last executing test programs: 1.943769476s ago: executing program 3 (id=77): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xb8}}, 0x0) 1.853926328s ago: executing program 3 (id=81): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.807719929s ago: executing program 3 (id=82): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f6400940005161b295c6fa3327d07cfb8d2b6ec930038925a01000000000000008004000000ffe809000000fff5ddaeb6eed4", 0x58}], 0x1) 1.706129232s ago: executing program 3 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 1.644320783s ago: executing program 3 (id=89): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000600)={0x44, r1, 0x7, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0xe, [@perr={0x84, 0x28, {0x4, 0x2, [{{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x24}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) 1.582327754s ago: executing program 3 (id=92): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000300)) 1.042921317s ago: executing program 4 (id=114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000e0000009500000000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x727c45cd4283345, 0x9, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 973.069128ms ago: executing program 4 (id=116): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004891) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 921.830699ms ago: executing program 2 (id=117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 900.84828ms ago: executing program 4 (id=118): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) 854.71302ms ago: executing program 2 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000eb40000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 821.596941ms ago: executing program 4 (id=121): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa8, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8ee7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5de}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e2400001400050000000000000000000000000000000001080002"], 0x1f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 783.961842ms ago: executing program 2 (id=122): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 679.034435ms ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @netfilter}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0}, 0x844c, 0x0, 0xfffffffe, 0x0, 0xfffffff7ffffbbfe, 0x1, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 672.248875ms ago: executing program 2 (id=125): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x7, 0x20000800, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) 654.674605ms ago: executing program 1 (id=127): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) dup3(r0, r1, 0x80000) 647.891076ms ago: executing program 4 (id=128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="36d3", 0x2}], 0x1}, 0x41) recvmmsg$unix(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) 593.767646ms ago: executing program 0 (id=130): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_config_ext={0xc, 0x100}, 0x424, 0x0, 0x0, 0x0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000400)) 589.235887ms ago: executing program 1 (id=131): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0xffff0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 581.570927ms ago: executing program 2 (id=132): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 512.487428ms ago: executing program 0 (id=133): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 446.02907ms ago: executing program 1 (id=134): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xe, 0x7fff0001}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) inotify_init1(0x0) sendfile(r0, r1, 0x0, 0x2000007ff) 433.87019ms ago: executing program 0 (id=135): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff3, 0x4012011, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@nfc={0x27, 0x0, 0x0, 0x2}, {0x0}, 0x0, 0x32}, 0xa0) 396.294231ms ago: executing program 2 (id=136): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/../file0\x00', 0x40000, 0x25) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000023c0), 0x200000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 395.398101ms ago: executing program 0 (id=137): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x6a0, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c000380"], 0x50}}, 0x0) 372.959262ms ago: executing program 1 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0xbb, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 290.815104ms ago: executing program 0 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 246.705335ms ago: executing program 0 (id=140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) chmod(&(0x7f0000000000)='./file0/file0\x00', 0x10) sync() rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 133.217267ms ago: executing program 1 (id=141): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc00000003010102000000000000000002000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 0s ago: executing program 1 (id=142): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x1000) kernel console output (not intermixed with test programs): [ 23.583041][ T28] audit: type=1400 audit(1783707258.914:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.605112][ T28] audit: type=1400 audit(1783707258.914:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.348928][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 25.348945][ T28] audit: type=1400 audit(1783707260.684:118): avc: denied { write } for pid=3220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.382636][ T28] audit: type=1400 audit(1783707260.714:119): avc: denied { write } for pid=3231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.582312][ T28] audit: type=1400 audit(1783707260.914:120): avc: denied { write } for pid=3236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.611994][ T28] audit: type=1400 audit(1783707260.944:121): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.808504][ T28] audit: type=1400 audit(1783707261.144:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.838239][ T28] audit: type=1400 audit(1783707261.174:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.034986][ T28] audit: type=1400 audit(1783707261.364:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.064708][ T28] audit: type=1400 audit(1783707261.394:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 30.518114][ T28] audit: type=1400 audit(1783707265.854:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.541254][ T28] audit: type=1400 audit(1783707265.874:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.543652][ T3282] cgroup: Unknown subsys name 'net' [ 30.569116][ T28] audit: type=1400 audit(1783707265.904:128): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.687246][ T3282] cgroup: Unknown subsys name 'cpuset' [ 30.693550][ T3282] cgroup: Unknown subsys name 'rlimit' [ 30.804691][ T28] audit: type=1400 audit(1783707266.134:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.828113][ T28] audit: type=1400 audit(1783707266.134:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.858841][ T28] audit: type=1400 audit(1783707266.134:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.879460][ T28] audit: type=1400 audit(1783707266.134:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.900010][ T28] audit: type=1400 audit(1783707266.134:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.921147][ T28] audit: type=1400 audit(1783707266.164:134): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.938118][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.946593][ T28] audit: type=1400 audit(1783707266.164:135): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.991911][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.191676][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.199015][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.206192][ T3295] bridge_slave_0: entered allmulticast mode [ 33.212761][ T3295] bridge_slave_0: entered promiscuous mode [ 33.231703][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.238812][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.245899][ T3295] bridge_slave_1: entered allmulticast mode [ 33.252407][ T3295] bridge_slave_1: entered promiscuous mode [ 33.266245][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.273411][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.280618][ T3299] bridge_slave_0: entered allmulticast mode [ 33.287038][ T3299] bridge_slave_0: entered promiscuous mode [ 33.309814][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.317024][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.324177][ T3299] bridge_slave_1: entered allmulticast mode [ 33.330849][ T3299] bridge_slave_1: entered promiscuous mode [ 33.368846][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.387170][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.394381][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.401539][ T3296] bridge_slave_0: entered allmulticast mode [ 33.407919][ T3296] bridge_slave_0: entered promiscuous mode [ 33.415219][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.427910][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.439910][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.447128][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.454321][ T3296] bridge_slave_1: entered allmulticast mode [ 33.460994][ T3296] bridge_slave_1: entered promiscuous mode [ 33.474984][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.522305][ T3295] team0: Port device team_slave_0 added [ 33.533630][ T3299] team0: Port device team_slave_0 added [ 33.539559][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.546743][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.553884][ T3301] bridge_slave_0: entered allmulticast mode [ 33.560383][ T3301] bridge_slave_0: entered promiscuous mode [ 33.568074][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.578115][ T3295] team0: Port device team_slave_1 added [ 33.583793][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.590950][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.598179][ T3302] bridge_slave_0: entered allmulticast mode [ 33.604726][ T3302] bridge_slave_0: entered promiscuous mode [ 33.611951][ T3299] team0: Port device team_slave_1 added [ 33.617760][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.624864][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.632065][ T3301] bridge_slave_1: entered allmulticast mode [ 33.638615][ T3301] bridge_slave_1: entered promiscuous mode [ 33.646154][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.664117][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.671262][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.678419][ T3302] bridge_slave_1: entered allmulticast mode [ 33.684963][ T3302] bridge_slave_1: entered promiscuous mode [ 33.723505][ T3296] team0: Port device team_slave_0 added [ 33.729595][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.736635][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.762688][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.778770][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.785776][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.811766][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.823968][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.833837][ T3296] team0: Port device team_slave_1 added [ 33.839894][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.846885][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.872936][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.884964][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.894480][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.901514][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.927474][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.939192][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.965633][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.993297][ T3301] team0: Port device team_slave_0 added [ 33.999803][ T3301] team0: Port device team_slave_1 added [ 34.005628][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.012697][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.038761][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.050588][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.057611][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.083533][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.095206][ T3302] team0: Port device team_slave_0 added [ 34.102413][ T3302] team0: Port device team_slave_1 added [ 34.143959][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.151046][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.177046][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.199205][ T3295] hsr_slave_0: entered promiscuous mode [ 34.205420][ T3295] hsr_slave_1: entered promiscuous mode [ 34.218009][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.225057][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.250995][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.262118][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.269266][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.295431][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.308741][ T3299] hsr_slave_0: entered promiscuous mode [ 34.314761][ T3299] hsr_slave_1: entered promiscuous mode [ 34.320670][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.326461][ T3299] Cannot create hsr debugfs directory [ 34.343228][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.350335][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.376283][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.420484][ T3296] hsr_slave_0: entered promiscuous mode [ 34.426626][ T3296] hsr_slave_1: entered promiscuous mode [ 34.432527][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 34.438318][ T3296] Cannot create hsr debugfs directory [ 34.505502][ T3301] hsr_slave_0: entered promiscuous mode [ 34.511556][ T3301] hsr_slave_1: entered promiscuous mode [ 34.517498][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.523250][ T3301] Cannot create hsr debugfs directory [ 34.531258][ T3302] hsr_slave_0: entered promiscuous mode [ 34.537340][ T3302] hsr_slave_1: entered promiscuous mode [ 34.543174][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.548933][ T3302] Cannot create hsr debugfs directory [ 34.675654][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.684386][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.692284][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.700999][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.721904][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.730905][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.749604][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.758400][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.796813][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.805287][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.813766][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.822424][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.830381][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.839146][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.847007][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.855770][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.886094][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.894752][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.905881][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.914681][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.922406][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.931267][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.940143][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.949185][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.981356][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.990157][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.998655][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.007202][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.015125][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.024085][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.032374][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.041499][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.090980][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.100051][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.107974][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.116759][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.124633][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.133641][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.141538][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.150515][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.163437][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.197869][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.208574][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.215688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.227449][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.238756][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.247817][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.254945][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.282733][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.299543][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.311087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.318342][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.336060][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.346960][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.354058][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.368076][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.375165][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.389370][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.402796][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.409916][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.428977][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.436076][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.463928][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.482342][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.489589][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.534693][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.554931][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.562064][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.582204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.589393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.658967][ T3431] modprobe (3431) used greatest stack depth: 10840 bytes left [ 35.699450][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.786197][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.808885][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.868771][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.904894][ T3295] veth0_vlan: entered promiscuous mode [ 35.924990][ T3295] veth1_vlan: entered promiscuous mode [ 35.941849][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.967248][ T3295] veth0_macvtap: entered promiscuous mode [ 35.995555][ T3295] veth1_macvtap: entered promiscuous mode [ 36.028701][ T3299] veth0_vlan: entered promiscuous mode [ 36.037083][ T3301] veth0_vlan: entered promiscuous mode [ 36.048161][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.061138][ T3299] veth1_vlan: entered promiscuous mode [ 36.073506][ T3301] veth1_vlan: entered promiscuous mode [ 36.092334][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.109994][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.119762][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.144963][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.154201][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.176086][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 36.176103][ T28] audit: type=1400 audit(1783707271.504:147): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.LswJRv/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.195248][ T3302] veth0_vlan: entered promiscuous mode [ 36.212064][ T28] audit: type=1400 audit(1783707271.504:148): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.238272][ T3301] veth0_macvtap: entered promiscuous mode [ 36.245160][ T28] audit: type=1400 audit(1783707271.504:149): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.LswJRv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.271852][ T28] audit: type=1400 audit(1783707271.504:150): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.294428][ T28] audit: type=1400 audit(1783707271.504:151): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.LswJRv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.325837][ T3301] veth1_macvtap: entered promiscuous mode [ 36.333343][ T3299] veth0_macvtap: entered promiscuous mode [ 36.342013][ T3299] veth1_macvtap: entered promiscuous mode [ 36.349865][ T28] audit: type=1400 audit(1783707271.504:152): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.LswJRv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.350761][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.379292][ T28] audit: type=1400 audit(1783707271.524:153): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.397981][ T3302] veth1_vlan: entered promiscuous mode [ 36.412914][ T28] audit: type=1400 audit(1783707271.544:154): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.435509][ T3302] veth0_macvtap: entered promiscuous mode [ 36.444657][ T28] audit: type=1400 audit(1783707271.544:155): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="gadgetfs" ino=4878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.463564][ T3296] veth0_vlan: entered promiscuous mode [ 36.486859][ T28] audit: type=1400 audit(1783707271.814:156): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.515380][ T3302] veth1_macvtap: entered promiscuous mode [ 36.524885][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.533907][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.547937][ T3296] veth1_vlan: entered promiscuous mode [ 36.556230][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.565435][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.580990][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.590038][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.605169][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.614499][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.625714][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.639077][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.648030][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.657032][ T3441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.682446][ T3441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.710132][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.718600][ T3296] veth0_macvtap: entered promiscuous mode [ 36.741378][ T3441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.756904][ T3441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.776966][ T3296] veth1_macvtap: entered promiscuous mode [ 36.783594][ T3441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.792987][ T3441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.832478][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.868059][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.908628][ T3524] loop2: detected capacity change from 0 to 128 [ 36.915367][ T3524] ======================================================= [ 36.915367][ T3524] WARNING: The mand mount option has been deprecated and [ 36.915367][ T3524] and is ignored by this kernel. Remove the mand [ 36.915367][ T3524] option from the mount to silence this warning. [ 36.915367][ T3524] ======================================================= [ 36.963672][ T3524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.976325][ T3441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.985513][ T3441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.007766][ T3524] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.026770][ T3441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.039683][ T3441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.149844][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.424387][ T3557] loop0: detected capacity change from 0 to 1024 [ 37.434381][ T3566] Zero length message leads to an empty skb [ 37.464312][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.501337][ T3573] xt_hashlimit: size too large, truncated to 1048576 [ 37.596488][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.720143][ T3588] loop4: detected capacity change from 0 to 256 [ 37.750813][ T3588] msdos: Bad value for 'time_offset' [ 37.780024][ T3595] loop0: detected capacity change from 0 to 512 [ 37.819114][ T3595] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.862345][ T3595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.886843][ T3595] EXT4-fs (loop0): 1 truncate cleaned up [ 37.893310][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.945921][ T3605] netlink: 'syz.4.43': attribute type 3 has an invalid length. [ 37.965111][ T3605] netlink: 'syz.4.43': attribute type 2 has an invalid length. [ 37.973127][ T3605] netlink: 'syz.4.43': attribute type 9 has an invalid length. [ 37.981039][ T3605] netlink: 'syz.4.43': attribute type 7 has an invalid length. [ 37.988874][ T3605] netlink: 198664 bytes leftover after parsing attributes in process `syz.4.43'. [ 38.055662][ T3610] loop4: detected capacity change from 0 to 1024 [ 38.143826][ T3617] loop4: detected capacity change from 0 to 512 [ 38.160685][ T3617] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.50: inode has both inline data and extents flags [ 38.174144][ T3617] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.174273][ T3617] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.50: couldn't read orphan inode 15 (err -117) [ 38.183542][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.183564][ C1] EXT4-fs (loop4): initial error at time 1783707273: ext4_orphan_get:1399: inode 15 [ 38.183608][ C1] EXT4-fs (loop4): last error at time 1783707273: ext4_orphan_get:1399: inode 15 [ 38.221069][ T3617] loop4: lost filesystem error report for type 5 error -117 [ 38.222182][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.419419][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.421522][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.450232][ T3624] loop0: detected capacity change from 0 to 256 [ 38.530118][ T3628] capability: warning: `syz.4.54' uses 32-bit capabilities (legacy support in use) [ 38.572783][ T3628] program syz.4.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.711149][ T3640] loop0: detected capacity change from 0 to 1024 [ 38.734008][ T3640] EXT4-fs: Ignoring removed bh option [ 38.770399][ T3640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.784699][ T3637] syz.4.59 (3637) used greatest stack depth: 10568 bytes left [ 38.812255][ T3644] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 38.818202][ T3640] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.978286][ T3649] xt_hashlimit: size too large, truncated to 1048576 [ 39.204511][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.265442][ T3675] loop1: detected capacity change from 0 to 512 [ 39.282841][ T3675] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.295450][ T3675] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.302466][ T3676] geneve2: entered promiscuous mode [ 39.304981][ T3675] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 39.323551][ T3675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 39.335850][ T3675] netlink: 'syz.1.75': attribute type 15 has an invalid length. [ 39.458534][ T3682] loop0: detected capacity change from 0 to 2048 [ 39.568546][ T3682] loop0: p1 < > p3 [ 39.573465][ T3682] loop0: p3 size 134217728 extends beyond EOD, truncated [ 39.761630][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.778167][ T3715] gtp0: entered promiscuous mode [ 39.783319][ T3715] gtp0: entered allmulticast mode [ 39.868888][ T3721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.922111][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.124411][ T3748] xt_cgroup: invalid path, errno=-2 [ 40.148162][ T3750] process 'syz.0.107' launched '/dev/fd/3' with NULL argv: empty string added [ 40.279773][ T3758] loop0: p3 < > p4 < > [ 40.285700][ T3758] loop0: partition table partially beyond EOD, truncated [ 40.293274][ T3758] loop0: p3 start 4284289 is beyond EOD, truncated [ 40.314181][ T2981] loop0: p3 < > p4 < > [ 40.318760][ T2981] loop0: partition table partially beyond EOD, truncated [ 40.326209][ T2981] loop0: p3 start 4284289 is beyond EOD, truncated [ 40.487177][ T3779] netlink: 'syz.4.121': attribute type 3 has an invalid length. [ 40.508934][ T3779] netlink: 56 bytes leftover after parsing attributes in process `syz.4.121'. [ 40.731985][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.752732][ T3801] netlink: 'syz.1.131': attribute type 30 has an invalid length. [ 40.771694][ T3801] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 40.780396][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.796866][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.906241][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.082653][ T3819] EXT4-fs: Ignoring removed orlov option [ 41.128253][ T3819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.213388][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 41.213405][ T28] audit: type=1400 audit(1783707276.544:300): avc: denied { write } for pid=3818 comm="syz.0.140" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.293365][ T28] audit: type=1400 audit(1783707276.544:301): avc: denied { write } for pid=3818 comm="syz.0.140" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.320723][ T3819] ================================================================== [ 41.328857][ T3819] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 41.336264][ T3819] [ 41.338615][ T3819] read-write to 0xffff888106d54478 of 8 bytes by task 12 on cpu 0: [ 41.346538][ T3819] __xa_clear_mark+0xf5/0x1e0 [ 41.351254][ T3819] __folio_end_writeback+0xf4/0x360 [ 41.356481][ T3819] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 41.362776][ T3819] folio_end_writeback+0x1c/0x70 [ 41.367746][ T3819] ext4_finish_bio+0x454/0x770 [ 41.372538][ T3819] ext4_release_io_end+0x9f/0x1f0 [ 41.377587][ T3819] ext4_end_io_end+0x18d/0x240 [ 41.382379][ T3819] ext4_end_io_rsv_work+0x15b/0x1f0 [ 41.387600][ T3819] process_scheduled_works+0x4d4/0x9a0 [ 41.393098][ T3819] worker_thread+0x569/0x750 [ 41.397753][ T3819] kthread+0x221/0x270 [ 41.401843][ T3819] ret_from_fork+0x146/0x330 [ 41.406467][ T3819] ret_from_fork_asm+0x1a/0x30 [ 41.411252][ T3819] [ 41.413589][ T3819] read to 0xffff888106d54478 of 8 bytes by task 3819 on cpu 1: [ 41.421147][ T3819] xas_find_marked+0x211/0x650 [ 41.425931][ T3819] filemap_get_folios_tag+0xf7/0x400 [ 41.431256][ T3819] filemap_fdatawait_keep_errors+0x6c/0x190 [ 41.437184][ T3819] sync_inodes_sb+0x41e/0x4d0 [ 41.441891][ T3819] sync_inodes_one_sb+0x3d/0x50 [ 41.446864][ T3819] __iterate_supers+0x110/0x1f0 [ 41.451759][ T3819] iterate_supers+0x1f/0x30 [ 41.456292][ T3819] __ia32_sys_sync+0x5c/0xb0 [ 41.460913][ T3819] x64_sys_call+0x2f3a/0x3020 [ 41.465613][ T3819] do_syscall_64+0x136/0x3c0 [ 41.470245][ T3819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.476160][ T3819] [ 41.478508][ T3819] value changed: 0xffc0000000000000 -> 0x0000000000000000 [ 41.485636][ T3819] [ 41.487980][ T3819] Reported by Kernel Concurrency Sanitizer on: [ 41.494166][ T3819] CPU: 1 UID: 0 PID: 3819 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.503397][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 41.513470][ T3819] ================================================================== [ 41.524604][ T28] audit: type=1400 audit(1783707276.544:302): avc: denied { remove_name } for pid=3818 comm="syz.0.140" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.588636][ T28] audit: type=1400 audit(1783707276.544:303): avc: denied { rename } for pid=3818 comm="syz.0.140" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.611656][ T28] audit: type=1400 audit(1783707276.544:304): avc: denied { unlink } for pid=3818 comm="syz.0.140" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.675560][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.786675][ T3718] Bluetooth: hci0: command 0x1003 tx timeout [ 41.792830][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.748284][ T3714] Bluetooth: hci0: Opcode 0x0c1a failed: -4