last executing test programs: 2.369744579s ago: executing program 3 (id=1237): r0 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45884, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x20000000, 0x0, 0x0, 0x0) 2.184639516s ago: executing program 3 (id=1241): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file1\x00', 0x4000423) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.02685898s ago: executing program 4 (id=1243): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x414101, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000340)={0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 1.969994364s ago: executing program 0 (id=1245): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005}, 0x50) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.965157505s ago: executing program 4 (id=1246): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(0x3) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) 1.868335704s ago: executing program 4 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x20, 0x0, 0x0, 0xfbfff00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.635575974s ago: executing program 0 (id=1250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x38}, 0x1, 0xfffc}, 0x4000800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.528024634s ago: executing program 0 (id=1252): unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 1.481086368s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.448494191s ago: executing program 1 (id=1254): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 1.429662152s ago: executing program 2 (id=1255): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_io_uring_setup(0x2b07, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x4, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r0, 0x1) 1.406685465s ago: executing program 4 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xee1) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) io_uring_enter(r2, 0x625, 0x4c1, 0xc1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) 1.34223324s ago: executing program 1 (id=1258): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000210001002dbd7000fcdbdf250ac120051200000700000000080017004e244e2014000100fe8000000000000000000000000000bb140002"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffff9c, &(0x7f0000000940), 0x40c00, 0x0) readv(r3, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/147, 0x93}], 0x1) getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r4 = memfd_create(&(0x7f0000000a40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaG?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6\a\x00\x00\x00\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00Q\x00\x00\x00\x00\x00\x00\x00\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\x9f\xadrY_1\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.24140679s ago: executing program 0 (id=1260): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r3 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) poll(&(0x7f0000000080)=[{r3, 0x4000}, {r1, 0x3}], 0x2, 0xffff8001) 1.24124663s ago: executing program 1 (id=1261): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.190119284s ago: executing program 1 (id=1262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d9900", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.178021265s ago: executing program 2 (id=1263): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x11, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x341000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000080, 0x2000000000b0, 0x2000000000e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0080000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 1.067201885s ago: executing program 1 (id=1264): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000002040)=""/4109, 0x100d) 1.025536669s ago: executing program 4 (id=1265): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45884, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xb17f, 0x0, 0x0, 0x0) 926.331948ms ago: executing program 0 (id=1266): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 552.872031ms ago: executing program 0 (id=1267): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffefffffefffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) 422.781622ms ago: executing program 3 (id=1268): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 251.235598ms ago: executing program 3 (id=1269): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 249.513388ms ago: executing program 1 (id=1279): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) open(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20000, 0x4) 214.712411ms ago: executing program 2 (id=1270): unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 149.016327ms ago: executing program 3 (id=1271): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xffffff6e, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 93.250532ms ago: executing program 4 (id=1272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 65.465354ms ago: executing program 2 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 0s ago: executing program 2 (id=1274): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) kernel console output (not intermixed with test programs): 5293]" dev="sockfs" ino=5293 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.706192][ T3651] IPVS: using max 2544 ests per chain, 127200 per kthread [ 36.715703][ T28] audit: type=1400 audit(1771344179.702:177): avc: denied { shutdown } for pid=3657 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.765962][ T28] audit: type=1400 audit(1771344179.702:178): avc: denied { name_connect } for pid=3657 comm="syz.2.59" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.809350][ T3661] Illegal XDP return value 4294967294 on prog (id 19) dev syz_tun, expect packet loss! [ 36.830291][ T28] audit: type=1400 audit(1771344179.702:179): avc: denied { getopt } for pid=3657 comm="syz.2.59" lport=55145 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 36.912199][ T28] audit: type=1400 audit(1771344179.902:180): avc: denied { setopt } for pid=3655 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.938905][ T3361] IPVS: starting estimator thread 0... [ 36.959516][ T28] audit: type=1400 audit(1771344179.902:181): avc: denied { read write } for pid=3663 comm="syz.2.61" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 37.019362][ T28] audit: type=1400 audit(1771344179.902:182): avc: denied { open } for pid=3663 comm="syz.2.61" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 37.046208][ T3665] IPVS: using max 2496 ests per chain, 124800 per kthread [ 37.361699][ T12] IPVS: stop unused estimator thread 0... [ 37.374994][ T28] audit: type=1400 audit(1771344180.372:183): avc: denied { bind } for pid=3672 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.416165][ T28] audit: type=1400 audit(1771344180.392:185): avc: denied { create } for pid=3669 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 37.473875][ T28] audit: type=1400 audit(1771344180.392:184): avc: denied { name_bind } for pid=3672 comm="syz.4.64" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 37.891266][ T3694] loop3: detected capacity change from 0 to 1024 [ 37.901320][ T3694] EXT4-fs: Ignoring removed bh option [ 37.927904][ T3694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 37.953341][ T3694] syzkaller0: entered allmulticast mode [ 37.960268][ T3694] syzkaller0: entered promiscuous mode [ 37.975703][ T3694] syzkaller0 (unregistering): left promiscuous mode [ 37.983664][ T3694] syzkaller0 (unregistering): left allmulticast mode [ 38.107085][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 38.630777][ T3715] loop0: detected capacity change from 0 to 512 [ 38.643416][ T3715] EXT4-fs: Ignoring removed i_version option [ 38.682949][ T3715] EXT4-fs: Ignoring removed bh option [ 38.753177][ T3715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.789780][ T3715] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.018879][ T261] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.181000][ T3734] loop4: detected capacity change from 0 to 1024 [ 39.196754][ T3734] EXT4-fs: Ignoring removed bh option [ 39.228243][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.259295][ T3734] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 39.379954][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385294][ T3734] EXT4-fs error (device loop4): empty_inline_dir:1770: inode #12: block 7: comm syz.4.84: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 39.410557][ T3734] EXT4-fs (loop4): Remounting filesystem read-only [ 39.428868][ T3734] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 39.430265][ T3740] syz_tun: entered allmulticast mode [ 39.464965][ T3740] syz_tun: left allmulticast mode [ 39.515583][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.000912][ T3755] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 40.021662][ T3755] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 40.096594][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.103865][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.204703][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.217559][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.296540][ T1688] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.305526][ T1688] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.342691][ T1688] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.364172][ T1688] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.539189][ T3776] loop1: detected capacity change from 0 to 128 [ 40.913678][ T3778] loop2: detected capacity change from 0 to 8192 [ 41.046907][ T3557] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.053049][ T3727] Bluetooth: hci0: command 0x1003 tx timeout [ 41.153710][ T3782] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 41.184853][ T3782] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 41.385682][ T3776] syz.1.98 (3776) used greatest stack depth: 10376 bytes left [ 41.826056][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 41.826075][ T28] audit: type=1400 audit(1771344184.802:287): avc: denied { block_suspend } for pid=3802 comm="syz.3.108" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.988785][ T3813] loop2: detected capacity change from 0 to 512 [ 42.206950][ T3813] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.297029][ T3813] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.337374][ T3813] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.110: Allocating blocks 41-42 which overlap fs metadata [ 42.351430][ T3813] loop2: lost filesystem error report for type 5 error -117 [ 42.356008][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 42.369879][ C1] EXT4-fs (loop2): initial error at time 1771344185: ext4_mb_mark_diskspace_used:4224 [ 42.379460][ C1] EXT4-fs (loop2): last error at time 1771344185: ext4_mb_mark_diskspace_used:4224 [ 42.468121][ T3813] Quota error (device loop2): write_blk: dquota write failed [ 42.475543][ T3813] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 42.514358][ T3813] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.110: Allocating blocks 41-42 which overlap fs metadata [ 42.562654][ T3813] loop2: lost filesystem error report for type 5 error -117 [ 42.564170][ T3813] Quota error (device loop2): write_blk: dquota write failed [ 42.621193][ T3813] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 42.654427][ T3813] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.110: Failed to acquire dquot type 1 [ 42.713254][ T3813] loop2: lost filesystem error report for type 5 error -117 [ 42.733632][ T3818] loop1: detected capacity change from 0 to 512 [ 42.748552][ T3813] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.766310][ T3818] EXT4-fs: Ignoring removed i_version option [ 42.772428][ T3818] EXT4-fs: Ignoring removed bh option [ 42.782200][ T3813] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.110: corrupted inode contents [ 42.794215][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 42.815655][ T3813] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #12: comm syz.2.110: mark_inode_dirty error [ 42.856060][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 42.875843][ T3813] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.110: corrupted inode contents [ 42.910256][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.924614][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 42.924828][ T3813] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.110: mark_inode_dirty error [ 42.981423][ T3818] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.016075][ T28] audit: type=1400 audit(1771344185.992:288): avc: denied { write } for pid=3825 comm="syz.3.112" path="socket:[5693]" dev="sockfs" ino=5693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.047655][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.047835][ T3813] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.110: corrupted inode contents [ 43.108331][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.108562][ T3813] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 43.126822][ T28] audit: type=1400 audit(1771344186.102:289): avc: denied { read write } for pid=3827 comm="syz.0.113" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.151939][ T3813] loop2: lost filesystem error report for type 5 error -117 [ 43.152144][ T3813] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.110: corrupted inode contents [ 43.172226][ T28] audit: type=1400 audit(1771344186.102:290): avc: denied { open } for pid=3827 comm="syz.0.113" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.195912][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.196177][ T3813] EXT4-fs error (device loop2): ext4_truncate:4587: inode #12: comm syz.2.110: mark_inode_dirty error [ 43.219859][ T3813] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.220004][ T3813] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 43.239044][ T3813] loop2: lost filesystem error report for type 5 error -117 [ 43.239309][ T3813] EXT4-fs (loop2): 1 truncate cleaned up [ 43.253119][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.386255][ T3813] syz.2.110 (3813) used greatest stack depth: 10072 bytes left [ 43.421955][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.633870][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.836089][ T28] audit: type=1400 audit(1771344186.812:291): avc: denied { listen } for pid=3837 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.993081][ T28] audit: type=1400 audit(1771344186.812:292): avc: denied { accept } for pid=3837 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.460159][ T3848] batadv_slave_1: entered promiscuous mode [ 44.493276][ T3848] pimreg: entered allmulticast mode [ 44.516108][ T3848] pimreg: left allmulticast mode [ 44.557858][ T3847] batadv_slave_1: left promiscuous mode [ 44.583345][ T3857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 45.159717][ T3862] loop3: detected capacity change from 0 to 1024 [ 45.236322][ T3877] loop2: detected capacity change from 0 to 512 [ 45.303119][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.316549][ T3877] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.332012][ T3862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 45.398676][ T3862] System zones: 0-1, 3-36 [ 45.442506][ T3877] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #19: comm syz.2.132: corrupted inode contents [ 45.456713][ T3862] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.127: bad orphan inode 134217728 [ 45.489718][ T3877] loop2: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 45.491427][ T3877] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #19: comm syz.2.132: mark_inode_dirty error [ 45.499094][ T3862] loop3: lost filesystem error report for type 5 error -117 [ 45.520514][ T3877] loop2: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 45.544766][ T3877] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #19: comm syz.2.132: corrupted inode contents [ 45.585199][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.596049][ T3877] loop2: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 45.625767][ T3877] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #19: comm syz.2.132: mark_inode_dirty error [ 45.650105][ T3891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'. [ 45.664972][ T3893] -: renamed from syzkaller0 [ 45.680219][ T3877] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #19: comm syz.2.132: mark inode dirty (error -117) [ 45.704510][ T3877] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 45.741719][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.755344][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.804318][ T3904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.854276][ T3904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.972049][ T3918] loop2: detected capacity change from 0 to 256 [ 46.379612][ T3922] Invalid ELF header magic: != ELF [ 46.469912][ T3930] loop4: detected capacity change from 0 to 512 [ 46.497439][ T3930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.531396][ T3936] uprobe: syz.3.157:3936 failed to unregister, leaking uprobe [ 46.542647][ T3930] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.580408][ T3938] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 46.603112][ T3938] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.611304][ T3938] bond1: (slave batadv1): making interface the new active one [ 46.619911][ T3938] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 46.630098][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 46.640394][ T3938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.964585][ T3941] loop1: detected capacity change from 0 to 512 [ 47.081427][ T3954] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 47.144734][ T3956] bond1: entered promiscuous mode [ 47.216155][ T3956] bond1: entered allmulticast mode [ 47.251039][ T3956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.432141][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.449814][ T3941] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.506345][ T3942] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #19: comm syz.4.155: corrupted inode contents [ 47.524762][ T3942] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #19: comm syz.4.155: mark_inode_dirty error [ 47.536610][ T3942] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #19: comm syz.4.155: corrupted inode contents [ 47.548867][ T3942] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.155: mark_inode_dirty error [ 47.561289][ T3942] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.155: mark inode dirty (error -117) [ 47.574554][ T3942] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 47.597366][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.648924][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.657043][ T3941] syz.1.159 (3941) used greatest stack depth: 9992 bytes left [ 47.670808][ T3954] bridge1: entered promiscuous mode [ 47.687851][ T3954] bridge1: entered allmulticast mode [ 47.696276][ T3954] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 47.778239][ T40] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 47.841712][ T28] kauditd_printk_skb: 338 callbacks suppressed [ 47.841732][ T28] audit: type=1400 audit(1771344190.822:631): avc: denied { execute } for pid=3960 comm="syz.4.163" path="/35/cpu.stat" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.956027][ T28] audit: type=1400 audit(1771344190.932:632): avc: denied { create } for pid=3967 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.958255][ T40] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 48.029899][ T28] audit: type=1400 audit(1771344191.022:633): avc: denied { mount } for pid=3969 comm="syz.4.167" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.069734][ T28] audit: type=1400 audit(1771344191.022:634): avc: denied { search } for pid=3969 comm="syz.4.167" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.135136][ T28] audit: type=1400 audit(1771344191.022:635): avc: denied { search } for pid=3969 comm="syz.4.167" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.164714][ T28] audit: type=1400 audit(1771344191.022:636): avc: denied { read open } for pid=3969 comm="syz.4.167" path="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.190120][ T28] audit: type=1326 audit(1771344191.182:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 48.256952][ T28] audit: type=1326 audit(1771344191.182:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 48.301054][ T28] audit: type=1326 audit(1771344191.182:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 48.364391][ T28] audit: type=1326 audit(1771344191.182:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 48.606978][ T3978] syz.0.170 (3978) used greatest stack depth: 9736 bytes left [ 48.984667][ T4002] netlink: 'syz.4.179': attribute type 13 has an invalid length. [ 49.052622][ T3992] loop2: detected capacity change from 0 to 1024 [ 49.120429][ T4003] loop4: detected capacity change from 0 to 512 [ 49.466236][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.179: iget: bad extra_isize 90 (inode size 256) [ 49.482645][ T3992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 49.500420][ T4003] fserror_report: 7 callbacks suppressed [ 49.500438][ T4003] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.510393][ T3992] System zones: 0-1, 3-36 [ 49.534224][ T3992] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.175: bad orphan inode 134217728 [ 49.534346][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.179: error while reading EA inode 11 err=-117 [ 49.534371][ T4003] loop4: lost filesystem error report for type 5 error -117 [ 49.534707][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.179: iget: bad extra_isize 90 (inode size 256) [ 49.545162][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 49.545183][ C1] EXT4-fs (loop4): initial error at time 1771344192: ext4_xattr_inode_iget:441: inode 11 [ 49.545213][ C1] EXT4-fs (loop4): last error at time 1771344192: ext4_xattr_inode_iget:446 [ 49.548142][ T3992] loop2: lost filesystem error report for type 5 error -117 [ 49.569895][ T4010] Invalid ELF header magic: != ELF [ 49.586039][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 49.588911][ T4003] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.596284][ C0] EXT4-fs (loop2): initial error at time 1771344192: ext4_orphan_get:1417 [ 49.607953][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.179: error while reading EA inode 11 err=-117 [ 49.612270][ C0] [ 49.642006][ T4003] loop4: lost filesystem error report for type 5 error -117 [ 49.654160][ C0] EXT4-fs (loop2): last error at time 1771344192: ext4_orphan_get:1417 [ 49.674706][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.179: iget: bad extra_isize 90 (inode size 256) [ 49.688170][ T4003] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 49.688408][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.179: error while reading EA inode 18 err=-117 [ 49.710070][ T4003] loop4: lost filesystem error report for type 5 error -117 [ 49.710334][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.179: iget: bad extra_isize 90 (inode size 256) [ 49.718086][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.731672][ T4003] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 49.744271][ T4003] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.179: error while reading EA inode 18 err=-117 [ 49.765894][ T4003] loop4: lost filesystem error report for type 5 error -117 [ 49.766249][ T4003] EXT4-fs (loop4): 1 orphan inode deleted [ 49.787502][ T4003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.862524][ T4017] loop1: detected capacity change from 0 to 764 [ 49.882006][ T4017] rock: directory entry would overflow storage [ 49.889200][ T4017] rock: sig=0x4654, size=5, remaining=4 [ 49.932323][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.067521][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.131305][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.138623][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.447308][ T4028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.468189][ T4028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.612568][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.636205][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.654423][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.684399][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.765097][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 51.394697][ T4052] syz_tun: entered allmulticast mode [ 51.551721][ T4057] capability: warning: `syz.4.195' uses 32-bit capabilities (legacy support in use) [ 51.920974][ T30] bond0: (slave bond_slave_0): interface is now down [ 51.936811][ T30] bond0: (slave bond_slave_1): interface is now down [ 51.946468][ T4065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.024811][ T1688] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 52.056110][ T1688] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 52.133742][ T1688] bond0: now running without any active interface! [ 53.084999][ T28] kauditd_printk_skb: 406 callbacks suppressed [ 53.085065][ T28] audit: type=1400 audit(1771344196.072:1047): avc: denied { read } for pid=4079 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.230077][ T28] audit: type=1400 audit(1771344196.192:1048): avc: denied { override_creds } for pid=4085 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.417127][ T28] audit: type=1400 audit(1771344196.402:1049): avc: denied { module_request } for pid=4088 comm="syz.1.210" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.549754][ T4101] netlink: 'syz.1.213': attribute type 83 has an invalid length. [ 53.557924][ T28] audit: type=1400 audit(1771344196.542:1050): avc: denied { read } for pid=4094 comm="syz.0.211" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.623041][ T28] audit: type=1400 audit(1771344196.542:1051): avc: denied { open } for pid=4094 comm="syz.0.211" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.675226][ T28] audit: type=1400 audit(1771344196.612:1052): avc: denied { wake_alarm } for pid=4099 comm="syz.3.212" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.716799][ T4104] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.214'. [ 53.729628][ T4104] netlink: zone id is out of range [ 53.735666][ T4104] netlink: zone id is out of range [ 53.741899][ T4104] netlink: zone id is out of range [ 53.750293][ T4104] netlink: zone id is out of range [ 53.758254][ T4104] netlink: zone id is out of range [ 53.764077][ T4104] netlink: zone id is out of range [ 53.771426][ T4104] netlink: zone id is out of range [ 53.777811][ T4104] netlink: zone id is out of range [ 53.784841][ T4104] netlink: del zone limit has 8 unknown bytes [ 54.004550][ T4117] loop4: detected capacity change from 0 to 128 [ 54.365700][ T4131] ref_ctr increment failed for inode: 0x126 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881052e2880 [ 54.557195][ T4136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 55.007581][ T4151] io-wq is not configured for unbound workers [ 55.081585][ T28] audit: type=1400 audit(1771344198.072:1053): avc: denied { create } for pid=4154 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.140208][ T4159] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 55.161035][ T28] audit: type=1400 audit(1771344198.072:1054): avc: denied { create } for pid=4154 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.181226][ T28] audit: type=1400 audit(1771344198.112:1055): avc: denied { bind } for pid=4154 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.334930][ T4168] Zero length message leads to an empty skb [ 55.584678][ T4184] loop3: detected capacity change from 0 to 128 [ 56.438393][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 56.447503][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 56.484469][ T28] audit: type=1400 audit(1771344199.472:1056): avc: denied { read } for pid=4198 comm="syz.2.249" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.553241][ T4205] netlink: 'syz.3.250': attribute type 13 has an invalid length. [ 56.612108][ T4206] loop3: detected capacity change from 0 to 512 [ 56.634586][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.250: iget: bad extra_isize 90 (inode size 256) [ 56.650680][ T4206] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.650881][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.250: error while reading EA inode 11 err=-117 [ 56.660082][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.660102][ C1] EXT4-fs (loop3): initial error at time 1771344199: ext4_xattr_inode_iget:441: inode 11 [ 56.660133][ C1] EXT4-fs (loop3): last error at time 1771344199: ext4_xattr_inode_iget:441: inode 11 [ 56.705676][ T4206] loop3: lost filesystem error report for type 5 error -117 [ 56.705911][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.250: iget: bad extra_isize 90 (inode size 256) [ 56.750446][ T4206] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.751098][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.250: error while reading EA inode 11 err=-117 [ 56.777384][ T4206] loop3: lost filesystem error report for type 5 error -117 [ 56.777920][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.250: iget: bad extra_isize 90 (inode size 256) [ 56.799096][ T4206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 56.799319][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.250: error while reading EA inode 18 err=-117 [ 56.821280][ T4206] loop3: lost filesystem error report for type 5 error -117 [ 56.821472][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.250: iget: bad extra_isize 90 (inode size 256) [ 56.842523][ T4206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 56.842733][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.250: error while reading EA inode 18 err=-117 [ 56.864420][ T4206] loop3: lost filesystem error report for type 5 error -117 [ 56.864693][ T4206] EXT4-fs (loop3): 1 orphan inode deleted [ 56.878526][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.990549][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.462748][ T4242] netlink: 'syz.2.264': attribute type 13 has an invalid length. [ 57.486965][ T4242] loop2: detected capacity change from 0 to 512 [ 57.498203][ T4244] bond1: (slave ip6gretap1): making interface the new active one [ 57.515609][ T4244] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 57.542680][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.264: iget: bad extra_isize 90 (inode size 256) [ 57.558783][ T4242] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.565967][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.264: error while reading EA inode 11 err=-117 [ 57.566051][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 57.593901][ C1] EXT4-fs (loop2): initial error at time 1771344200: ext4_xattr_inode_iget:441: inode 11 [ 57.603888][ C1] EXT4-fs (loop2): last error at time 1771344200: ext4_xattr_inode_iget:441: inode 11 [ 57.614011][ T4242] loop2: lost filesystem error report for type 5 error -117 [ 57.614601][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.264: iget: bad extra_isize 90 (inode size 256) [ 57.635588][ T4242] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.637769][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.264: error while reading EA inode 11 err=-117 [ 57.676162][ T4242] loop2: lost filesystem error report for type 5 error -117 [ 57.676456][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.264: iget: bad extra_isize 90 (inode size 256) [ 57.728873][ T4242] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 57.729063][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.264: error while reading EA inode 18 err=-117 [ 57.761068][ T4242] loop2: lost filesystem error report for type 5 error -117 [ 57.761269][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.264: iget: bad extra_isize 90 (inode size 256) [ 57.796097][ T4242] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 57.796350][ T4242] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.264: error while reading EA inode 18 err=-117 [ 57.962407][ T4242] loop2: lost filesystem error report for type 5 error -117 [ 57.962818][ T4242] EXT4-fs (loop2): 1 orphan inode deleted [ 58.007023][ T4242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.134566][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 58.134581][ T28] audit: type=1400 audit(1771344457.122:1065): avc: denied { append } for pid=4280 comm="syz.3.273" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.186228][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.203563][ T28] audit: type=1400 audit(1771344457.162:1066): avc: denied { setopt } for pid=4280 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.263381][ T28] audit: type=1400 audit(1771344457.162:1067): avc: denied { bind } for pid=4280 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.302409][ T28] audit: type=1400 audit(1771344457.162:1068): avc: denied { read } for pid=4280 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.341446][ T28] audit: type=1400 audit(1771344457.222:1069): avc: denied { write } for pid=4280 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.449148][ T28] audit: type=1400 audit(1771344457.282:1070): avc: denied { lock } for pid=4287 comm="syz.2.274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.721741][ T4233] Set syz1 is full, maxelem 65536 reached [ 58.903675][ T4359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.639226][ T28] audit: type=1400 audit(1771344458.632:1071): avc: denied { connect } for pid=4370 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.466712][ T28] audit: type=1400 audit(1771344459.462:1072): avc: denied { name_bind } for pid=4389 comm="syz.2.292" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.179993][ T4415] loop2: detected capacity change from 0 to 512 [ 61.186930][ T4415] ======================================================= [ 61.186930][ T4415] WARNING: The mand mount option has been deprecated and [ 61.186930][ T4415] and is ignored by this kernel. Remove the mand [ 61.186930][ T4415] option from the mount to silence this warning. [ 61.186930][ T4415] ======================================================= [ 61.232689][ T4415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.278700][ T4415] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.299: bad orphan inode 131083 [ 61.322286][ T4415] loop2: lost filesystem error report for type 5 error -117 [ 61.322837][ T4415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.424885][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.474124][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 63.558486][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 63.558532][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.558545][ T3322] Call Trace: [ 63.558552][ T3322] [ 63.558560][ T3322] __dump_stack+0x1d/0x30 [ 63.558620][ T3322] dump_stack_lvl+0x95/0xd0 [ 63.558722][ T3322] dump_stack+0x15/0x1b [ 63.558791][ T3322] dump_header+0x80/0x240 [ 63.558813][ T3322] oom_kill_process+0x295/0x350 [ 63.558841][ T3322] out_of_memory+0x97d/0xb80 [ 63.558911][ T3322] try_charge_memcg+0x62e/0xa10 [ 63.558941][ T3322] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 63.558973][ T3322] __swap_cache_prepare_and_add+0x386/0x530 [ 63.559029][ T3322] swap_cache_alloc_folio+0xa2/0x120 [ 63.559075][ T3322] swap_cluster_readahead+0x26e/0x3d0 [ 63.559103][ T3322] swapin_readahead+0xde/0x840 [ 63.559129][ T3322] ? __rcu_read_unlock+0x4e/0x70 [ 63.559160][ T3322] ? __perf_event_task_sched_in+0xa65/0xad0 [ 63.559231][ T3322] ? __list_add_valid_or_report+0x38/0xe0 [ 63.559259][ T3322] ? __rcu_read_unlock+0x4e/0x70 [ 63.559276][ T3322] ? swap_cache_get_folio+0x26f/0x280 [ 63.559299][ T3322] do_swap_page+0x309/0x2210 [ 63.559475][ T3322] ? __schedule+0x85a/0xd40 [ 63.559547][ T3322] ? __rcu_read_lock+0x36/0x50 [ 63.559637][ T3322] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 63.559662][ T3322] handle_mm_fault+0xb40/0x3020 [ 63.559745][ T3322] ? vma_start_read+0x1c7/0x2c0 [ 63.559768][ T3322] do_user_addr_fault+0x62f/0x1050 [ 63.559860][ T3322] ? trace_page_fault_user+0x1f/0xe0 [ 63.559956][ T3322] exc_page_fault+0x62/0xa0 [ 63.559978][ T3322] asm_exc_page_fault+0x26/0x30 [ 63.559995][ T3322] RIP: 0033:0x7f929e987817 [ 63.560014][ T3322] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 63.560032][ T3322] RSP: 002b:00007ffea52a72c0 EFLAGS: 00010202 [ 63.560133][ T3322] RAX: 0000000000000000 RBX: 000055555b614500 RCX: 00007f929e987817 [ 63.560161][ T3322] RDX: 00007ffea52a7300 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.560175][ T3322] RBP: 00007ffea52a736c R08: 0000000000000000 R09: 0000000000000000 [ 63.560267][ T3322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 63.560281][ T3322] R13: 00000000000927c0 R14: 000000000000f528 R15: 00007ffea52a73c0 [ 63.560345][ T3322] [ 63.564153][ T3322] memory: usage 241676kB, limit 307200kB, failcnt 4796 [ 63.836417][ T3322] memory+swap: usage 138148kB, limit 9007199254740988kB, failcnt 0 [ 63.855772][ T3322] kmem: usage 121132kB, limit 9007199254740988kB, failcnt 0 [ 63.888564][ T3322] Memory cgroup stats for /syz3: [ 63.888739][ T3322] cache 32768 [ 63.898135][ T3322] rss 40960 [ 63.901498][ T3322] shmem 0 [ 63.904510][ T3322] mapped_file 32768 [ 63.911777][ T3322] dirty 0 [ 63.914808][ T3322] writeback 0 [ 63.926641][ T3322] workingset_refault_anon 1435 [ 63.931961][ T3322] workingset_refault_file 0 [ 63.941469][ T3322] swap 16928768 [ 63.945500][ T3322] swapcached 17534976 [ 63.949707][ T3322] pgpgin 25083 [ 63.953112][ T3322] pgpgout 25060 [ 63.956863][ T3322] pgfault 36435 [ 63.960339][ T3322] pgmajfault 198 [ 63.963890][ T3322] inactive_anon 0 [ 63.968049][ T3322] active_anon 57344 [ 63.971867][ T3322] inactive_file 36864 [ 63.975852][ T3322] active_file 0 [ 64.036302][ T3322] unevictable 0 [ 64.039822][ T3322] hierarchical_memory_limit 314572800 [ 64.045244][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 64.089860][ T3322] total_cache 32768 [ 64.093723][ T3322] total_rss 40960 [ 64.116308][ T3322] total_shmem 0 [ 64.119843][ T3322] total_mapped_file 32768 [ 64.140585][ T3322] total_dirty 0 [ 64.146329][ T3322] total_writeback 0 [ 64.150159][ T3322] total_workingset_refault_anon 1435 [ 64.166815][ T3322] total_workingset_refault_file 0 [ 64.178071][ T3322] total_swap 16928768 [ 64.185063][ T3322] total_swapcached 17534976 [ 64.196997][ T3322] total_pgpgin 25083 [ 64.201667][ T3322] total_pgpgout 25060 [ 64.236137][ T3322] total_pgfault 36435 [ 64.240235][ T3322] total_pgmajfault 198 [ 64.244312][ T3322] total_inactive_anon 0 [ 64.290643][ T3322] total_active_anon 57344 [ 64.295013][ T3322] total_inactive_file 36864 [ 64.309937][ T3322] total_active_file 0 [ 64.314024][ T3322] total_unevictable 0 [ 64.326942][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.305,pid=4429,uid=0 [ 64.366058][ T3322] Memory cgroup out of memory: Killed process 4429 (syz.3.305) total-vm:96340kB, anon-rss:1264kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 64.665537][ T28] audit: type=1400 audit(1771344463.652:1073): avc: denied { cpu } for pid=4497 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.770100][ T4504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.049699][ T4504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.130121][ T4515] loop2: detected capacity change from 0 to 512 [ 65.154226][ T4504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.182470][ T28] audit: type=1400 audit(1771344464.162:1074): avc: denied { watch } for pid=4516 comm="syz.4.339" path="/68" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.240821][ T4504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.273677][ T28] audit: type=1400 audit(1771344464.262:1075): avc: denied { ioctl } for pid=4519 comm="syz.4.341" path="socket:[11230]" dev="sockfs" ino=11230 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.328517][ T40] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.350169][ T40] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.376878][ T40] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.385461][ T4515] EXT4-fs: Ignoring removed orlov option [ 65.395314][ T40] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.430444][ T4515] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 65.439994][ T4515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 65.449112][ T4515] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.335: corrupted in-inode xattr: e_value size too large [ 65.489995][ T4515] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.490292][ T4515] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.335: couldn't read orphan inode 15 (err -117) [ 65.499481][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.499500][ C1] EXT4-fs (loop2): initial error at time 1771344464: ext4_iget_extra_inode:5025: inode 15 [ 65.499534][ C1] EXT4-fs (loop2): last error at time 1771344464: ext4_iget_extra_inode:5025: inode 15 [ 65.538317][ T4515] loop2: lost filesystem error report for type 5 error -117 [ 65.541362][ T4515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.713730][ T4544] tipc: Started in network mode [ 65.718719][ T4544] tipc: Node identity baa972193053, cluster identity 4711 [ 65.726153][ T4544] tipc: Enabled bearer , priority 0 [ 65.753771][ T4544] syzkaller0: entered promiscuous mode [ 65.759707][ T4544] syzkaller0: entered allmulticast mode [ 65.766514][ T4544] tipc: Resetting bearer [ 65.774021][ T28] audit: type=1400 audit(1771344464.762:1076): avc: denied { shutdown } for pid=4547 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.834896][ T4553] loop3: detected capacity change from 0 to 512 [ 65.867176][ T4553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.887083][ T4553] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.351: bad orphan inode 131083 [ 65.897790][ T4553] loop3: lost filesystem error report for type 5 error -117 [ 65.898393][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.917988][ T4543] tipc: Resetting bearer [ 65.950901][ T4543] tipc: Disabling bearer [ 65.971479][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.063891][ T4565] netlink: 84 bytes leftover after parsing attributes in process `syz.3.352'. [ 66.086303][ T4564] syzkaller0: entered promiscuous mode [ 66.101974][ T4564] syzkaller0: entered allmulticast mode [ 66.116039][ T4565] openvswitch: netlink: Message has 8 unknown bytes. [ 66.272164][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.649369][ T4567] loop0: detected capacity change from 0 to 1024 [ 66.858159][ T4567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 66.879935][ T4567] System zones: 0-1, 3-36 [ 66.903463][ T4571] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.913126][ T4567] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.355: bad orphan inode 134217728 [ 66.932532][ T4567] loop0: lost filesystem error report for type 5 error -117 [ 66.956827][ T4567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.980388][ T4571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.017453][ T4571] syz.4.357 (4571) used greatest stack depth: 8968 bytes left [ 67.077099][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.429709][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 67.459938][ T28] audit: type=1400 audit(1771344466.452:1077): avc: denied { nlmsg_write } for pid=4599 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.569870][ T28] audit: type=1400 audit(1771344467.552:1078): avc: denied { listen } for pid=4610 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.880580][ T28] audit: type=1400 audit(1771344467.862:1079): avc: denied { getopt } for pid=4619 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.217670][ T4637] netlink: 'syz.1.381': attribute type 39 has an invalid length. [ 69.245216][ T4608] loop4: detected capacity change from 0 to 1024 [ 69.283027][ T4637] hsr_slave_1 (unregistering): left promiscuous mode [ 69.334275][ T4608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 69.354540][ T4608] System zones: 0-1, 3-36 [ 69.408797][ T4608] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.371: bad orphan inode 134217728 [ 69.421167][ T4608] loop4: lost filesystem error report for type 5 error -117 [ 69.438216][ T4608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.639554][ T28] audit: type=1400 audit(1771344468.632:1080): avc: denied { bind } for pid=4657 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 69.836881][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.093733][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 70.315109][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 70.581402][ T28] audit: type=1400 audit(1771344469.572:1081): avc: denied { connect } for pid=4707 comm="syz.0.411" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.043315][ T4736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.422'. [ 71.637481][ T4751] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.657341][ T4751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.665051][ T4751] IPv6: NLM_F_CREATE should be set when creating new route [ 71.934563][ T28] audit: type=1400 audit(1771344470.922:1082): avc: denied { setopt } for pid=4756 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.370130][ T4767] loop3: detected capacity change from 0 to 1024 [ 72.378831][ T4767] EXT4-fs: Ignoring removed orlov option [ 72.407533][ T4767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.440233][ T28] audit: type=1400 audit(1771344471.422:1083): avc: denied { map } for pid=4766 comm="syz.3.432" path="/84/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.513385][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.570136][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.575513][ T28] audit: type=1400 audit(1771344471.422:1084): avc: denied { execute } for pid=4766 comm="syz.3.432" path="/84/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.621016][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.743435][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 72.781402][ T4783] loop2: detected capacity change from 0 to 4096 [ 72.911119][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.260866][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.320750][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 73.343366][ T4793] bond2: entered promiscuous mode [ 73.348524][ T4793] bond2: entered allmulticast mode [ 73.354054][ T4793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.375081][ T4793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.466902][ T4800] netlink: 'syz.1.443': attribute type 13 has an invalid length. [ 73.475788][ T4793] bond3: entered promiscuous mode [ 73.496259][ T4793] bond3: entered allmulticast mode [ 73.508112][ T4793] bond2: (slave bond3): Enslaving as an active interface with an up link [ 73.735782][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.743016][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.940531][ T4800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.951040][ T4817] loop2: detected capacity change from 0 to 128 [ 73.961056][ T4800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.014220][ T4817] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.034363][ T4817] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.055411][ T28] audit: type=1400 audit(1771344473.042:1085): avc: denied { create } for pid=4816 comm="syz.2.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.085030][ T30] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.102532][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.113255][ T30] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.141524][ T1507] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.165652][ T1507] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.195387][ T28] audit: type=1400 audit(1771344473.182:1086): avc: denied { watch_reads } for pid=4824 comm="syz.2.452" path="/80" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.298387][ T28] audit: type=1400 audit(1771344473.262:1087): avc: denied { create } for pid=4827 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.339840][ T4831] loop2: detected capacity change from 0 to 1024 [ 74.349382][ T28] audit: type=1400 audit(1771344473.272:1088): avc: denied { write } for pid=4827 comm="syz.2.455" path="socket:[13060]" dev="sockfs" ino=13060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.374214][ T4831] EXT4-fs: Ignoring removed orlov option [ 74.384115][ T4831] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.398795][ T4831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.433975][ T28] audit: type=1400 audit(1771344473.422:1089): avc: denied { add_name } for pid=4830 comm="syz.2.457" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.776393][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.231276][ T28] audit: type=1400 audit(1771344474.222:1090): avc: denied { name_bind } for pid=4857 comm="syz.1.466" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.670463][ T4866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.699427][ T4868] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 75.717998][ T4868] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 75.759460][ T4866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.806026][ T28] audit: type=1326 audit(1771344474.772:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 75.851943][ T4866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.892674][ T28] audit: type=1326 audit(1771344474.772:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 75.950085][ T4866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.976796][ T28] audit: type=1326 audit(1771344474.782:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.027870][ T4874] process 'syz.4.473' launched './file0' with NULL argv: empty string added [ 76.047172][ T28] audit: type=1326 audit(1771344474.782:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.097893][ T1507] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118100][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118347][ T28] audit: type=1326 audit(1771344474.782:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.159030][ T40] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169748][ T40] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.215859][ T28] audit: type=1326 audit(1771344474.782:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.274914][ T28] audit: type=1326 audit(1771344474.782:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.302096][ T4886] loop4: detected capacity change from 0 to 128 [ 76.340839][ T4886] FAT-fs (loop4): bogus number of reserved sectors [ 76.348000][ T4886] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 76.363938][ T28] audit: type=1326 audit(1771344474.782:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.417662][ T4886] FAT-fs (loop4): Can't find a valid FAT filesystem [ 76.448719][ T4886] netlink: 'syz.4.478': attribute type 39 has an invalid length. [ 76.466021][ T28] audit: type=1326 audit(1771344474.782:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 76.491274][ T4886] hsr_slave_1 (unregistering): left promiscuous mode [ 76.518498][ T28] audit: type=1326 audit(1771344474.782:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x7ffc0000 [ 77.183097][ T4922] loop3: detected capacity change from 0 to 1024 [ 77.230169][ T4922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 77.241709][ T4922] System zones: 0-1, 3-36 [ 77.256363][ T4922] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.494: bad orphan inode 134217728 [ 77.269547][ T4922] loop3: lost filesystem error report for type 5 error -117 [ 77.279690][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.490967][ T4934] loop0: detected capacity change from 0 to 128 [ 77.512828][ T4934] FAT-fs (loop0): bogus number of reserved sectors [ 77.527591][ T4934] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 77.540900][ T4934] FAT-fs (loop0): Can't find a valid FAT filesystem [ 77.569651][ T4934] netlink: 'syz.0.496': attribute type 39 has an invalid length. [ 77.703051][ T4934] hsr_slave_1 (unregistering): left promiscuous mode [ 78.706381][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.998638][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.041031][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.056081][ T4960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.094472][ T4977] SELinux: Context : is not valid (left unmapped). [ 80.231041][ T4998] tipc: Started in network mode [ 80.236016][ T4998] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 80.245065][ T4998] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 80.253479][ T4998] tipc: Enabled bearer , priority 10 [ 80.441364][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 80.506776][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 80.626679][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 80.695768][ T5026] loop2: detected capacity change from 0 to 2048 [ 80.726749][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 80.769571][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.783595][ T5026] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 80.821005][ T5026] netlink: 199792 bytes leftover after parsing attributes in process `syz.2.529'. [ 80.907633][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.920823][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 80.920840][ T28] audit: type=1400 audit(1771344479.912:1137): avc: denied { allowed } for pid=5034 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.366268][ T9] tipc: Node number set to 1 [ 81.546781][ T5046] netlink: 'syz.3.536': attribute type 4 has an invalid length. [ 81.730549][ T28] audit: type=1400 audit(1771344480.722:1138): avc: denied { append } for pid=5048 comm="syz.3.537" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.755392][ T5004] syz.1.522 (5004) used greatest stack depth: 6848 bytes left [ 81.795245][ T5051] loop4: detected capacity change from 0 to 4096 [ 81.903354][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.173952][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.315784][ T5077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.316085][ T28] audit: type=1400 audit(1771344481.302:1139): avc: denied { create } for pid=5075 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.355252][ T5077] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.373333][ T28] audit: type=1400 audit(1771344481.302:1140): avc: denied { write } for pid=5075 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.564852][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.592853][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.613508][ T5080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.683575][ T5091] geneve2: entered promiscuous mode [ 82.696185][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 37164 - 0 [ 82.746507][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 37164 - 0 [ 82.762959][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 37164 - 0 [ 82.772383][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 37164 - 0 [ 82.900545][ T28] audit: type=1400 audit(1771344481.892:1141): avc: denied { ioctl } for pid=5105 comm="syz.3.558" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.928404][ T5106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.558'. [ 83.259341][ T28] audit: type=1400 audit(1771344482.242:1142): avc: denied { read } for pid=5122 comm="syz.1.565" lport=39915 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.225314][ T28] audit: type=1400 audit(1771344483.202:1143): avc: denied { read } for pid=5138 comm="syz.4.571" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.275164][ T28] audit: type=1400 audit(1771344483.252:1144): avc: denied { open } for pid=5138 comm="syz.4.571" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.300238][ T28] audit: type=1400 audit(1771344483.252:1145): avc: denied { ioctl } for pid=5138 comm="syz.4.571" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.436179][ T28] audit: type=1400 audit(1771344483.422:1146): avc: denied { connect } for pid=5150 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.614643][ T5156] loop3: detected capacity change from 0 to 128 [ 84.646017][ T5156] FAT-fs (loop3): bogus number of reserved sectors [ 84.671612][ T5160] SET target dimension over the limit! [ 84.679403][ T5156] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 84.692272][ T5156] FAT-fs (loop3): Can't find a valid FAT filesystem [ 84.741777][ T5156] netlink: 'syz.3.575': attribute type 39 has an invalid length. [ 84.798745][ T5156] hsr_slave_1 (unregistering): left promiscuous mode [ 85.087621][ T5173] loop3: detected capacity change from 0 to 512 [ 85.169028][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.183382][ T5173] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.350558][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.537563][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 85.579968][ T5184] netlink: 92 bytes leftover after parsing attributes in process `syz.3.584'. [ 86.725019][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 86.725035][ T28] audit: type=1400 audit(1771344485.712:1149): avc: denied { write } for pid=5224 comm="syz.0.600" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.778165][ T28] audit: type=1400 audit(1771344486.772:1150): avc: denied { read } for pid=5237 comm="syz.2.606" path="socket:[20730]" dev="sockfs" ino=20730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.063829][ T5246] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5246 comm=syz.1.617 [ 88.064387][ T28] audit: type=1400 audit(1771344487.052:1151): avc: denied { bind } for pid=5245 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.098916][ T5246] netlink: 232 bytes leftover after parsing attributes in process `syz.1.617'. [ 88.160020][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.175572][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.219918][ T5247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.259883][ T5213] syz.4.597 (5213) used greatest stack depth: 6088 bytes left [ 88.284176][ T5251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'. [ 88.360681][ T5256] netlink: 'syz.4.610': attribute type 4 has an invalid length. [ 88.363347][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 88.400943][ T5256] netlink: 'syz.4.610': attribute type 4 has an invalid length. [ 88.468276][ T9] kernel read not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 88.534439][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 88.710398][ T28] audit: type=1400 audit(1771344487.702:1152): avc: denied { bind } for pid=5272 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.743642][ T5274] syz.2.628 uses obsolete (PF_INET,SOCK_PACKET) [ 88.758959][ T28] audit: type=1400 audit(1771344487.732:1153): avc: denied { setopt } for pid=5272 comm="syz.2.628" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.790995][ T28] audit: type=1400 audit(1771344487.752:1154): avc: denied { read } for pid=5272 comm="syz.2.628" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.832877][ T28] audit: type=1400 audit(1771344487.812:1155): avc: denied { ioctl } for pid=5277 comm="syz.1.620" path="socket:[21598]" dev="sockfs" ino=21598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.938606][ T5286] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 88.970108][ T5286] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 89.162843][ T9] kernel read not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 89.212420][ T5304] loop2: detected capacity change from 0 to 512 [ 89.256323][ T5304] msdos: Bad value for 'check' [ 89.508530][ T5313] netlink: 'syz.2.636': attribute type 4 has an invalid length. [ 89.527441][ T5313] netlink: 'syz.2.636': attribute type 4 has an invalid length. [ 90.134111][ T5333] loop3: detected capacity change from 0 to 1024 [ 90.175168][ T5333] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.189491][ T5333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 90.252631][ T5333] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.643: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.312301][ T5333] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.312424][ T5333] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 90.321758][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 90.321778][ C0] EXT4-fs (loop3): initial error at time 1771344489: ext4_map_blocks:776: inode 3: block 2 [ 90.321829][ C0] EXT4-fs (loop3): last error at time 1771344489: ext4_map_blocks:776: inode 3: block 2 [ 90.403740][ T5333] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.643: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.444011][ T5344] loop4: detected capacity change from 0 to 256 [ 90.445188][ T5333] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.469208][ T5333] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 90.494517][ T5344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.523414][ T5333] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.643: Failed to acquire dquot type 0 [ 90.561210][ T5333] loop3: lost filesystem error report for type 5 error -117 [ 90.577553][ T5333] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 90.596556][ T5333] loop3: lost filesystem error report for type 5 error -117 [ 90.596711][ T5333] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.643: mark_inode_dirty error [ 90.639315][ T5333] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.639881][ T5333] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 90.666194][ T5333] EXT4-fs (loop3): 1 orphan inode deleted [ 90.691061][ T5333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.738684][ T42] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.757551][ T42] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.763906][ T42] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 91.237068][ T42] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 0 [ 91.301951][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.323465][ T3322] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.341647][ T3322] loop3: lost filesystem error report for type 5 error -117 [ 91.341788][ T3322] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 91.357315][ T5358] tipc: Failed to remove unknown binding: 66,0,0/1:2886664454/2886664455 [ 91.360449][ T3322] loop3: lost filesystem error report for type 5 error -117 [ 91.367161][ T3322] EXT4-fs error (device loop3): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 91.367884][ T5356] syzkaller0: entered promiscuous mode [ 91.389196][ T5358] tipc: Failed to remove unknown binding: 66,0,0/1:2886664454/2886664455 [ 91.392122][ T3322] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.400929][ T5356] syzkaller0: entered allmulticast mode [ 91.566213][ T5367] SELinux: failed to load policy [ 91.875444][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 91.875462][ T28] audit: type=1400 audit(1771344490.862:1181): avc: denied { mounton } for pid=5372 comm="syz.3.659" path="/131/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.923207][ T5383] loop2: detected capacity change from 0 to 1024 [ 91.948354][ T5383] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.976761][ T5383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 91.987258][ T5383] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.663: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.001377][ T5383] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.001631][ T5383] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 92.010706][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.010733][ C1] EXT4-fs (loop2): initial error at time 1771344490: ext4_map_blocks:776: inode 3: block 2 [ 92.010771][ C1] EXT4-fs (loop2): last error at time 1771344490: ext4_map_blocks:776: inode 3: block 2 [ 92.045886][ T5383] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.663: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.060377][ T5383] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.060520][ T5383] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 92.078753][ T5383] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.663: Failed to acquire dquot type 0 [ 92.090941][ T5383] loop2: lost filesystem error report for type 5 error -117 [ 92.098675][ T5383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 92.108480][ T5383] loop2: lost filesystem error report for type 5 error -117 [ 92.108582][ T5383] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.663: mark_inode_dirty error [ 92.127494][ T5383] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.127637][ T5383] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 92.147574][ T5383] EXT4-fs (loop2): 1 orphan inode deleted [ 92.153922][ T5383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.206010][ T1507] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.226096][ T1507] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 92.234962][ T1507] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 0 [ 92.249456][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.259146][ T3313] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.272476][ T3313] loop2: lost filesystem error report for type 5 error -117 [ 92.272612][ T3313] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 92.289485][ T3313] loop2: lost filesystem error report for type 5 error -117 [ 92.296076][ T3313] EXT4-fs error (device loop2): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 92.315143][ T3313] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.366176][ T28] audit: type=1400 audit(1771344491.352:1182): avc: denied { bind } for pid=5398 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.400076][ T28] audit: type=1400 audit(1771344491.352:1183): avc: denied { listen } for pid=5398 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.426322][ T28] audit: type=1400 audit(1771344491.352:1184): avc: denied { accept } for pid=5398 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.446905][ T28] audit: type=1400 audit(1771344491.352:1185): avc: denied { read } for pid=5398 comm="syz.0.666" path="socket:[21863]" dev="sockfs" ino=21863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.530482][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'. [ 92.577242][ T28] audit: type=1400 audit(1771344491.572:1186): avc: denied { read } for pid=5406 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.463996][ T5425] syzkaller0: entered promiscuous mode [ 94.494177][ T5425] syzkaller0: entered allmulticast mode [ 94.552084][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 94.767908][ T28] audit: type=1400 audit(1771344493.762:1187): avc: denied { write } for pid=5448 comm="syz.0.685" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.141693][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 95.163034][ T5463] syz_tun (unregistering): left allmulticast mode [ 95.397524][ T5481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.518999][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 95.548477][ T5484] vlan2: entered promiscuous mode [ 95.559276][ T5484] bridge0: entered promiscuous mode [ 95.836207][ T5498] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 95.862680][ T5502] x_tables: duplicate underflow at hook 2 [ 96.009840][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 96.382707][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 96.608574][ T5521] netlink: 'syz.4.715': attribute type 16 has an invalid length. [ 96.627845][ T5521] netlink: 'syz.4.715': attribute type 17 has an invalid length. [ 96.643548][ T5522] syzkaller0: entered promiscuous mode [ 96.656055][ T5522] syzkaller0: entered allmulticast mode [ 96.694178][ T5521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.129549][ T5537] loop2: detected capacity change from 0 to 512 [ 97.156065][ T5537] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 97.169405][ T5542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 97.216065][ T5542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5542 comm=syz.3.723 [ 97.238366][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 97.238382][ T28] audit: type=1400 audit(1771344752.235:1194): avc: denied { create } for pid=5544 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.251388][ T5547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 97.305863][ T28] audit: type=1400 audit(1771344752.295:1195): avc: denied { write } for pid=5544 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.320822][ T5547] netlink: 'syz.3.725': attribute type 5 has an invalid length. [ 97.341937][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 97.443900][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.470349][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.859394][ T5562] loop2: detected capacity change from 0 to 512 [ 97.893046][ T5562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.900297][ T5560] syzkaller0: entered promiscuous mode [ 97.917684][ T5560] syzkaller0: entered allmulticast mode [ 97.930144][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.966102][ T5562] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.009766][ T5562] EXT4-fs (loop2): shut down requested (0) [ 98.026845][ T5562] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 98.072304][ T5562] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 98.082724][ T28] audit: type=1400 audit(1771344753.065:1196): avc: denied { mounton } for pid=5571 comm="syz.1.734" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.115903][ T5562] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 98.137799][ T28] audit: type=1400 audit(1771344753.105:1197): avc: denied { read } for pid=5561 comm="syz.2.731" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.169428][ T28] audit: type=1400 audit(1771344753.125:1198): avc: denied { unmount } for pid=5571 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.189767][ T28] audit: type=1400 audit(1771344753.135:1199): avc: denied { open } for pid=5561 comm="syz.2.731" path="/147/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.051707][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.275683][ T28] audit: type=1400 audit(1771344754.265:1200): avc: denied { mounton } for pid=5597 comm="syz.0.745" path="/file0" dev="ramfs" ino=22313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 100.046013][ T5616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 100.074832][ T5616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5616 comm=syz.1.752 [ 100.136640][ T5622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.143949][ T28] audit: type=1400 audit(1771344755.135:1201): avc: denied { create } for pid=5619 comm="syz.4.755" name="@" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.246415][ T28] audit: type=1400 audit(1771344755.235:1202): avc: denied { read write } for pid=5619 comm="syz.4.755" name="@" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.275169][ T28] audit: type=1400 audit(1771344755.235:1203): avc: denied { open } for pid=5619 comm="syz.4.755" path="/148/@" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.910678][ T5647] loop4: detected capacity change from 0 to 1764 [ 102.581339][ T5697] netlink: 'syz.4.784': attribute type 30 has an invalid length. [ 102.718843][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 103.316121][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 103.316168][ T28] audit: type=1400 audit(1771345014.316:1208): avc: denied { write } for pid=5706 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.846454][ T5729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 103.855432][ T5729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 103.864661][ T5729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 103.996325][ T5737] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.996325][ T5737] The task syz.4.797 (5737) triggered the difference, watch for misbehavior. [ 104.241080][ T28] audit: type=1400 audit(1771345015.236:1209): avc: denied { connect } for pid=5741 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.367778][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.380187][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.392586][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.405011][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.417411][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.429837][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.442191][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.454569][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.467030][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.479527][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5747 comm=syz.1.802 [ 104.742057][ T28] audit: type=1400 audit(1771345015.736:1210): avc: denied { setopt } for pid=5759 comm="syz.4.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.780839][ T28] audit: type=1400 audit(1771345015.776:1211): avc: denied { setopt } for pid=5761 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.824089][ T5764] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 104.830697][ T5764] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.838601][ T5764] vhci_hcd vhci_hcd.0: Device attached [ 104.846491][ T5766] vhci_hcd: connection closed [ 104.846633][ T30] vhci_hcd vhci_hcd.0: stop threads [ 104.857227][ T30] vhci_hcd vhci_hcd.0: release socket [ 104.865152][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 104.883911][ T28] audit: type=1400 audit(1771345015.876:1212): avc: denied { write } for pid=5768 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.271751][ T28] audit: type=1400 audit(1771345272.269:1213): avc: denied { create } for pid=5776 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.297025][ T5775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.814'. [ 105.331324][ T5784] loop4: detected capacity change from 0 to 764 [ 105.350821][ T5784] rock: directory entry would overflow storage [ 105.357201][ T5784] rock: sig=0x4654, size=5, remaining=4 [ 105.588686][ T28] audit: type=1400 audit(1771345272.569:1214): avc: denied { read } for pid=5790 comm="syz.3.819" path="socket:[22717]" dev="sockfs" ino=22717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.652437][ T5813] loop3: detected capacity change from 0 to 1024 [ 106.748168][ T5813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.781800][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.645745][ T5827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.828'. [ 107.684990][ T28] audit: type=1401 audit(1771345274.669:1215): op=setxattr invalid_context=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 [ 109.589537][ T5864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 109.757856][ T5865] selinux_netlink_send: 67 callbacks suppressed [ 109.757874][ T5865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5865 comm=syz.0.844 [ 109.854264][ T5869] loop2: detected capacity change from 0 to 128 [ 109.932346][ T28] audit: type=1400 audit(1771345276.929:1216): avc: denied { getopt } for pid=5870 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.981441][ T28] audit: type=1400 audit(1771345276.979:1217): avc: denied { getopt } for pid=5872 comm="syz.2.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.088335][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.850'. [ 110.169751][ T5878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5878 comm=syz.0.850 [ 110.220858][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 110.332023][ T5882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5882 comm=syz.1.852 [ 110.483701][ T5888] capability: warning: `syz.0.854' uses deprecated v2 capabilities in a way that may be insecure [ 110.709988][ T5901] loop2: detected capacity change from 0 to 512 [ 110.868913][ T5901] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 110.939076][ T5901] EXT4-fs (loop2): mount failed [ 111.543833][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.864'. [ 111.571645][ T5927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5927 comm=syz.2.864 [ 111.601037][ T5927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.864'. [ 111.622034][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.864'. [ 111.698860][ T28] audit: type=1400 audit(1771345278.689:1218): avc: denied { firmware_load } for pid=5858 comm="syz.4.842" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 112.390378][ T5946] tipc: Failed to remove unknown binding: 66,0,0/0:4281988892/4281988894 [ 112.412125][ T5946] tipc: Failed to remove unknown binding: 66,0,0/0:4281988892/4281988893 [ 112.438571][ T5946] tipc: Failed to remove unknown binding: 66,0,0/0:4281988892/4281988894 [ 112.460706][ T5946] tipc: Failed to remove unknown binding: 66,0,0/0:4281988892/4281988893 [ 112.693530][ T5952] loop3: detected capacity change from 0 to 512 [ 112.713989][ T5952] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 112.728921][ T5952] EXT4-fs (loop3): mount failed [ 112.920428][ T28] audit: type=1400 audit(1771345279.919:1219): avc: denied { kexec_image_load } for pid=5955 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 112.995531][ T5956] loop2: detected capacity change from 0 to 512 [ 113.004737][ T5962] netlink: 'syz.3.878': attribute type 83 has an invalid length. [ 113.036493][ T5956] EXT4-fs: Ignoring removed bh option [ 113.042167][ T5956] EXT4-fs: Ignoring removed oldalloc option [ 113.127382][ T5956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.141942][ T5956] EXT4-fs (loop2): 1 truncate cleaned up [ 113.149518][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.249211][ T5970] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 113.276202][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 113.286737][ T28] audit: type=1400 audit(1771345280.239:1220): avc: denied { create } for pid=5965 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.398662][ T28] audit: type=1400 audit(1771345280.249:1221): avc: denied { write } for pid=5965 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.669995][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.941012][ T5991] loop2: detected capacity change from 0 to 512 [ 113.991365][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.038313][ T5991] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.817299][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.136808][ T6015] syz_tun: entered allmulticast mode [ 115.143360][ T28] audit: type=1400 audit(1771345282.139:1222): avc: denied { ioctl } for pid=6014 comm="syz.1.897" path="/196/file2" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.146553][ T6015] syz_tun: left allmulticast mode [ 115.996971][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 116.078588][ T6032] IPVS: Error connecting to the multicast addr [ 116.405660][ T28] audit: type=1400 audit(1771345283.399:1223): avc: denied { getopt } for pid=6035 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.942657][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.960841][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.972981][ T28] audit: type=1400 audit(1771345283.939:1224): avc: denied { read write } for pid=6050 comm="syz.2.912" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.000348][ T28] audit: type=1400 audit(1771345283.939:1225): avc: denied { open } for pid=6050 comm="syz.2.912" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.066789][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 117.117494][ T6051] bond0: (slave bond_slave_0): Releasing backup interface [ 117.774638][ T28] audit: type=1400 audit(1771345284.759:1226): avc: denied { read } for pid=6059 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.831817][ T28] audit: type=1400 audit(1771345284.829:1227): avc: denied { watch } for pid=6069 comm="syz.0.920" path=2F6D656D66643A5217084B8558A31BC7701310A846B42E27198BE2D8F8A2317B2E3B3017110A8DFAA8051BDD2AF8F35F1AD14616884E23C2B11C05202864656C6574656429 dev="tmpfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.908347][ T6075] loop3: detected capacity change from 0 to 512 [ 117.961274][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.137296][ T6075] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.774884][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.872492][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 118.880239][ T6091] syzkaller1: entered promiscuous mode [ 118.896224][ T6091] syzkaller1: entered allmulticast mode [ 118.917860][ T6088] IPVS: Error connecting to the multicast addr [ 118.967627][ T28] audit: type=1400 audit(1771345285.959:1228): avc: denied { append } for pid=6092 comm="syz.3.928" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.243099][ T6106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.249653][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.259148][ T6106] vhci_hcd vhci_hcd.0: Device attached [ 119.266408][ T6106] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 119.272936][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.282277][ T6106] vhci_hcd vhci_hcd.0: Device attached [ 119.287582][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 119.298975][ T6112] bond0: (slave bond_slave_0): Releasing backup interface [ 119.369228][ T6109] vhci_hcd: connection closed [ 119.369557][ T6107] vhci_hcd: connection closed [ 119.369750][ T12] vhci_hcd vhci_hcd.2: stop threads [ 119.384404][ T12] vhci_hcd vhci_hcd.2: release socket [ 119.389890][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 119.395763][ T12] vhci_hcd vhci_hcd.2: stop threads [ 119.401121][ T12] vhci_hcd vhci_hcd.2: release socket [ 119.406681][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 119.436016][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 120.717626][ T28] audit: type=1400 audit(1771345287.709:1229): avc: denied { sqpoll } for pid=6136 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.745990][ T28] audit: type=1400 audit(1771345287.719:1230): avc: denied { connect } for pid=6130 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.783829][ T28] audit: type=1400 audit(1771345287.779:1231): avc: denied { listen } for pid=6154 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.844522][ T6159] xfrm0: entered promiscuous mode [ 120.859009][ T28] audit: type=1400 audit(1771345287.849:1232): avc: denied { accept } for pid=6154 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.523637][ T6193] netlink: 'syz.4.960': attribute type 4 has an invalid length. [ 121.876007][ T3395] Process accounting resumed [ 122.346185][ T28] audit: type=1400 audit(1771345289.339:1233): avc: denied { read } for pid=6223 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.701279][ T6228] tipc: Failed to remove unknown binding: 66,1,1/0:2881330646/2881330648 [ 122.715048][ T6231] loop2: detected capacity change from 0 to 512 [ 122.735309][ T6231] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 122.741974][ T6228] tipc: Failed to remove unknown binding: 66,1,1/0:2881330646/2881330648 [ 122.936040][ T28] audit: type=1400 audit(1771345289.929:1234): avc: denied { connect } for pid=6239 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.989232][ T28] audit: type=1400 audit(1771345289.929:1235): avc: denied { read } for pid=6239 comm="syz.4.976" path="socket:[23256]" dev="sockfs" ino=23256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.037788][ T28] audit: type=1400 audit(1771345289.989:1236): avc: denied { setopt } for pid=6243 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.099606][ T28] audit: type=1400 audit(1771345289.989:1237): avc: denied { accept } for pid=6243 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.652266][ T6254] loop2: detected capacity change from 0 to 1024 [ 123.686968][ T6254] EXT4-fs: Ignoring removed orlov option [ 123.778973][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.866660][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.914600][ T28] audit: type=1326 audit(1771345290.899:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 124.450287][ T6274] loop2: detected capacity change from 0 to 512 [ 124.457500][ T6252] syz.1.980 (6252) used greatest stack depth: 4344 bytes left [ 124.498594][ T6274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.541500][ T6274] EXT4-fs (loop2): 1 truncate cleaned up [ 124.557152][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.023301][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.444646][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 125.499380][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 125.670115][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 125.702706][ T6321] hsr_slave_0: left promiscuous mode [ 126.095426][ T6336] netlink: 'syz.4.1011': attribute type 13 has an invalid length. [ 126.352940][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 126.490672][ T6352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6352 comm=syz.2.1016 [ 128.080269][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6396 comm=syz.2.1029 [ 128.252226][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 128.252244][ T28] audit: type=1400 audit(1771345295.249:1310): avc: denied { setattr } for pid=6402 comm="syz.3.1033" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.870318][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 128.880483][ T6431] hsr_slave_0: left promiscuous mode [ 129.559311][ T28] audit: type=1326 audit(1771345296.549:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.583214][ T28] audit: type=1326 audit(1771345296.549:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.612735][ T28] audit: type=1326 audit(1771345296.549:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.663483][ T28] audit: type=1326 audit(1771345296.549:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.713690][ T28] audit: type=1326 audit(1771345296.559:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.737229][ T28] audit: type=1326 audit(1771345296.609:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d0d1c629 code=0x7ffc0000 [ 129.760640][ T28] audit: type=1326 audit(1771345296.609:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84d0d1c392 code=0x7ffc0000 [ 129.784341][ T28] audit: type=1326 audit(1771345296.609:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f84d0d1c427 code=0x7ffc0000 [ 129.808064][ T28] audit: type=1326 audit(1771345296.609:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f84d0cd9391 code=0x7ffc0000 [ 130.224477][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 130.236832][ T6467] hsr_slave_0: left promiscuous mode [ 130.812049][ T6473] xfrm0: entered promiscuous mode [ 132.498909][ T6507] netlink: 'syz.1.1072': attribute type 4 has an invalid length. [ 132.573568][ T6508] netlink: 'syz.1.1072': attribute type 4 has an invalid length. [ 134.534039][ T6515] bond1: left promiscuous mode [ 134.539871][ T6515] bridge1: left promiscuous mode [ 134.545192][ T6515] bond1: left allmulticast mode [ 134.547906][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 134.550453][ T6515] bridge1: left allmulticast mode [ 134.564546][ T6515] bond2: left promiscuous mode [ 134.569857][ T6515] bond3: left promiscuous mode [ 134.574739][ T6515] bond2: left allmulticast mode [ 134.580348][ T6515] bond3: left allmulticast mode [ 134.657172][ T6530] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1079'. [ 134.666828][ T6530] netlink: 3074 bytes leftover after parsing attributes in process `syz.3.1079'. [ 134.840784][ T6533] loop2: detected capacity change from 0 to 8192 [ 134.908777][ T6541] loop3: detected capacity change from 0 to 1024 [ 134.942273][ T6541] EXT4-fs: Ignoring removed nobh option [ 134.996228][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.033427][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.373180][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'. [ 135.426639][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.440281][ T6554] netlink: 'syz.4.1086': attribute type 13 has an invalid length. [ 135.463233][ T6555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6555 comm=syz.2.1084 [ 135.487457][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 135.521157][ T6554] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 135.552248][ T6561] team0 (unregistering): Port device team_slave_0 removed [ 135.577564][ T6561] team0 (unregistering): Port device team_slave_1 removed [ 135.607144][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 135.607162][ T28] audit: type=1400 audit(1771345302.599:1410): avc: denied { checkpoint_restore } for pid=6563 comm="syz.2.1090" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.699642][ T6570] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.819755][ T6581] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.858342][ T6581] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.943258][ T6581] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.990030][ T6581] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.090128][ T70] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.111094][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.128545][ T70] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.161651][ T70] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.610308][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 136.647191][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 136.744106][ T6619] loop3: detected capacity change from 0 to 1024 [ 136.796237][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.916074][ T28] audit: type=1326 audit(1771345303.899:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.2.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98e770c629 code=0x0 [ 136.917522][ T6619] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.036071][ T28] audit: type=1400 audit(1771345304.029:1412): avc: denied { map } for pid=6631 comm="syz.0.1114" path="socket:[26702]" dev="sockfs" ino=26702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.078365][ T6619] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.1110: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.113864][ T6619] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 137.126557][ T6619] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.126557][ T6619] [ 137.207832][ T1688] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 137.222763][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 137.238068][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 137.247029][ T1688] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 137.279437][ T1688] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.279437][ T1688] [ 137.306925][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.345783][ T28] audit: type=1400 audit(1771345304.339:1413): avc: denied { create } for pid=6640 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 137.577823][ T6643] loop3: detected capacity change from 0 to 512 [ 137.606815][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.672698][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.066971][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 139.676105][ T6693] __nla_validate_parse: 1 callbacks suppressed [ 139.676122][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 139.744368][ T6691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.780162][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 139.885221][ T6693] macvlan2: entered promiscuous mode [ 139.902780][ T6693] macvlan2: entered allmulticast mode [ 140.158196][ T6702] serio: Serial port ttyS3 [ 140.625217][ T6713] loop3: detected capacity change from 0 to 512 [ 140.639090][ T6713] EXT4-fs: Ignoring removed bh option [ 140.680244][ T6713] EXT4-fs: inline encryption not supported [ 140.690693][ T6713] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.728058][ T6713] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.739958][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 140.786087][ T6713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1136: bg 0: block 248: padding at end of block bitmap is not set [ 140.800632][ T6713] loop3: lost filesystem error report for type 5 error -117 [ 140.801358][ T6713] Quota error (device loop3): write_blk: dquota write failed [ 140.801453][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 140.808786][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 140.808805][ C1] EXT4-fs (loop3): last error at time 1771345307: ext4_validate_block_bitmap:441 [ 140.843601][ T6713] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 140.853652][ T6713] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1136: Failed to acquire dquot type 1 [ 140.864976][ T6713] loop3: lost filesystem error report for type 5 error -117 [ 140.885414][ T6713] EXT4-fs (loop3): 1 truncate cleaned up [ 140.906503][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 141.229902][ T6724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6724 comm=syz.0.1142 [ 141.326998][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 141.387862][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 141.484217][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 141.589293][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 141.649287][ T6739] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1150'. [ 141.771524][ T6755] loop2: detected capacity change from 0 to 128 [ 141.785781][ T28] audit: type=1400 audit(1771345308.779:1414): avc: denied { ioctl } for pid=6754 comm="syz.2.1157" path="socket:[26881]" dev="sockfs" ino=26881 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 141.833814][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 141.853300][ T28] audit: type=1400 audit(1771345308.819:1415): avc: denied { append } for pid=6754 comm="syz.2.1157" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.886613][ T6758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.930561][ T6760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.960154][ T6760] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 141.973388][ T6760] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 142.126986][ T28] audit: type=1326 audit(1771345309.119:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6770 comm="syz.0.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3b29ec629 code=0x0 [ 142.687265][ T6789] netlink: 'syz.1.1168': attribute type 3 has an invalid length. [ 142.712975][ T28] audit: type=1326 audit(1771345309.709:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.1.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc95ac629 code=0x0 [ 142.834349][ T6795] syzkaller0: entered promiscuous mode [ 142.839997][ T6795] syzkaller0: entered allmulticast mode [ 142.958020][ T3394] IPVS: starting estimator thread 0... [ 143.046525][ T6799] IPVS: using max 2736 ests per chain, 136800 per kthread [ 143.181859][ T6810] GPL: port 1(erspan0) entered blocking state [ 143.196288][ T6810] GPL: port 1(erspan0) entered disabled state [ 143.216152][ T6810] erspan0: entered allmulticast mode [ 143.222199][ T6810] erspan0: entered promiscuous mode [ 143.404273][ T6819] netlink: 'syz.4.1179': attribute type 3 has an invalid length. [ 143.552483][ T6829] syzkaller0: entered promiscuous mode [ 143.572660][ T6829] syzkaller0: entered allmulticast mode [ 143.858703][ T6837] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 143.890197][ T6837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.909120][ T6837] bond3: (slave bridge2): making interface the new active one [ 143.918079][ T6837] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 144.101599][ T6849] mmap: syz.1.1196 (6849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.431612][ T3394] IPVS: starting estimator thread 0... [ 144.464113][ T28] audit: type=1400 audit(1771345311.459:1418): avc: denied { getopt } for pid=6862 comm="syz.4.1193" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.533807][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1195'. [ 144.546127][ T6861] IPVS: using max 2592 ests per chain, 129600 per kthread [ 144.597806][ T1507] IPVS: stop unused estimator thread 0... [ 144.720666][ T6881] loop2: detected capacity change from 0 to 2048 [ 144.784902][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.556235][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.566470][ T6906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.701742][ T6918] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1213' sets config #0 [ 145.865289][ T6922] macsec0: entered allmulticast mode [ 145.890545][ T6922] veth1_macvtap: entered allmulticast mode [ 145.897584][ T6922] macsec0: entered promiscuous mode [ 146.293825][ T6926] loop2: detected capacity change from 0 to 512 [ 146.706092][ T6948] netlink: 'syz.3.1221': attribute type 4 has an invalid length. [ 146.859955][ T6926] ------------[ cut here ]------------ [ 146.866457][ T6926] EA inode 11 i_nlink=2 [ 146.866727][ T6926] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.1216/6926 [ 146.884808][ T6926] Modules linked in: [ 146.898006][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.2.1216 Not tainted syzkaller #0 PREEMPT(full) [ 146.907918][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.918342][ T6926] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 146.926103][ T6926] Code: e4 70 99 ff 4c 8d 2d 7d 0d 5e 05 49 8d 7e 40 e8 74 03 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 fe b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 1f dc 03 66 66 66 66 66 66 2e [ 146.946647][ T6926] RSP: 0018:ffffc9000194b778 EFLAGS: 00010246 [ 146.953358][ T6926] RAX: ffff888165dd1af8 RBX: ffff88811b82c608 RCX: ffffffff81bfcf98 [ 146.962367][ T6926] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871ddd00 [ 146.971689][ T6926] RBP: 000000000000000b R08: 000188811b82c5bb R09: 0000000000000000 [ 146.980398][ T6926] R10: ffffc9000194b6a8 R11: 0001c9000194b6a8 R12: ffff88811b82c5b8 [ 146.989005][ T6926] R13: ffffffff871ddd00 R14: ffff88811b82c570 R15: 0000000000000001 [ 146.997677][ T6926] FS: 00007f98e615f6c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 147.008197][ T6926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.015877][ T6926] CR2: 0000000034747865 CR3: 000000011d5d4000 CR4: 00000000003506f0 [ 147.029758][ T6926] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 147.038937][ T6926] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 147.048716][ T6926] Call Trace: [ 147.052416][ T6926] [ 147.056758][ T6926] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 147.064077][ T6926] ? errseq_check+0x2c/0x50 [ 147.069646][ T6926] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 147.075752][ T6926] ? ext4_truncate+0x92b/0xb00 [ 147.081636][ T6926] ext4_evict_inode+0xa1f/0xd60 [ 147.088273][ T6926] ? __pfx_ext4_evict_inode+0x10/0x10 [ 147.094727][ T6926] evict+0x2af/0x510 [ 147.100548][ T6926] ? __dquot_initialize+0x146/0x7c0 [ 147.107430][ T6926] iput+0x41a/0x580 [ 147.112067][ T6926] ext4_process_orphan+0x1a9/0x1c0 [ 147.118332][ T6926] ext4_orphan_cleanup+0x6a8/0xa00 [ 147.124697][ T6926] ext4_fill_super+0x3408/0x37c0 [ 147.133496][ T6926] ? set_blocksize+0x14c/0x270 [ 147.138977][ T6926] ? setup_bdev_super+0x30e/0x370 [ 147.145077][ T6926] ? __pfx_ext4_fill_super+0x10/0x10 [ 147.151568][ T6926] get_tree_bdev_flags+0x291/0x300 [ 147.157738][ T6926] ? __pfx_ext4_fill_super+0x10/0x10 [ 147.163765][ T6926] get_tree_bdev+0x1f/0x30 [ 147.168665][ T6926] ext4_get_tree+0x1c/0x30 [ 147.173427][ T6926] vfs_get_tree+0x57/0x1d0 [ 147.178888][ T6926] do_new_mount+0x288/0x8d0 [ 147.184428][ T6926] path_mount+0x4d0/0xbc0 [ 147.189888][ T6926] __se_sys_mount+0x28c/0x2e0 [ 147.195980][ T6926] __x64_sys_mount+0x67/0x80 [ 147.201177][ T6926] x64_sys_call+0x2d61/0x3020 [ 147.207228][ T6926] do_syscall_64+0x12c/0x370 [ 147.212414][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.219008][ T6926] RIP: 0033:0x7f98e770d8ca [ 147.228735][ T6926] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.249227][ T6926] RSP: 002b:00007f98e615ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.258358][ T6926] RAX: ffffffffffffffda RBX: 00007f98e615eee0 RCX: 00007f98e770d8ca [ 147.267042][ T6926] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f98e615eea0 [ 147.275973][ T6926] RBP: 00002000000009c0 R08: 00007f98e615eee0 R09: 0000000000800718 [ 147.284479][ T6926] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 147.293206][ T6926] R13: 00007f98e615eea0 R14: 000000000000048d R15: 0000200000000200 [ 147.302387][ T6926] [ 147.308857][ T6926] ---[ end trace 0000000000000000 ]--- [ 147.322095][ T6926] EXT4-fs (loop2): 1 orphan inode deleted [ 147.337634][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.376126][ T6950] __nla_validate_parse: 2 callbacks suppressed [ 147.376215][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1223'. [ 147.438881][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.553506][ T6963] netlink: 'syz.0.1228': attribute type 12 has an invalid length. [ 147.715095][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 147.949034][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'. [ 148.010389][ T6984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6984 comm=syz.2.1234 [ 148.863099][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 148.917940][ T28] audit: type=1400 audit(1771345315.919:1419): avc: denied { read } for pid=7032 comm="syz.2.1251" path="socket:[27306]" dev="sockfs" ino=27306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.096190][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 149.107563][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 149.150823][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 150.291145][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 150.300348][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 150.398714][ T7096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.480084][ T7101] loop2: detected capacity change from 0 to 8192 [ 150.555956][ T7104] ================================================================== [ 150.564084][ T7104] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 150.570945][ T7104] [ 150.573261][ T7104] write to 0xffff88811ba72840 of 4 bytes by task 7101 on cpu 0: [ 150.580890][ T7104] __dentry_kill+0xa8/0x460 [ 150.585401][ T7104] finish_dput+0x2b/0x200 [ 150.589727][ T7104] dput+0x52/0x60 [ 150.593351][ T7104] lookup_one_qstr_excl+0x233/0x250 [ 150.598542][ T7104] filename_create+0x155/0x220 [ 150.603318][ T7104] filename_mknodat+0x13e/0x450 [ 150.608182][ T7104] __se_sys_mknodat+0x38/0xf0 [ 150.612868][ T7104] __x64_sys_mknodat+0x55/0x70 [ 150.617630][ T7104] x64_sys_call+0x312/0x3020 [ 150.622220][ T7104] do_syscall_64+0x12c/0x370 [ 150.626808][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.632693][ T7104] [ 150.635007][ T7104] read to 0xffff88811ba72840 of 4 bytes by task 7104 on cpu 1: [ 150.642540][ T7104] lookup_fast+0xf0/0x320 [ 150.646873][ T7104] path_openat+0x436/0x2050 [ 150.651460][ T7104] do_file_open+0x16c/0x290 [ 150.655985][ T7104] do_sys_openat2+0x94/0x130 [ 150.660582][ T7104] __x64_sys_openat+0xf2/0x120 [ 150.665336][ T7104] x64_sys_call+0x1e39/0x3020 [ 150.670005][ T7104] do_syscall_64+0x12c/0x370 [ 150.674602][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.680511][ T7104] [ 150.682833][ T7104] value changed: 0x00040007 -> 0x00004007 [ 150.688549][ T7104] [ 150.690890][ T7104] Reported by Kernel Concurrency Sanitizer on: [ 150.697037][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.1274 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.707976][ T7104] Tainted: [W]=WARN [ 150.711782][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.721827][ T7104] ==================================================================