscall_64+0x12c/0x3b0 [ 48.061920][ T3728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.067846][ T3728] [ 48.070203][ T3728] value changed: 0x0000000b279447ee -> 0x0000000b27940d7a [ 48.077334][ T3728] [ 48.079723][ T3728] Reported by Kernel Concurrency Sanitizer on: [ 48.085991][ T3728] CPU: 1 UID: 0 PID: 3728 Comm: syz.3.66 Tainted: G W syzkaller #0 PREEMPT(full) [ 48.096697][ T3728] Tainted: [W]=WARN [ 48.100520][ T3728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 48.110602][ T3728] ================================================================== [ 48.161252][ T3745] tipc: Enabled bearer , priority 0 [ 48.209790][ T3745] syzkaller0: entered promiscuous mode [ 48.217667][ T3745] syzkaller0: entered allmulticast mode [ 48.230784][ T3745] tipc: Resetting bearer [ 48.258619][ T3744] tipc: Resetting bearer [ 48.293109][ T3744] tipc: Disabling bearer