last executing test programs: 720.398386ms ago: executing program 3 (id=11162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x210, 0x5408}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x100000001}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40844}, 0x4010) 671.482916ms ago: executing program 2 (id=11164): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x72030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x6, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x32, &(0x7f00000004c0)={0x3c, 0x400, 0x7}) 613.724625ms ago: executing program 0 (id=11165): r0 = socket(0xa, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x29, 0x4c, &(0x7f00000003c0)=0x1ffffff, 0x4) 567.929695ms ago: executing program 0 (id=11166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3d, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) 567.617895ms ago: executing program 1 (id=11167): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) poll(&(0x7f00000004c0)=[{}], 0x20000000000000f3, 0x80000000) 567.132075ms ago: executing program 3 (id=11168): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) 517.563214ms ago: executing program 2 (id=11169): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 481.029864ms ago: executing program 4 (id=11170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000b0002"], 0x28}}, 0x0) 451.405874ms ago: executing program 0 (id=11171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xacd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}}, 0x0) 425.999324ms ago: executing program 1 (id=11172): r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 409.060823ms ago: executing program 3 (id=11173): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_getres(0x1, 0x0) 345.841173ms ago: executing program 0 (id=11174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x430, 0x3d8, 0x3d8, 0x430, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x300, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xffffffc0, 0x1, 0x3, 'syz0\x00', 0xff}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0x6, 0x1, 0x8, 'netbios-ns\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0xd, 0x1, [0x0, 0x6, 0x4, 0x9, 0x5, 0x9d2, 0x2, 0x42, 0x5e, 0xb, 0x6, 0x81, 0x8, 0x6, 0x0, 0x6], 0xf}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 342.075483ms ago: executing program 1 (id=11175): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x45) 341.731893ms ago: executing program 2 (id=11176): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) 341.630063ms ago: executing program 4 (id=11177): setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) 278.334172ms ago: executing program 4 (id=11178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x7}]]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 277.939672ms ago: executing program 2 (id=11179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x1e8, 0x3e8, 0xd0, 0x2e0, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@ipv6={@dev, @remote, [], [], 'ipvlan0\x00', 'pim6reg0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 246.112012ms ago: executing program 0 (id=11180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000fc0)={[{@jqfmt_vfsold}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x18000, &(0x7f0000000440)={[{@pids_localevents}]}) 244.220262ms ago: executing program 1 (id=11181): r0 = timerfd_create(0x0, 0x0) read(r0, 0x0, 0x0) 234.246652ms ago: executing program 3 (id=11182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000000a0601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 166.326521ms ago: executing program 4 (id=11183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') pread64(r0, 0x0, 0x0, 0x0) 166.194521ms ago: executing program 1 (id=11184): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 133.318721ms ago: executing program 2 (id=11185): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000c80)={@ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @rand_addr=' \x01\x00', 0x0, 0xffff, 0x0, 0x0, 0x0, 0x81c00080}) 105.501691ms ago: executing program 4 (id=11186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 102.236821ms ago: executing program 3 (id=11187): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x20000) 85.602731ms ago: executing program 1 (id=11188): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0xff}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0x3ff, 0xffffffff, 0x1, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 24.81374ms ago: executing program 3 (id=11189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x10, 0x30, 0xfffffffffffffffb, 0x9}, &(0x7f00000000c0)=0x18) 24.54142ms ago: executing program 4 (id=11190): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x41}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x20000000) 24.38299ms ago: executing program 2 (id=11191): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891f, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 p4 [ 307.324526][T25656] loop4: p4 size 8388608 extends beyond EOD, truncated [ 307.373204][T25656] FAT-fs (loop4p1): bogus number of reserved sectors [ 307.380052][T25656] FAT-fs (loop4p1): Can't find a valid FAT filesystem [ 307.541990][T25683] netlink: 'syz.0.10722': attribute type 1 has an invalid length. [ 307.612337][T25688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10728'. [ 307.732646][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10728'. [ 307.767855][T24356] udevd[24356]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 307.781800][T24552] udevd[24552]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 307.964255][T24552] udevd[24552]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 307.973418][T24357] udevd[24357]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 308.280141][T25737] netlink: 'syz.4.10750': attribute type 21 has an invalid length. [ 308.287164][T25733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10749'. [ 308.290718][ T2400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.332775][T25737] netlink: 'syz.4.10750': attribute type 6 has an invalid length. [ 308.340816][T25737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10750'. [ 308.948821][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 308.948846][ T29] audit: type=1400 audit(306.944:23422): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.003355][ T29] audit: type=1400 audit(306.972:23423): avc: denied { prog_load } for pid=25790 comm="syz.1.10778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.022231][ T29] audit: type=1400 audit(306.972:23424): avc: denied { bpf } for pid=25790 comm="syz.1.10778" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.042621][ T29] audit: type=1400 audit(306.972:23425): avc: denied { perfmon } for pid=25790 comm="syz.1.10778" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.063256][ T29] audit: type=1400 audit(307.000:23426): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.087108][ T29] audit: type=1400 audit(307.000:23427): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.111077][ T29] audit: type=1400 audit(307.000:23428): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.142301][ T29] audit: type=1326 audit(307.009:23429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25797 comm="syz.1.10781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476415d29 code=0x7ffc0000 [ 309.165401][ T29] audit: type=1326 audit(307.009:23430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25797 comm="syz.1.10781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0476415d29 code=0x7ffc0000 [ 309.188638][ T29] audit: type=1326 audit(307.009:23431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25797 comm="syz.1.10781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0476415d29 code=0x7ffc0000 [ 309.380597][T25821] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10791'. [ 309.575660][T25834] netlink: 'syz.4.10799': attribute type 21 has an invalid length. [ 309.868071][T25860] loop1: detected capacity change from 0 to 128 [ 310.042045][T25872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10817'. [ 310.062754][T25876] loop0: detected capacity change from 0 to 512 [ 310.087677][T25876] EXT4-fs: Ignoring removed nobh option [ 310.138961][T25876] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 310.164499][T25876] EXT4-fs (loop0): orphan cleanup on readonly fs [ 310.222067][T25876] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.10818: Failed to acquire dquot type 1 [ 310.273440][T25876] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10818: bg 0: block 40: padding at end of block bitmap is not set [ 310.313017][T25876] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 310.323419][T25876] EXT4-fs (loop0): 1 truncate cleaned up [ 310.329946][T25876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.345938][T25887] tmpfs: Bad value for 'mpol' [ 310.353914][T25876] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.10818: corrupted xattr block 31: invalid header [ 310.388346][T25876] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 310.412807][T25876] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.10818: corrupted xattr block 31: invalid header [ 310.441209][T25876] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 310.518599][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.926611][T25915] loop3: detected capacity change from 0 to 512 [ 310.944591][T25915] EXT4-fs: Ignoring removed nobh option [ 311.004976][T25915] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 311.025653][T25915] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.041488][T25915] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.10837: Failed to acquire dquot type 1 [ 311.087526][T25915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10837: bg 0: block 40: padding at end of block bitmap is not set [ 311.137176][T25915] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 311.147488][T25932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10843'. [ 311.168672][T25915] EXT4-fs (loop3): 1 truncate cleaned up [ 311.196869][T25915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.243453][T25915] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.10837: corrupted xattr block 31: invalid header [ 311.293670][T25915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 311.324086][T25915] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.10837: corrupted xattr block 31: invalid header [ 311.366077][T25915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 311.416736][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.421679][T25946] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10851'. [ 311.737590][T25973] loop2: detected capacity change from 0 to 1764 [ 311.753677][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10866'. [ 311.762717][T25977] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10866'. [ 311.809381][T25978] loop4: detected capacity change from 0 to 2048 [ 312.162136][T26000] netlink: 'syz.0.10878': attribute type 21 has an invalid length. [ 312.170109][T26000] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10878'. [ 312.254592][T26000] netlink: 'syz.0.10878': attribute type 4 has an invalid length. [ 312.262437][T26000] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10878'. [ 312.392905][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.459078][T26018] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 312.516719][T26027] netlink: 'syz.3.10890': attribute type 10 has an invalid length. [ 312.671911][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10894'. [ 312.763099][T26043] tmpfs: Bad value for 'mpol' [ 313.579760][T26118] netlink: 'syz.2.10933': attribute type 4 has an invalid length. [ 313.655692][T26126] loop3: detected capacity change from 0 to 128 [ 313.718371][T26126] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.771649][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.787578][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.164911][T26166] bridge4: entered promiscuous mode [ 314.170297][T26166] bridge4: entered allmulticast mode [ 314.302185][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 314.302198][ T29] audit: type=1400 audit(311.958:24139): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.332154][ T29] audit: type=1400 audit(311.958:24140): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.355800][ T29] audit: type=1400 audit(311.958:24141): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.394617][ T29] audit: type=1400 audit(312.004:24142): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 314.416211][ T29] audit: type=1400 audit(312.004:24143): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.437291][ T29] audit: type=1400 audit(312.004:24144): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.459085][ T29] audit: type=1400 audit(312.004:24145): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.481101][ T29] audit: type=1400 audit(312.004:24146): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.503425][ T29] audit: type=1400 audit(312.042:24147): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.527103][ T29] audit: type=1400 audit(312.042:24148): avc: denied { read write open } for pid=3297 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.608745][T26186] bond2: entered promiscuous mode [ 314.613803][T26186] bond2: entered allmulticast mode [ 314.619166][T26186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.388073][T26239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10991'. [ 315.397160][T26239] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10991'. [ 315.406256][T26239] netlink: 'syz.1.10991': attribute type 3 has an invalid length. [ 315.414097][T26239] netlink: 'syz.1.10991': attribute type 2 has an invalid length. [ 315.422010][T26239] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10991'. [ 315.529835][T26248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.683429][T26258] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26258 comm=syz.0.11001 [ 315.740674][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11003'. [ 316.427143][T26305] xt_CT: No such helper "snmp" [ 316.533864][T26314] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.016384][T26336] xt_hashlimit: max too large, truncated to 1048576 [ 317.044548][T26336] xt_limit: Overflow, try lower: 0/0 [ 317.421865][T26363] @: renamed from bond0 (while UP) [ 317.673818][T26380] loop1: detected capacity change from 0 to 764 [ 317.685489][T26381] Option ' ' to dns_resolver key: bad/missing value [ 317.968972][T26396] netlink: 'syz.3.11068': attribute type 1 has an invalid length. [ 318.009302][T26401] __nla_validate_parse: 1 callbacks suppressed [ 318.009320][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11069'. [ 318.321760][T26417] Invalid option length (0) for dns_resolver key [ 318.411940][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11080'. [ 318.550773][T26433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 318.551550][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.557428][T26433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 318.576129][T26433] vhci_hcd vhci_hcd.0: Device attached [ 318.829081][T26433] vhci_hcd vhci_hcd.0: port 0 already used [ 318.847508][T26435] vhci_hcd: connection closed [ 318.847681][ T11] vhci_hcd: stop threads [ 318.847707][ T11] vhci_hcd: release socket [ 318.847715][ T11] vhci_hcd: disconnect device [ 319.052022][T26466] SELinux: syz.2.11097 (26466) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 319.153965][T26467] loop4: detected capacity change from 0 to 4096 [ 319.172164][T26467] EXT4-fs: Ignoring removed nobh option [ 319.210608][T26467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.261533][T26467] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.11099: Failed to acquire dquot type 1 [ 319.347382][T26482] netlink: 'syz.2.11105': attribute type 1 has an invalid length. [ 319.355276][T26482] netlink: 'syz.2.11105': attribute type 2 has an invalid length. [ 319.424000][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.506377][T26502] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 319.661944][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 319.661957][ T29] audit: type=1400 audit(316.971:24770): avc: denied { read } for pid=26517 comm="syz.0.11122" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 319.689014][ T29] audit: type=1400 audit(316.971:24771): avc: denied { open } for pid=26517 comm="syz.0.11122" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 319.798153][ T29] audit: type=1400 audit(316.981:24772): avc: denied { create } for pid=26514 comm="syz.4.11123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.818611][ T29] audit: type=1400 audit(316.981:24773): avc: denied { write } for pid=26514 comm="syz.4.11123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.838935][ T29] audit: type=1400 audit(317.028:24774): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 319.860608][ T29] audit: type=1400 audit(317.028:24775): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.881773][ T29] audit: type=1400 audit(317.028:24776): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.903642][ T29] audit: type=1400 audit(317.028:24777): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.925787][ T29] audit: type=1400 audit(317.028:24778): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.948053][ T29] audit: type=1400 audit(317.028:24779): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.985025][ T2400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.177442][T26613] netlink: 'syz.2.11169': attribute type 4 has an invalid length. [ 321.298904][T26625] xt_recent: hitcount (4294967232) is larger than allowed maximum (65535) [ 321.389993][T26634] loop0: detected capacity change from 0 to 512 [ 321.431437][T26634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 321.487785][T26634] EXT4-fs (loop0): 1 truncate cleaned up [ 321.514328][T26634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.590547][T26651] xt_TCPMSS: Only works on TCP SYN packets [ 321.598694][ T3298] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /2213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 321.643523][T24357] ================================================================== [ 321.651660][T24357] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 321.658727][T24357] [ 321.661060][T24357] write to 0xffff8881048b8c94 of 4 bytes by task 24538 on cpu 0: [ 321.668802][T24357] shmem_unlink+0x13b/0x170 [ 321.673331][T24357] vfs_unlink+0x275/0x430 [ 321.677686][T24357] do_unlinkat+0x237/0x4d0 [ 321.682128][T24357] __x64_sys_unlink+0x2e/0x40 [ 321.686831][T24357] x64_sys_call+0x2329/0x2dc0 [ 321.691521][T24357] do_syscall_64+0xc9/0x1c0 [ 321.696032][T24357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.701959][T24357] [ 321.704318][T24357] read to 0xffff8881048b8c94 of 4 bytes by task 24357 on cpu 1: [ 321.711961][T24357] fill_mg_cmtime+0x58/0x280 [ 321.716585][T24357] generic_fillattr+0x241/0x330 [ 321.721565][T24357] shmem_getattr+0x17b/0x200 [ 321.726172][T24357] vfs_statx_path+0x171/0x2d0 [ 321.730861][T24357] vfs_statx+0xe1/0x170 [ 321.735030][T24357] __se_sys_newfstatat+0xdc/0x300 [ 321.740074][T24357] __x64_sys_newfstatat+0x55/0x70 [ 321.745122][T24357] x64_sys_call+0x236d/0x2dc0 [ 321.749063][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11190'. [ 321.749797][T24357] do_syscall_64+0xc9/0x1c0 [ 321.763236][T24357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.769160][T24357] [ 321.771492][T24357] value changed: 0x308f5b72 -> 0x311e1683 [ 321.777216][T24357] [ 321.779603][T24357] Reported by Kernel Concurrency Sanitizer on: [ 321.785761][T24357] CPU: 1 UID: 0 PID: 24357 Comm: udevd Not tainted 6.13.0-rc5-syzkaller #0 [ 321.794361][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 321.804423][T24357] ================================================================== [ 321.822200][ T3298] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 321.846190][ T3298] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /2213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 321.887373][ T3298] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 321.918857][ T3298] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /2213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 321.953699][ T3298] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 321.976373][ T3298] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /2213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 322.000788][ T3298] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 322.023200][ T3298] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /2213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 322.046862][ T3298] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 322.134307][T19096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.870112][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): left allmulticast mode [ 322.878666][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): left promiscuous mode [ 322.887179][ T11] bridge0: port 3(netdevsim3) entered disabled state [ 323.125850][ T11] bridge_slave_1: left allmulticast mode [ 323.131523][ T11] bridge_slave_1: left promiscuous mode [ 323.137242][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.171440][ T11] bridge_slave_0: left allmulticast mode [ 323.177122][ T11] bridge_slave_0: left promiscuous mode [ 323.182848][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.427018][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.436908][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.446213][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 323.456201][ T11] bond0 (unregistering): Released all slaves [ 323.522643][ T11] hsr_slave_0: left promiscuous mode [ 323.531446][ T11] hsr_slave_1: left promiscuous mode [ 323.538883][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.630213][ T11] team0 (unregistering): Port device team_slave_1 removed [ 323.640739][ T11] team0 (unregistering): Port device team_slave_0 removed [ 323.961499][ T11] IPVS: stop unused estimator thread 0... [ 324.708186][ T2400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.105374][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 325.105391][ T29] audit: type=1400 audit(322.069:25506): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 325.140828][ T29] audit: type=1400 audit(322.069:25507): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.161930][ T29] audit: type=1400 audit(322.069:25508): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.183738][ T29] audit: type=1400 audit(322.069:25509): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.205945][ T29] audit: type=1400 audit(322.069:25510): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.228217][ T29] audit: type=1400 audit(322.097:25511): avc: denied { sys_chroot } for pid=26780 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 325.249006][ T29] audit: type=1400 audit(322.097:25512): avc: denied { setgid } for pid=26780 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 325.269443][ T29] audit: type=1400 audit(322.097:25513): avc: denied { setuid } for pid=26780 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 325.289873][ T29] audit: type=1400 audit(322.097:25514): avc: denied { setrlimit } for pid=26780 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 325.392945][ T2400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.944153][ T29] audit: type=1400 audit(322.846:25515): avc: denied { sys_chroot } for pid=26782 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 330.182265][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.474794][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 330.474810][ T29] audit: type=1400 audit(327.083:25547): avc: denied { sys_chroot } for pid=26788 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 330.507408][ T29] audit: type=1400 audit(327.121:25548): avc: denied { setgid } for pid=26788 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 330.528035][ T29] audit: type=1400 audit(327.121:25549): avc: denied { setuid } for pid=26788 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 330.548433][ T29] audit: type=1400 audit(327.121:25550): avc: denied { setrlimit } for pid=26788 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 331.290224][ T29] audit: type=1400 audit(327.850:25551): avc: denied { sys_chroot } for pid=26790 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 331.311199][ T29] audit: type=1400 audit(327.850:25552): avc: denied { setgid } for pid=26790 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 331.331620][ T29] audit: type=1400 audit(327.850:25553): avc: denied { setuid } for pid=26790 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 331.351980][ T29] audit: type=1400 audit(327.850:25554): avc: denied { setrlimit } for pid=26790 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 331.491245][ T29] audit: type=1400 audit(328.037:25555): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 331.512780][ T29] audit: type=1400 audit(328.037:25556): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.560742][ T2400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration