Warning: Permanently added '10.128.1.103' (ECDSA) to the list of known hosts. 2022/04/02 08:35:40 fuzzer started 2022/04/02 08:35:41 dialing manager at 10.128.0.163:38609 [ 28.793212][ T24] audit: type=1400 audit(1648888542.367:74): avc: denied { mounton } for pid=1808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.796232][ T1808] cgroup: Unknown subsys name 'net' [ 28.816069][ T24] audit: type=1400 audit(1648888542.377:75): avc: denied { mount } for pid=1808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.843398][ T1808] cgroup: Unknown subsys name 'devices' [ 28.843448][ T24] audit: type=1400 audit(1648888542.397:76): avc: denied { unmount } for pid=1808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.849244][ T1808] cgroup: Unknown subsys name 'blkio' [ 28.956282][ T1808] cgroup: Unknown subsys name 'hugetlb' [ 28.961893][ T1808] cgroup: Unknown subsys name 'rlimit' 2022/04/02 08:35:42 syscalls: 2723 2022/04/02 08:35:42 code coverage: enabled 2022/04/02 08:35:42 comparison tracing: enabled 2022/04/02 08:35:42 extra coverage: enabled 2022/04/02 08:35:42 delay kcov mmap: enabled 2022/04/02 08:35:42 setuid sandbox: enabled 2022/04/02 08:35:42 namespace sandbox: enabled 2022/04/02 08:35:42 Android sandbox: enabled 2022/04/02 08:35:42 fault injection: enabled 2022/04/02 08:35:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/04/02 08:35:42 net packet injection: enabled 2022/04/02 08:35:42 net device setup: enabled 2022/04/02 08:35:42 concurrency sanitizer: enabled 2022/04/02 08:35:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/04/02 08:35:42 USB emulation: /dev/raw-gadget does not exist 2022/04/02 08:35:42 hci packet injection: /dev/vhci does not exist 2022/04/02 08:35:42 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2022/04/02 08:35:42 802.15.4 emulation: enabled [ 29.066066][ T24] audit: type=1400 audit(1648888542.647:77): avc: denied { mounton } for pid=1808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.091209][ T24] audit: type=1400 audit(1648888542.657:78): avc: denied { mount } for pid=1808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.114485][ T24] audit: type=1400 audit(1648888542.657:79): avc: denied { create } for pid=1808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.134990][ T24] audit: type=1400 audit(1648888542.657:80): avc: denied { write } for pid=1808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.155393][ T24] audit: type=1400 audit(1648888542.657:81): avc: denied { read } for pid=1808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/04/02 08:35:43 suppressing KCSAN reports in functions: 'pcpu_alloc' 'blk_mq_sched_dispatch_requests' 'insert_work' 'generic_fillattr' 'step_into' '__xa_clear_mark' 'do_sys_poll' 2022/04/02 08:35:43 fetching corpus: 0, signal 0/2000 (executing program) 2022/04/02 08:35:43 fetching corpus: 46, signal 12679/16320 (executing program) 2022/04/02 08:35:43 fetching corpus: 96, signal 19316/24459 (executing program) 2022/04/02 08:35:43 fetching corpus: 146, signal 26957/33310 (executing program) 2022/04/02 08:35:43 fetching corpus: 196, signal 34456/41760 (executing program) 2022/04/02 08:35:43 fetching corpus: 244, signal 39452/47788 (executing program) 2022/04/02 08:35:43 fetching corpus: 294, signal 42493/51882 (executing program) 2022/04/02 08:35:43 fetching corpus: 343, signal 46591/56788 (executing program) 2022/04/02 08:35:44 fetching corpus: 393, signal 48739/59917 (executing program) 2022/04/02 08:35:44 fetching corpus: 443, signal 50964/63035 (executing program) 2022/04/02 08:35:44 fetching corpus: 493, signal 54767/67400 (executing program) 2022/04/02 08:35:44 fetching corpus: 541, signal 57741/70938 (executing program) 2022/04/02 08:35:44 fetching corpus: 591, signal 61193/74867 (executing program) 2022/04/02 08:35:44 fetching corpus: 641, signal 63688/77889 (executing program) 2022/04/02 08:35:45 fetching corpus: 689, signal 65434/80257 (executing program) 2022/04/02 08:35:45 fetching corpus: 739, signal 67175/82566 (executing program) 2022/04/02 08:35:45 fetching corpus: 789, signal 68921/84834 (executing program) 2022/04/02 08:35:45 fetching corpus: 837, signal 71137/87389 (executing program) 2022/04/02 08:35:45 fetching corpus: 887, signal 73544/89973 (executing program) 2022/04/02 08:35:45 fetching corpus: 937, signal 75138/91903 (executing program) 2022/04/02 08:35:45 fetching corpus: 986, signal 76515/93646 (executing program) 2022/04/02 08:35:45 fetching corpus: 1035, signal 77801/95361 (executing program) 2022/04/02 08:35:46 fetching corpus: 1085, signal 78663/96674 (executing program) 2022/04/02 08:35:46 fetching corpus: 1133, signal 80822/98748 (executing program) 2022/04/02 08:35:46 fetching corpus: 1182, signal 82539/100578 (executing program) 2022/04/02 08:35:46 fetching corpus: 1231, signal 83633/101991 (executing program) 2022/04/02 08:35:46 fetching corpus: 1280, signal 85672/103865 (executing program) 2022/04/02 08:35:46 fetching corpus: 1329, signal 86836/105218 (executing program) 2022/04/02 08:35:46 fetching corpus: 1377, signal 87908/106501 (executing program) 2022/04/02 08:35:46 fetching corpus: 1426, signal 89506/108011 (executing program) 2022/04/02 08:35:47 fetching corpus: 1472, signal 90518/109189 (executing program) 2022/04/02 08:35:47 fetching corpus: 1519, signal 91413/110246 (executing program) 2022/04/02 08:35:47 fetching corpus: 1566, signal 92601/111428 (executing program) 2022/04/02 08:35:47 fetching corpus: 1616, signal 93451/112385 (executing program) 2022/04/02 08:35:47 fetching corpus: 1666, signal 94463/113397 (executing program) 2022/04/02 08:35:47 fetching corpus: 1716, signal 95771/114472 (executing program) 2022/04/02 08:35:47 fetching corpus: 1766, signal 96654/115336 (executing program) 2022/04/02 08:35:47 fetching corpus: 1816, signal 98114/116428 (executing program) 2022/04/02 08:35:47 fetching corpus: 1865, signal 99784/117585 (executing program) 2022/04/02 08:35:48 fetching corpus: 1914, signal 100514/118339 (executing program) 2022/04/02 08:35:48 fetching corpus: 1964, signal 101935/119312 (executing program) 2022/04/02 08:35:48 fetching corpus: 2012, signal 103118/120164 (executing program) 2022/04/02 08:35:48 fetching corpus: 2061, signal 104870/121120 (executing program) 2022/04/02 08:35:48 fetching corpus: 2109, signal 105644/121754 (executing program) 2022/04/02 08:35:48 fetching corpus: 2158, signal 106690/122441 (executing program) 2022/04/02 08:35:48 fetching corpus: 2206, signal 107723/123128 (executing program) 2022/04/02 08:35:48 fetching corpus: 2252, signal 108406/123736 (executing program) 2022/04/02 08:35:48 fetching corpus: 2301, signal 109304/124320 (executing program) 2022/04/02 08:35:49 fetching corpus: 2351, signal 110347/124881 (executing program) 2022/04/02 08:35:49 fetching corpus: 2401, signal 110827/125293 (executing program) 2022/04/02 08:35:49 fetching corpus: 2451, signal 111569/125756 (executing program) 2022/04/02 08:35:49 fetching corpus: 2501, signal 112319/126208 (executing program) 2022/04/02 08:35:49 fetching corpus: 2548, signal 113025/126627 (executing program) 2022/04/02 08:35:49 fetching corpus: 2598, signal 113897/127055 (executing program) 2022/04/02 08:35:49 fetching corpus: 2647, signal 114477/127461 (executing program) 2022/04/02 08:35:49 fetching corpus: 2696, signal 115531/127872 (executing program) 2022/04/02 08:35:49 fetching corpus: 2745, signal 116281/128237 (executing program) 2022/04/02 08:35:50 fetching corpus: 2794, signal 116935/128526 (executing program) 2022/04/02 08:35:50 fetching corpus: 2844, signal 117552/128819 (executing program) 2022/04/02 08:35:50 fetching corpus: 2892, signal 118213/129056 (executing program) 2022/04/02 08:35:50 fetching corpus: 2942, signal 118984/129291 (executing program) 2022/04/02 08:35:50 fetching corpus: 2992, signal 119359/129498 (executing program) 2022/04/02 08:35:50 fetching corpus: 3042, signal 120053/129701 (executing program) 2022/04/02 08:35:50 fetching corpus: 3092, signal 120806/129891 (executing program) 2022/04/02 08:35:50 fetching corpus: 3140, signal 121375/130033 (executing program) 2022/04/02 08:35:50 fetching corpus: 3190, signal 122048/130035 (executing program) 2022/04/02 08:35:51 fetching corpus: 3239, signal 122852/130035 (executing program) 2022/04/02 08:35:51 fetching corpus: 3289, signal 123728/130037 (executing program) 2022/04/02 08:35:51 fetching corpus: 3339, signal 124434/130081 (executing program) 2022/04/02 08:35:51 fetching corpus: 3389, signal 125156/130081 (executing program) 2022/04/02 08:35:51 fetching corpus: 3436, signal 125649/130108 (executing program) 2022/04/02 08:35:51 fetching corpus: 3484, signal 126427/130127 (executing program) 2022/04/02 08:35:51 fetching corpus: 3534, signal 126917/130158 (executing program) 2022/04/02 08:35:51 fetching corpus: 3583, signal 127665/130158 (executing program) 2022/04/02 08:35:51 fetching corpus: 3632, signal 128359/130164 (executing program) 2022/04/02 08:35:52 fetching corpus: 3682, signal 129115/130186 (executing program) 2022/04/02 08:35:52 fetching corpus: 3683, signal 129120/130186 (executing program) 2022/04/02 08:35:52 fetching corpus: 3683, signal 129120/130186 (executing program) 2022/04/02 08:35:53 starting 6 fuzzer processes 08:35:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:35:53 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000032000000000006000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x8, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x9, 0x6972713e}, 0x40, 0x100000000, 0x0, 0x6, 0xffff, 0x1, 0x7, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, r1, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage\x00', 0x2, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000140), 0x12000005f) write$cgroup_int(r3, &(0x7f0000000300), 0x12) bpf$ITER_CREATE(0x21, 0x0, 0x0) 08:35:53 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:35:53 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x3, 0x10, 0x0) 08:35:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:35:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104030014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) [ 39.995497][ T24] audit: type=1400 audit(1648888553.577:82): avc: denied { execmem } for pid=1816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.028668][ T24] audit: type=1400 audit(1648888553.577:83): avc: denied { read } for pid=1818 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.050005][ T24] audit: type=1400 audit(1648888553.577:84): avc: denied { open } for pid=1818 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.073371][ T24] audit: type=1400 audit(1648888553.577:85): avc: denied { mounton } for pid=1818 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 40.094861][ T24] audit: type=1400 audit(1648888553.577:86): avc: denied { module_request } for pid=1818 comm="syz-executor.1" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.160836][ T24] audit: type=1400 audit(1648888553.697:87): avc: denied { sys_module } for pid=1821 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 40.295988][ T1821] chnl_net:caif_netlink_parms(): no params data found [ 40.388379][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.395525][ T1821] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.403188][ T1821] device bridge_slave_0 entered promiscuous mode [ 40.434871][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.441949][ T1821] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.449483][ T1821] device bridge_slave_1 entered promiscuous mode [ 40.457923][ T1818] chnl_net:caif_netlink_parms(): no params data found [ 40.513002][ T1821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.539340][ T1821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.603790][ T1835] chnl_net:caif_netlink_parms(): no params data found [ 40.615529][ T1821] team0: Port device team_slave_0 added [ 40.621910][ T1821] team0: Port device team_slave_1 added [ 40.649679][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.656802][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.664315][ T1818] device bridge_slave_0 entered promiscuous mode [ 40.671646][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.678733][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.686296][ T1818] device bridge_slave_1 entered promiscuous mode [ 40.706239][ T1818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.715477][ T1821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.722393][ T1821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.748295][ T1821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.782450][ T1818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.791827][ T1821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.798761][ T1821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.824684][ T1821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.864034][ T1838] chnl_net:caif_netlink_parms(): no params data found [ 40.877308][ T1818] team0: Port device team_slave_0 added [ 40.890501][ T1836] chnl_net:caif_netlink_parms(): no params data found [ 40.905172][ T1818] team0: Port device team_slave_1 added [ 40.914710][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.921755][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.929328][ T1835] device bridge_slave_0 entered promiscuous mode [ 40.936180][ T1837] chnl_net:caif_netlink_parms(): no params data found [ 40.962095][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.969154][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.976875][ T1835] device bridge_slave_1 entered promiscuous mode [ 40.993287][ T1821] device hsr_slave_0 entered promiscuous mode [ 40.999871][ T1821] device hsr_slave_1 entered promiscuous mode [ 41.026251][ T1818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.033181][ T1818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.059070][ T1818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.086703][ T1818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.093646][ T1818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.119579][ T1818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.133365][ T1835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.148633][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.155755][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.163105][ T1837] device bridge_slave_0 entered promiscuous mode [ 41.172975][ T1835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.187800][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.194922][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.202695][ T1837] device bridge_slave_1 entered promiscuous mode [ 41.245107][ T1838] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.252307][ T1838] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.259864][ T1838] device bridge_slave_0 entered promiscuous mode [ 41.272647][ T1818] device hsr_slave_0 entered promiscuous mode [ 41.279129][ T1818] device hsr_slave_1 entered promiscuous mode [ 41.285423][ T1818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.292959][ T1818] Cannot create hsr debugfs directory [ 41.298521][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.305729][ T1836] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.314400][ T1836] device bridge_slave_0 entered promiscuous mode [ 41.321985][ T1835] team0: Port device team_slave_0 added [ 41.330604][ T1835] team0: Port device team_slave_1 added [ 41.336551][ T1838] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.343667][ T1838] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.351439][ T1838] device bridge_slave_1 entered promiscuous mode [ 41.359287][ T1837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.369606][ T1837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.388001][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.395095][ T1836] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.402698][ T1836] device bridge_slave_1 entered promiscuous mode [ 41.442609][ T1837] team0: Port device team_slave_0 added [ 41.456206][ T1836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.465470][ T1835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.472391][ T1835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.498283][ T1835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.509854][ T1838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.521893][ T1837] team0: Port device team_slave_1 added [ 41.534650][ T1836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.543935][ T1835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.550933][ T1835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.576835][ T1835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.588454][ T1838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.637065][ T1836] team0: Port device team_slave_0 added [ 41.643723][ T1838] team0: Port device team_slave_0 added [ 41.650959][ T1838] team0: Port device team_slave_1 added [ 41.656966][ T1837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.663902][ T1837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.689832][ T1837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.704842][ T1836] team0: Port device team_slave_1 added [ 41.716388][ T1837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.723326][ T1837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.749393][ T1837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.780072][ T1835] device hsr_slave_0 entered promiscuous mode [ 41.786795][ T1835] device hsr_slave_1 entered promiscuous mode [ 41.793054][ T1835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.800614][ T1835] Cannot create hsr debugfs directory [ 41.811569][ T1836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.818627][ T1836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.844555][ T1836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.857731][ T1836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.864659][ T1836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.890544][ T1836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.901560][ T1838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.908560][ T1838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.934487][ T1838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.946084][ T1838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.953026][ T1838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.978899][ T1838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.011551][ T1837] device hsr_slave_0 entered promiscuous mode [ 42.018093][ T1837] device hsr_slave_1 entered promiscuous mode [ 42.024377][ T1837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.031960][ T1837] Cannot create hsr debugfs directory [ 42.037811][ T1821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.057392][ T1821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.065888][ T1821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.075138][ T1836] device hsr_slave_0 entered promiscuous mode [ 42.081594][ T1836] device hsr_slave_1 entered promiscuous mode [ 42.087944][ T1836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.095595][ T1836] Cannot create hsr debugfs directory [ 42.111259][ T1821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.120844][ T1838] device hsr_slave_0 entered promiscuous mode [ 42.127512][ T1838] device hsr_slave_1 entered promiscuous mode [ 42.133892][ T1838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.141462][ T1838] Cannot create hsr debugfs directory [ 42.195221][ T1818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.212735][ T1818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.232755][ T1818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.241260][ T1818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.291306][ T1821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.303811][ T1835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.311235][ T24] audit: type=1400 audit(1648888555.887:88): avc: denied { remove_name } for pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.333751][ T24] audit: type=1400 audit(1648888555.887:89): avc: denied { rename } for pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.357369][ T1835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.370964][ T1836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.380229][ T1835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.397986][ T1836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.406919][ T1835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.425098][ T1836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.441256][ T1837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.449836][ T1836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.464542][ T1821] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.471388][ T1837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.480746][ T1837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.488997][ T1837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.500093][ T1818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.527668][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.535277][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.542992][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.551415][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.559688][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.566749][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.577185][ T1818] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.590120][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.597981][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.605751][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.613293][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.622324][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.630765][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.637844][ T1887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.651149][ T1835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.668559][ T1838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.680346][ T1821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.690732][ T1821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.702131][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.711407][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.720037][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.728318][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.736666][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.744916][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.753629][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.762006][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.770521][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.778754][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.787112][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.794771][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.806810][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.814449][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.824115][ T1838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.839231][ T1835] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.850778][ T1838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.859219][ T1838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.868518][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.877249][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.885596][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.892696][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.923599][ T1818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.934071][ T1818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.955448][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.963321][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.972048][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.980506][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.987572][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.995336][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.003764][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.012142][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.019203][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.026965][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.035668][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.044123][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.052430][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.059463][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.067232][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.076397][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.084932][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.093482][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.102001][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.110514][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.118826][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.127058][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.135617][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.143741][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.152133][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.160043][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.168049][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.180511][ T1836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.198229][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.206945][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.215240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.224224][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.231924][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.239584][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.246914][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.254218][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.262822][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.271218][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.279528][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.288045][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.300589][ T1821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.310281][ T1818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.323319][ T1836] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.332559][ T1835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.343499][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.353276][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.361049][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.375618][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.383698][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.395396][ T1837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.414656][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.424432][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.433401][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.440470][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.448532][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.456024][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.463337][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.471977][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.480306][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.487342][ T1914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.495589][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.506139][ T1835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.519614][ T1838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.530064][ T1837] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.537733][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.545490][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.553016][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.572060][ T1838] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.591154][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.600120][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.610551][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.619396][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.628244][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.636861][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.645130][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.653786][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.661466][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.669149][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.677745][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.686341][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.693369][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.701033][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.709717][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.718004][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.725033][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.732729][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.741342][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.750139][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.758372][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.766937][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.775725][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.787953][ T1836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.798340][ T1836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.815802][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.828180][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.839069][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.848727][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.857013][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.865271][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.873523][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.881609][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.890059][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.898355][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.905473][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.913188][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.921622][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.929943][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.937009][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.944805][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.953927][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.961551][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.973350][ T1837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.983713][ T1837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.003756][ T1821] device veth0_vlan entered promiscuous mode [ 44.016503][ T1836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.024523][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.034956][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.043563][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.052051][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.060264][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.067631][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.075021][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.083385][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.091539][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.100227][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.108784][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.117291][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.125637][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.134082][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.142254][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.150750][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.158985][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.168418][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.176032][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.183880][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.191772][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.201293][ T1838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.212435][ T1838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.222530][ T1821] device veth1_vlan entered promiscuous mode [ 44.239850][ T1837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.248446][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.256579][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.264694][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.272928][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.280275][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.297729][ T1838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.307327][ T1818] device veth0_vlan entered promiscuous mode [ 44.318473][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.332947][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.340631][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.348314][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.356519][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.365739][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.373432][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.383688][ T1821] device veth0_macvtap entered promiscuous mode [ 44.393287][ T1818] device veth1_vlan entered promiscuous mode [ 44.403477][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.414839][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.432253][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.442104][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.450478][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.458982][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.468378][ T1821] device veth1_macvtap entered promiscuous mode [ 44.482795][ T1818] device veth0_macvtap entered promiscuous mode [ 44.495164][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.508418][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.526017][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.534420][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.542854][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.551506][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.563850][ T1818] device veth1_macvtap entered promiscuous mode [ 44.571946][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.591231][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.603152][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.618955][ T1821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.633144][ T1835] device veth0_vlan entered promiscuous mode [ 44.642228][ T1818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 44.652702][ T1818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.663846][ T1818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.671241][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.681358][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.689909][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.698987][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.707500][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.716081][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.724614][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.732253][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.746596][ T1821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.754101][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.762813][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.772087][ T1818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.782629][ T1818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.793425][ T1818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.805775][ T1835] device veth1_vlan entered promiscuous mode [ 44.814886][ T1821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.823686][ T1821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.832448][ T1821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.841151][ T1821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.859833][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.867793][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.876255][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.884921][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.893480][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.904739][ T1818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.913470][ T1818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.922230][ T1818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.930985][ T1818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.954037][ T1837] device veth0_vlan entered promiscuous mode [ 44.968971][ T1836] device veth0_vlan entered promiscuous mode [ 44.979438][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.987705][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.995856][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.004026][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.012300][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.022523][ T1837] device veth1_vlan entered promiscuous mode [ 45.031865][ T24] audit: type=1400 audit(1648888558.617:90): avc: denied { mounton } for pid=1821 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 45.035498][ T1836] device veth1_vlan entered promiscuous mode [ 45.073355][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.081207][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.089017][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.096919][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.104615][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.112417][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.120299][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.128928][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.147516][ T1838] device veth0_vlan entered promiscuous mode [ 45.156686][ T24] audit: type=1400 audit(1648888558.727:91): avc: denied { read write } for pid=1821 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.162349][ T1838] device veth1_vlan entered promiscuous mode [ 45.180866][ T24] audit: type=1400 audit(1648888558.727:92): avc: denied { open } for pid=1821 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.197520][ T1836] device veth0_macvtap entered promiscuous mode 08:35:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 45.210956][ T24] audit: type=1400 audit(1648888558.727:93): avc: denied { ioctl } for pid=1821 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.223277][ T1835] device veth0_macvtap entered promiscuous mode [ 45.255834][ T1835] device veth1_macvtap entered promiscuous mode [ 45.263249][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 08:35:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 45.271471][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.280479][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.289207][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.297343][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.305745][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.314192][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 08:35:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 45.323422][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.332521][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.351910][ T1838] device veth0_macvtap entered promiscuous mode [ 45.364922][ T24] audit: type=1400 audit(1648888558.937:94): avc: denied { prog_load } for pid=2016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.365185][ T1836] device veth1_macvtap entered promiscuous mode [ 45.384171][ T24] audit: type=1400 audit(1648888558.937:95): avc: denied { bpf } for pid=2016 comm="syz-executor.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.395683][ T1836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:35:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 45.411112][ T24] audit: type=1400 audit(1648888558.937:96): avc: denied { perfmon } for pid=2016 comm="syz-executor.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.421549][ T1836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.452634][ T1836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 45.463058][ T1836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.469213][ T24] audit: type=1400 audit(1648888559.047:97): avc: denied { prog_run } for pid=2016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.496848][ T24] audit: type=1400 audit(1648888559.077:98): avc: denied { map_create } for pid=2016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.518398][ T1836] batman_adv: batadv0: Interface activated: batadv_slave_0 08:35:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:35:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 45.536555][ T1837] device veth0_macvtap entered promiscuous mode [ 45.543753][ T24] audit: type=1400 audit(1648888559.077:99): avc: denied { open } for pid=2016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.548622][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 45.568545][ C0] hrtimer: interrupt took 46154 ns [ 45.573614][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.588550][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 45.599032][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.608840][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 45.619278][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:35:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 45.638374][ T1835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.646016][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.661417][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.671298][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.679506][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.688871][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.697269][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.705827][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.714250][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.723002][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.731605][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.739967][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.748323][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.757019][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.766825][ T1838] device veth1_macvtap entered promiscuous mode [ 45.774575][ T1836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 45.785196][ T1836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.795098][ T1836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 45.805563][ T1836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.816684][ T1836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.825096][ T1837] device veth1_macvtap entered promiscuous mode [ 45.833791][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 45.844276][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.854079][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 45.864537][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.874386][ T1835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 45.884785][ T1835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.897544][ T1835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.905849][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.913839][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.921931][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.930380][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.939205][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.947874][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.957641][ T1836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.966373][ T1836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.975114][ T1836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.983894][ T1836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.997109][ T1835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005886][ T1835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.014562][ T1835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.023242][ T1835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.039181][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.049678][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.059541][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.069990][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.079792][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.090217][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.100012][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.110472][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.121513][ T1838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.130079][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.140552][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.150351][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.160764][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.170634][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.181065][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.191023][ T1838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.201457][ T1838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.213266][ T1838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.226068][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.234642][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.243375][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.252023][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.263958][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.274423][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.284219][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.294772][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.304578][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.315060][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.324873][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.335283][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.345111][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.355579][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.368026][ T1837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.383520][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.392256][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.404368][ T1838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.413199][ T1838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.421887][ T1838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.430596][ T1838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.455571][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.466019][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.475915][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.486319][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.496379][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.506978][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.516791][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.527266][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.537059][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.547471][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.559250][ T1837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.569343][ T1837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.578232][ T1837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.586929][ T1837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.595760][ T1837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.606291][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.614814][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.717128][ T2038] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 08:36:01 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:01 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:01 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x3, 0x10, 0x0) 08:36:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104030014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 08:36:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:02 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x3, 0x10, 0x0) 08:36:02 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104030014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) [ 48.370751][ T2017] syz-executor.1 (2017) used greatest stack depth: 10296 bytes left [ 48.387147][ T2048] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 08:36:02 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x3, 0x10, 0x0) [ 48.458177][ T2061] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 08:36:11 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:11 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:11 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104030014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 08:36:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1600, 0x6, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 08:36:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) [ 57.601160][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 57.601172][ T24] audit: type=1400 audit(1648888571.177:105): avc: denied { read } for pid=2070 comm="syz-executor.2" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.630934][ T2075] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 08:36:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) [ 57.673167][ T24] audit: type=1400 audit(1648888571.227:106): avc: denied { open } for pid=2070 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.696936][ T24] audit: type=1400 audit(1648888571.227:107): avc: denied { ioctl } for pid=2070 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=220 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.722439][ T24] audit: type=1400 audit(1648888571.227:108): avc: denied { setattr } for pid=2070 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.746386][ T24] audit: type=1400 audit(1648888571.227:109): avc: denied { read } for pid=2070 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 08:36:11 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) 08:36:11 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) [ 57.770098][ T24] audit: type=1400 audit(1648888571.227:110): avc: denied { open } for pid=2070 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.794299][ T24] audit: type=1400 audit(1648888571.227:111): avc: denied { ioctl } for pid=2070 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 08:36:15 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) 08:36:15 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0xda00) 08:36:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:15 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:15 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) 08:36:15 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:15 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x82842) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 08:36:23 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f00006d5000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 08:36:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 08:36:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f00006d5000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) [ 70.261684][ T24] audit: type=1400 audit(1648888583.837:112): avc: denied { create } for pid=2166 comm="syz-executor.2" dev="anon_inodefs" ino=17825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.275893][ T2169] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 70.301693][ T2169] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 08:36:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f00006d5000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 08:36:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) [ 70.311988][ T24] audit: type=1400 audit(1648888583.837:113): avc: denied { map } for pid=2166 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.333754][ T2175] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 08:36:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f00006d5000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) [ 70.336532][ T24] audit: type=1400 audit(1648888583.837:114): avc: denied { read write } for pid=2166 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.349111][ T2175] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 08:36:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x1000000) 08:36:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x1000000) 08:36:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 70.579631][ T24] audit: type=1400 audit(1648888584.157:115): avc: denied { create } for pid=2178 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.599864][ T24] audit: type=1400 audit(1648888584.157:116): avc: denied { getopt } for pid=2178 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 08:36:32 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 08:36:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161430000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100014eb70325132510000eb7032510300000000002e2e202020202020202020100014eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200014eb70325132510000eb70325104001a040000", 0x80, 0x4a00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4c00}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x5200}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000011300)) 08:36:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 08:36:32 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x1000000) 08:36:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 78.462368][ T2195] loop0: detected capacity change from 0 to 128 [ 78.462656][ T2196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 78.477987][ T24] audit: type=1400 audit(1648888592.057:117): avc: denied { mounton } for pid=2188 comm="syz-executor.0" path="/root/syzkaller-testdir1163023288/syzkaller.cKwsYq/12/file0" dev="sda1" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 08:36:32 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x1000000) 08:36:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161430000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100014eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200014eb70325132510000eb70325107000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200014eb70325132510000eb70325108002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200014eb70325132510000eb7032511a0064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100014eb70325132510000eb7032510300000000002e2e202020202020202020100014eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200014eb70325132510000eb70325104001a040000", 0x80, 0x4a00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4c00}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x5200}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000011300)) [ 78.482735][ T2197] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 08:36:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x3c, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) [ 78.541350][ T2197] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 78.542721][ T24] audit: type=1400 audit(1648888592.097:118): avc: denied { mount } for pid=2188 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 78.571631][ T24] audit: type=1400 audit(1648888592.117:119): avc: denied { unmount } for pid=1821 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 08:36:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 78.578340][ T2207] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 78.604525][ T2207] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 78.634591][ T2212] loop0: detected capacity change from 0 to 128 08:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:41 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001480)=0x8) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xfe}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x0, 0x4, {0x5, @struct, 0x0, 0x524, 0x100000000, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x7ff}, 0x101, 0x4, [0x5, 0xe577, 0x3, 0x6, 0x4]}, {0x2, @struct={0xff}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2e, @struct={0x310c, 0x8}, 0x9, 0x2c1a, [0x0, 0x0, 0x0, 0x40, 0x7f, 0x5]}, {0x0, @usage=0x20000000, r4, 0x0, 0x81, 0x6, 0xa44, 0xfffffffffffffffa, 0x416, @struct={0x2, 0x4}, 0x7, 0x400, [0x0, 0x0, 0x7, 0x0, 0x0, 0x480]}, {0x0, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x180, 0x150, 0x150, 0x180, 0x0, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair(0x0, 0x4, 0x4, &(0x7f0000001440)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 08:36:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="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"/2746], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) 08:36:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161430000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100014eb70325132510000eb7032510300000000002e2e202020202020202020100014eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200014eb70325132510000eb70325104001a040000", 0x80, 0x4a00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4c00}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x5200}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000011300)) 08:36:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="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"/2746], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) [ 87.681005][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 87.691438][ T2225] loop0: detected capacity change from 0 to 128 [ 87.705496][ T2223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:36:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161430000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029ad1999f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100014eb70325132510000eb7032510300000000002e2e202020202020202020100014eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200014eb70325132510000eb70325104001a040000", 0x80, 0x4a00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4c00}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x5200}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7800}], 0x0, &(0x7f0000011300)) 08:36:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) [ 87.725797][ T2229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413b48daff3296247b7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff010000000100000000d7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3542c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf3023918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960f2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a92144e43a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbd6ea6cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109bec1267dd7d781aa230ac1cae00"/2746], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) [ 87.760814][ T2235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.770670][ T2238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 87.799301][ T2237] loop0: detected capacity change from 0 to 128 08:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60, 0xffff}}}, 0x24}}, 0x0) 08:36:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="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"/2746], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) 08:36:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x2c}}, 0x0) 08:36:50 executing program 4: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 96.880576][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x2c}}, 0x0) 08:36:50 executing program 4: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 08:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x2c}}, 0x0) 08:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x2c}}, 0x0) 08:36:50 executing program 4: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 96.927353][ T2259] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 96.957507][ T2268] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 96.983085][ T2272] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 08:36:51 executing program 4: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 08:36:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:51 executing program 2: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 97.749208][ T2278] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 97.757921][ T2279] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 08:36:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 08:36:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:57 executing program 2: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 08:36:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB='l\x00%'], 0x88}}, 0x0) 08:36:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) process_vm_readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/86, 0x56}], 0x8, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) fcntl$setpipe(r2, 0x407, 0xcf5d) 08:36:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB='l\x00%'], 0x88}}, 0x0) 08:36:57 executing program 2: set_mempolicy(0x4001, &(0x7f0000000000)=0xfffeffffffffffb5, 0xb8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x6}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 104.001049][ T24] audit: type=1400 audit(1648888617.577:120): avc: denied { ioctl } for pid=2290 comm="syz-executor.4" path="socket:[17184]" dev="sockfs" ino=17184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.017630][ T2295] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 104.035181][ T2291] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 08:36:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 08:36:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB='l\x00%'], 0x88}}, 0x0) 08:36:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 08:36:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB='l\x00%'], 0x88}}, 0x0) [ 104.063311][ T2302] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 104.071432][ T2303] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.096120][ T2310] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.124426][ T2314] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 08:37:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x711, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) 08:37:06 executing program 4: r0 = syz_io_uring_setup(0x6cdd, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0xffffff7c) 08:37:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ctr(serpent),xcbc-aes-ce)\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr128-generic\x00'}}}]}, 0x184}}, 0x0) 08:37:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 08:37:06 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) 08:37:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 08:37:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ctr(serpent),xcbc-aes-ce)\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr128-generic\x00'}}}]}, 0x184}}, 0x0) [ 113.197722][ T24] audit: type=1400 audit(1648888626.777:121): avc: denied { map_write } for pid=2322 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.246050][ T24] audit: type=1400 audit(1648888626.807:122): avc: denied { create } for pid=2320 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.265936][ T24] audit: type=1400 audit(1648888626.807:123): avc: denied { create } for pid=2323 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 08:37:06 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) 08:37:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) 08:37:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) [ 113.286364][ T24] audit: type=1400 audit(1648888626.807:124): avc: denied { write } for pid=2323 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.306690][ T24] audit: type=1400 audit(1648888626.807:125): avc: denied { nlmsg_write } for pid=2323 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.500212][ T2327] ================================================================== [ 113.508306][ T2327] BUG: KCSAN: data-race in io_wq_worker_running / io_wqe_enqueue [ 113.516002][ T2327] [ 113.518306][ T2327] write to 0xffff888107f5f004 of 4 bytes by task 2334 on cpu 1: [ 113.525907][ T2327] io_wq_worker_running+0x60/0xa0 [ 113.530917][ T2327] schedule_timeout+0xc1/0x290 [ 113.535658][ T2327] io_wqe_worker+0x37d/0x540 [ 113.540231][ T2327] ret_from_fork+0x1f/0x30 [ 113.544628][ T2327] [ 113.546928][ T2327] read to 0xffff888107f5f004 of 4 bytes by task 2327 on cpu 0: [ 113.554578][ T2327] io_wqe_enqueue+0x3f1/0x790 [ 113.559238][ T2327] io_wq_enqueue+0x31/0x40 [ 113.563631][ T2327] io_queue_async_work+0x228/0x470 [ 113.568732][ T2327] __io_queue_sqe+0x317/0x460 [ 113.573395][ T2327] io_submit_sqe+0x7d2/0x4a63 [ 113.578046][ T2327] io_submit_sqes+0x278/0x6c0 [ 113.582700][ T2327] __se_sys_io_uring_enter+0x2a2/0xbe0 [ 113.588132][ T2327] __x64_sys_io_uring_enter+0x74/0x80 [ 113.593487][ T2327] do_syscall_64+0x2b/0x50 [ 113.597880][ T2327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.603763][ T2327] [ 113.606063][ T2327] value changed: 0x0000000d -> 0x0000000b [ 113.611753][ T2327] [ 113.614050][ T2327] Reported by Kernel Concurrency Sanitizer on: [ 113.620182][ T2327] CPU: 0 PID: 2327 Comm: syz-executor.4 Not tainted 5.17.0-syzkaller-13993-g88e6c0207623-dirty #0 [ 113.630913][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.640942][ T2327] ================================================================== 08:37:07 executing program 4: r0 = syz_io_uring_setup(0x6cdd, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0xffffff7c) 08:37:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ctr(serpent),xcbc-aes-ce)\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr128-generic\x00'}}}]}, 0x184}}, 0x0) 08:37:16 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) 08:37:16 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:16 executing program 1: r0 = syz_io_uring_setup(0x6cdd, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0xffffff7c) 08:37:16 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:16 executing program 4: r0 = syz_io_uring_setup(0x6cdd, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0xffffff7c) 08:37:16 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ctr(serpent),xcbc-aes-ce)\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr128-generic\x00'}}}]}, 0x184}}, 0x0) 08:37:16 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:16 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2a, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000001b40)='\\', 0x20000000}, 0x20) 08:37:16 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100), 0x0}, 0x20) 08:37:16 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x1000, &(0x7f0000000340)=ANY=[]) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000440)=@v3={0x3000000, [{0x6d, 0xff}, {0x10001, 0x4}]}, 0x18, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 08:37:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x23418b10, 0x0, 0x1}, 0x48) 08:37:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x954) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3cae, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_setup(0x4755, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x283c, 0x0, 0x0, 0x0, 0x0) [ 122.654470][ T24] audit: type=1400 audit(1648888636.227:126): avc: denied { mounton } for pid=2385 comm="syz-executor.3" path="/root/syzkaller-testdir2476848443/syzkaller.8GzcWW/22/file0" dev="sda1" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 122.738401][ T24] audit: type=1400 audit(1648888636.317:127): avc: denied { setattr } for pid=2385 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.788034][ T24] audit: type=1400 audit(1648888636.347:128): avc: denied { unmount } for pid=1836 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.839467][ T2367] ================================================================== [ 122.847546][ T2367] BUG: KCSAN: data-race in io_wq_worker_running / io_wqe_enqueue [ 122.855243][ T2367] [ 122.857545][ T2367] write to 0xffff888122f95844 of 4 bytes by task 2375 on cpu 1: [ 122.865147][ T2367] io_wq_worker_running+0x60/0xa0 [ 122.870149][ T2367] schedule_timeout+0xc1/0x290 [ 122.874888][ T2367] io_wqe_worker+0x37d/0x540 [ 122.879477][ T2367] ret_from_fork+0x1f/0x30 [ 122.883868][ T2367] [ 122.886182][ T2367] read to 0xffff888122f95844 of 4 bytes by task 2367 on cpu 0: [ 122.893694][ T2367] io_wqe_enqueue+0x3f1/0x790 [ 122.898347][ T2367] io_wq_enqueue+0x31/0x40 [ 122.902740][ T2367] io_queue_async_work+0x228/0x470 [ 122.907827][ T2367] __io_queue_sqe+0x317/0x460 [ 122.912478][ T2367] io_submit_sqe+0x7d2/0x4a63 [ 122.917130][ T2367] io_submit_sqes+0x278/0x6c0 [ 122.921793][ T2367] __se_sys_io_uring_enter+0x2a2/0xbe0 [ 122.927226][ T2367] __x64_sys_io_uring_enter+0x74/0x80 [ 122.932574][ T2367] do_syscall_64+0x2b/0x50 [ 122.936989][ T2367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.942859][ T2367] [ 122.945156][ T2367] value changed: 0x0000000d -> 0x0000000b [ 122.950931][ T2367] [ 122.953228][ T2367] Reported by Kernel Concurrency Sanitizer on: [ 122.959351][ T2367] CPU: 0 PID: 2367 Comm: syz-executor.4 Not tainted 5.17.0-syzkaller-13993-g88e6c0207623-dirty #0 [ 122.969907][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.979936][ T2367] ==================================================================