[ 10.162662][ T2783] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 24.409086][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 24.409096][ T23] audit: type=1400 audit(1681978241.390:72): avc: denied { transition } for pid=3098 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.415320][ T23] audit: type=1400 audit(1681978241.390:73): avc: denied { write } for pid=3098 comm="sh" path="pipe:[14939]" dev="pipefs" ino=14939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 25.633023][ T3099] sshd (3099) used greatest stack depth: 11680 bytes left Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts. 2023/04/20 08:10:48 fuzzer started 2023/04/20 08:10:48 dialing manager at 10.128.0.163:38043 [ 33.112399][ T23] audit: type=1400 audit(1681978250.090:74): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.136332][ T3117] cgroup: Unknown subsys name 'net' [ 33.138885][ T23] audit: type=1400 audit(1681978250.120:75): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.163762][ T23] audit: type=1400 audit(1681978250.120:76): avc: denied { unmount } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.300577][ T3117] cgroup: Unknown subsys name 'rlimit' 2023/04/20 08:10:50 syscalls: 2854 2023/04/20 08:10:50 code coverage: enabled 2023/04/20 08:10:50 comparison tracing: enabled 2023/04/20 08:10:50 extra coverage: enabled 2023/04/20 08:10:50 delay kcov mmap: enabled 2023/04/20 08:10:50 setuid sandbox: enabled 2023/04/20 08:10:50 namespace sandbox: enabled 2023/04/20 08:10:50 Android sandbox: enabled 2023/04/20 08:10:50 fault injection: enabled 2023/04/20 08:10:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/04/20 08:10:50 net packet injection: enabled 2023/04/20 08:10:50 net device setup: enabled 2023/04/20 08:10:50 concurrency sanitizer: enabled 2023/04/20 08:10:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/04/20 08:10:50 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/04/20 08:10:50 USB emulation: /dev/raw-gadget does not exist 2023/04/20 08:10:50 hci packet injection: /dev/vhci does not exist 2023/04/20 08:10:50 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2023/04/20 08:10:50 802.15.4 emulation: enabled 2023/04/20 08:10:50 suppressing KCSAN reports in functions: '__xa_clear_mark' 'can_send' 'blk_mq_sched_dispatch_requests' 'generic_write_end' 'ext4_free_inodes_count' 'dont_mount' '__jbd2_journal_drop_transaction' [ 33.390065][ T23] audit: type=1400 audit(1681978250.370:77): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.415127][ T23] audit: type=1400 audit(1681978250.370:78): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.438433][ T23] audit: type=1400 audit(1681978250.370:79): avc: denied { create } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.458978][ T23] audit: type=1400 audit(1681978250.370:80): avc: denied { write } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/04/20 08:10:50 fetching corpus: 0, signal 0/2000 (executing program) [ 33.479409][ T23] audit: type=1400 audit(1681978250.370:81): avc: denied { read } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/04/20 08:10:50 fetching corpus: 43, signal 15069/18672 (executing program) 2023/04/20 08:10:50 fetching corpus: 89, signal 22073/27192 (executing program) 2023/04/20 08:10:50 fetching corpus: 138, signal 29371/35797 (executing program) 2023/04/20 08:10:51 fetching corpus: 187, signal 38009/45445 (executing program) 2023/04/20 08:10:51 fetching corpus: 237, signal 45878/54147 (executing program) 2023/04/20 08:10:51 fetching corpus: 285, signal 49007/58381 (executing program) 2023/04/20 08:10:51 fetching corpus: 334, signal 53548/63738 (executing program) 2023/04/20 08:10:51 fetching corpus: 384, signal 55929/67087 (executing program) 2023/04/20 08:10:51 fetching corpus: 432, signal 58987/70983 (executing program) 2023/04/20 08:10:52 fetching corpus: 481, signal 62239/74921 (executing program) 2023/04/20 08:10:52 fetching corpus: 531, signal 66665/79832 (executing program) 2023/04/20 08:10:52 fetching corpus: 580, signal 69521/83255 (executing program) 2023/04/20 08:10:52 fetching corpus: 628, signal 72250/86534 (executing program) 2023/04/20 08:10:52 fetching corpus: 678, signal 73879/88846 (executing program) 2023/04/20 08:10:52 fetching corpus: 728, signal 75710/91277 (executing program) 2023/04/20 08:10:52 fetching corpus: 777, signal 78358/94261 (executing program) 2023/04/20 08:10:53 fetching corpus: 827, signal 82706/98470 (executing program) 2023/04/20 08:10:53 fetching corpus: 877, signal 85393/101305 (executing program) 2023/04/20 08:10:53 fetching corpus: 927, signal 87152/103422 (executing program) 2023/04/20 08:10:53 fetching corpus: 975, signal 88563/105231 (executing program) 2023/04/20 08:10:53 fetching corpus: 1025, signal 90283/107199 (executing program) 2023/04/20 08:10:53 fetching corpus: 1072, signal 91753/108968 (executing program) 2023/04/20 08:10:54 fetching corpus: 1121, signal 93682/111024 (executing program) 2023/04/20 08:10:54 fetching corpus: 1171, signal 95292/112759 (executing program) 2023/04/20 08:10:54 fetching corpus: 1221, signal 96906/114569 (executing program) 2023/04/20 08:10:54 fetching corpus: 1271, signal 98538/116293 (executing program) 2023/04/20 08:10:54 fetching corpus: 1321, signal 99657/117626 (executing program) 2023/04/20 08:10:54 fetching corpus: 1370, signal 100898/119009 (executing program) 2023/04/20 08:10:55 fetching corpus: 1420, signal 102034/120320 (executing program) 2023/04/20 08:10:55 fetching corpus: 1469, signal 103252/121641 (executing program) 2023/04/20 08:10:55 fetching corpus: 1519, signal 104293/122788 (executing program) 2023/04/20 08:10:55 fetching corpus: 1569, signal 105824/124226 (executing program) 2023/04/20 08:10:55 fetching corpus: 1618, signal 107040/125471 (executing program) 2023/04/20 08:10:55 fetching corpus: 1668, signal 108056/126545 (executing program) 2023/04/20 08:10:56 fetching corpus: 1715, signal 109213/127722 (executing program) 2023/04/20 08:10:56 fetching corpus: 1762, signal 110082/128652 (executing program) 2023/04/20 08:10:56 fetching corpus: 1812, signal 112281/130219 (executing program) 2023/04/20 08:10:56 fetching corpus: 1862, signal 113634/131329 (executing program) 2023/04/20 08:10:56 fetching corpus: 1912, signal 114668/132268 (executing program) 2023/04/20 08:10:56 fetching corpus: 1962, signal 116091/133369 (executing program) 2023/04/20 08:10:57 fetching corpus: 2011, signal 117984/134578 (executing program) 2023/04/20 08:10:57 fetching corpus: 2057, signal 119287/135452 (executing program) 2023/04/20 08:10:57 fetching corpus: 2102, signal 120481/136338 (executing program) 2023/04/20 08:10:57 fetching corpus: 2152, signal 121540/137139 (executing program) 2023/04/20 08:10:57 fetching corpus: 2201, signal 122727/137975 (executing program) 2023/04/20 08:10:57 fetching corpus: 2251, signal 123945/138728 (executing program) 2023/04/20 08:10:57 fetching corpus: 2301, signal 124625/139257 (executing program) 2023/04/20 08:10:58 fetching corpus: 2351, signal 125727/139908 (executing program) 2023/04/20 08:10:58 fetching corpus: 2400, signal 126660/140512 (executing program) 2023/04/20 08:10:58 fetching corpus: 2447, signal 127266/140988 (executing program) 2023/04/20 08:10:58 fetching corpus: 2497, signal 128103/141527 (executing program) 2023/04/20 08:10:58 fetching corpus: 2547, signal 129212/142114 (executing program) 2023/04/20 08:10:58 fetching corpus: 2597, signal 130329/142629 (executing program) 2023/04/20 08:10:59 fetching corpus: 2647, signal 131313/143131 (executing program) 2023/04/20 08:10:59 fetching corpus: 2695, signal 131904/143497 (executing program) 2023/04/20 08:10:59 fetching corpus: 2745, signal 132552/143838 (executing program) 2023/04/20 08:10:59 fetching corpus: 2794, signal 133172/144193 (executing program) 2023/04/20 08:10:59 fetching corpus: 2843, signal 133673/144484 (executing program) 2023/04/20 08:10:59 fetching corpus: 2892, signal 134544/144804 (executing program) 2023/04/20 08:10:59 fetching corpus: 2941, signal 135665/145224 (executing program) 2023/04/20 08:11:00 fetching corpus: 2989, signal 136359/145487 (executing program) 2023/04/20 08:11:00 fetching corpus: 3039, signal 136993/145716 (executing program) 2023/04/20 08:11:00 fetching corpus: 3089, signal 138020/145983 (executing program) 2023/04/20 08:11:00 fetching corpus: 3138, signal 138714/146213 (executing program) 2023/04/20 08:11:00 fetching corpus: 3188, signal 139478/146391 (executing program) 2023/04/20 08:11:00 fetching corpus: 3238, signal 140432/146573 (executing program) 2023/04/20 08:11:01 fetching corpus: 3288, signal 141270/146737 (executing program) 2023/04/20 08:11:01 fetching corpus: 3336, signal 142064/146942 (executing program) 2023/04/20 08:11:01 fetching corpus: 3384, signal 142726/147094 (executing program) 2023/04/20 08:11:01 fetching corpus: 3431, signal 143421/147179 (executing program) 2023/04/20 08:11:01 fetching corpus: 3431, signal 143421/147234 (executing program) 2023/04/20 08:11:01 fetching corpus: 3431, signal 143421/147295 (executing program) 2023/04/20 08:11:01 fetching corpus: 3431, signal 143421/147343 (executing program) 2023/04/20 08:11:01 fetching corpus: 3431, signal 143421/147343 (executing program) 2023/04/20 08:11:03 starting 6 fuzzer processes 08:11:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 08:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) 08:11:03 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) [ 46.500853][ T3112] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3112 'syz-fuzzer' 08:11:03 executing program 2: socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1105243, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2}, 0x20) 08:11:03 executing program 4: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) [ 46.562602][ T23] audit: type=1400 audit(1681978263.540:82): avc: denied { execmem } for pid=3123 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 08:11:03 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000300)="9c", 0x1001, r0) [ 46.601895][ T23] audit: type=1400 audit(1681978263.580:83): avc: denied { read } for pid=3127 comm="syz-executor.5" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.668174][ T23] audit: type=1400 audit(1681978263.600:84): avc: denied { open } for pid=3127 comm="syz-executor.5" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.692045][ T23] audit: type=1400 audit(1681978263.600:85): avc: denied { mounton } for pid=3127 comm="syz-executor.5" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.713605][ T23] audit: type=1400 audit(1681978263.600:86): avc: denied { module_request } for pid=3127 comm="syz-executor.5" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.882254][ T23] audit: type=1400 audit(1681978263.690:87): avc: denied { sys_module } for pid=3133 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.101697][ T3133] chnl_net:caif_netlink_parms(): no params data found [ 47.175428][ T3127] chnl_net:caif_netlink_parms(): no params data found [ 47.227144][ T3137] chnl_net:caif_netlink_parms(): no params data found [ 47.249064][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.256218][ T3133] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.263549][ T3133] bridge_slave_0: entered allmulticast mode [ 47.270136][ T3133] bridge_slave_0: entered promiscuous mode [ 47.281338][ T3133] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.288512][ T3133] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.295648][ T3133] bridge_slave_1: entered allmulticast mode [ 47.302239][ T3133] bridge_slave_1: entered promiscuous mode [ 47.334792][ T3133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.354711][ T3127] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.361808][ T3127] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.369046][ T3127] bridge_slave_0: entered allmulticast mode [ 47.375430][ T3127] bridge_slave_0: entered promiscuous mode [ 47.392275][ T3133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.412445][ T3127] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.419647][ T3127] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.426799][ T3127] bridge_slave_1: entered allmulticast mode [ 47.433894][ T3127] bridge_slave_1: entered promiscuous mode [ 47.456170][ T3133] team0: Port device team_slave_0 added [ 47.486348][ T3133] team0: Port device team_slave_1 added [ 47.500901][ T3127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.510125][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.517226][ T3137] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.524626][ T3137] bridge_slave_0: entered allmulticast mode [ 47.531141][ T3137] bridge_slave_0: entered promiscuous mode [ 47.551393][ T3161] chnl_net:caif_netlink_parms(): no params data found [ 47.565655][ T3127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.579948][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.587068][ T3137] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.594554][ T3137] bridge_slave_1: entered allmulticast mode [ 47.601673][ T3137] bridge_slave_1: entered promiscuous mode [ 47.607868][ T3133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.614933][ T3133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.640910][ T3133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.654322][ T3133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.661363][ T3133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.687563][ T3133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.722400][ T3153] chnl_net:caif_netlink_parms(): no params data found [ 47.747289][ T3127] team0: Port device team_slave_0 added [ 47.754150][ T3137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.781603][ T3127] team0: Port device team_slave_1 added [ 47.788308][ T3137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.801549][ T3140] chnl_net:caif_netlink_parms(): no params data found [ 47.818291][ T3133] hsr_slave_0: entered promiscuous mode [ 47.824337][ T3133] hsr_slave_1: entered promiscuous mode [ 47.878765][ T3137] team0: Port device team_slave_0 added [ 47.885643][ T3137] team0: Port device team_slave_1 added [ 47.891983][ T3127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.898960][ T3127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.925188][ T3127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.943192][ T3153] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.950312][ T3153] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.957484][ T3153] bridge_slave_0: entered allmulticast mode [ 47.964074][ T3153] bridge_slave_0: entered promiscuous mode [ 47.970688][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.977849][ T3161] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.985280][ T3161] bridge_slave_0: entered allmulticast mode [ 47.991723][ T3161] bridge_slave_0: entered promiscuous mode [ 48.003260][ T3127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.010259][ T3127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.036202][ T3127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.051540][ T3153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.058635][ T3153] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.067213][ T3153] bridge_slave_1: entered allmulticast mode [ 48.073592][ T3153] bridge_slave_1: entered promiscuous mode [ 48.085402][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.092704][ T3161] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.101463][ T3161] bridge_slave_1: entered allmulticast mode [ 48.107976][ T3161] bridge_slave_1: entered promiscuous mode [ 48.120980][ T3137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.127942][ T3137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.153868][ T3137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.193100][ T3161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.202463][ T3137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.209711][ T3137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.235725][ T3137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.266605][ T3161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.277797][ T3140] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.285175][ T3140] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.292864][ T3140] bridge_slave_0: entered allmulticast mode [ 48.299393][ T3140] bridge_slave_0: entered promiscuous mode [ 48.306665][ T3153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.325686][ T3127] hsr_slave_0: entered promiscuous mode [ 48.331759][ T3127] hsr_slave_1: entered promiscuous mode [ 48.337657][ T3127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.345264][ T3127] Cannot create hsr debugfs directory [ 48.360084][ T3140] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.367236][ T3140] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.374585][ T3140] bridge_slave_1: entered allmulticast mode [ 48.380932][ T3140] bridge_slave_1: entered promiscuous mode [ 48.388306][ T3153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.408132][ T3161] team0: Port device team_slave_0 added [ 48.414916][ T3161] team0: Port device team_slave_1 added [ 48.472374][ T3161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.479444][ T3161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.505437][ T3161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.517326][ T3140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.527232][ T3153] team0: Port device team_slave_0 added [ 48.534934][ T3137] hsr_slave_0: entered promiscuous mode [ 48.541143][ T3137] hsr_slave_1: entered promiscuous mode [ 48.547069][ T3137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.554806][ T3137] Cannot create hsr debugfs directory [ 48.568317][ T3161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.575320][ T3161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.601293][ T3161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.614286][ T3140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.624074][ T3153] team0: Port device team_slave_1 added [ 48.699704][ T3133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.710104][ T3161] hsr_slave_0: entered promiscuous mode [ 48.716079][ T3161] hsr_slave_1: entered promiscuous mode [ 48.722025][ T3161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.729621][ T3161] Cannot create hsr debugfs directory [ 48.738446][ T3153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.745473][ T3153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.771377][ T3153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.784244][ T3153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.791258][ T3153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.817218][ T3153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.828876][ T3140] team0: Port device team_slave_0 added [ 48.834688][ T3133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.852404][ T3133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.880383][ T3140] team0: Port device team_slave_1 added [ 48.886104][ T3133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.951475][ T3127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.962855][ T3140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.969894][ T3140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.995797][ T3140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.010189][ T3153] hsr_slave_0: entered promiscuous mode [ 49.016438][ T3153] hsr_slave_1: entered promiscuous mode [ 49.022707][ T3153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.030323][ T3153] Cannot create hsr debugfs directory [ 49.039793][ T3127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.052616][ T3140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.059595][ T3140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.085546][ T3140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.102010][ T3137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.111654][ T3127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.125634][ T3137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.134986][ T3127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.158240][ T3137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.182382][ T3140] hsr_slave_0: entered promiscuous mode [ 49.188588][ T3140] hsr_slave_1: entered promiscuous mode [ 49.194558][ T3140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.202216][ T3140] Cannot create hsr debugfs directory [ 49.207664][ T3137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.285385][ T3161] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.306512][ T3161] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.315901][ T3161] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.325824][ T3161] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.339972][ T3127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.375199][ T3133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.387426][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.395689][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.404992][ T3153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.416154][ T3127] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.432652][ T3153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.442943][ T3153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.452370][ T3153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.473236][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.481068][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.490659][ T3133] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.501436][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.510171][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.519510][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.526691][ T3230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.536043][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.547518][ T3140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.573185][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.583108][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.591737][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.591809][ T23] audit: type=1400 audit(1681978266.570:88): avc: denied { remove_name } for pid=2728 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.598873][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.621248][ T23] audit: type=1400 audit(1681978266.570:89): avc: denied { rename } for pid=2728 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.629401][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.659352][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.667647][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.674799][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.682706][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.691678][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.700754][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.709094][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.716145][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.724183][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.733467][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.741332][ T3140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.750565][ T3140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.759042][ T3140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.780934][ T3137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.788120][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.797168][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.806050][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.814631][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.823319][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.833104][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.841330][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.851106][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.865591][ T3133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.876066][ T3133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.899385][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.908677][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.917806][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.927655][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.936542][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.948416][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.957268][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.966847][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.975304][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.983469][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.991253][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.002168][ T3161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.011622][ T3127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.022883][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.032629][ T3137] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.044402][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.052930][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.061082][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.069573][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.077822][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.086470][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.094794][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.101942][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.115845][ T3161] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.145086][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.153781][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.162193][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.170090][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.178703][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.187410][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.194698][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.202537][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.211452][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.222765][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.231234][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.240057][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.248409][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.257366][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.265804][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.274094][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.282420][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.293117][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.308330][ T3153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.318918][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.326573][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.334523][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.343269][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.351901][ T3231] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.358970][ T3231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.366980][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.375909][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.384254][ T3231] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.391322][ T3231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.402034][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.423587][ T3153] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.432606][ T3133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.452084][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.459993][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.467895][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.476005][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.483556][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.492590][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.501493][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.510208][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.520406][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.528705][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.537360][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.545744][ T3225] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.552906][ T3225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.560932][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.571497][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.580293][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.594941][ T3161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.605519][ T3161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.626698][ T3137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.639133][ T3127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.649180][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.658015][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.667278][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.675759][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.684714][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.693025][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.701575][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.710077][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.718582][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.725641][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.733503][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.742386][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.749808][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.757181][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.766350][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.774901][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.783612][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.791472][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.804124][ T3153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.814697][ T3153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.839851][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.848521][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.874233][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.882733][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.891611][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.899979][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.908194][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.916986][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.935524][ T3133] veth0_vlan: entered promiscuous mode [ 50.943791][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.969370][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.980510][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.001307][ T3133] veth1_vlan: entered promiscuous mode [ 51.011180][ T3140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.027788][ T3161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.035354][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.043715][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.051917][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.060087][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.067709][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.075546][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.083152][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.092829][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.103061][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.113796][ T3140] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.135830][ T3153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.149152][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.157494][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.173529][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.182431][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.191123][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.199619][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.206999][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.219714][ T3133] veth0_macvtap: entered promiscuous mode [ 51.227339][ T3133] veth1_macvtap: entered promiscuous mode [ 51.235413][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.243675][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.251833][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.260424][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.268761][ T3225] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.275866][ T3225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.284299][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.306937][ T3133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.314561][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.329242][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.337735][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.344980][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.353276][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.362512][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.371259][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.380163][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.388981][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.397764][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.412577][ T3137] veth0_vlan: entered promiscuous mode [ 51.426859][ T3127] veth0_vlan: entered promiscuous mode [ 51.435846][ T3140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.446491][ T3140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.458269][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.466976][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.475577][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.484216][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.493112][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.501453][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.510179][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.518677][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.527123][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.535354][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.544251][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.552710][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.562424][ T3133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.570279][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.578248][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.586212][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.594009][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.601583][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.609519][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.617276][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.626322][ T3225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.636945][ T3127] veth1_vlan: entered promiscuous mode [ 51.652288][ T3137] veth1_vlan: entered promiscuous mode [ 51.662263][ T3133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.671059][ T3133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.679896][ T3133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.689356][ T3133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.702628][ T3161] veth0_vlan: entered promiscuous mode [ 51.712084][ T3161] veth1_vlan: entered promiscuous mode [ 51.724254][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.732541][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.741379][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.749862][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.758232][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.766685][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.775381][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.783723][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.801460][ T3153] veth0_vlan: entered promiscuous mode [ 51.809764][ T3153] veth1_vlan: entered promiscuous mode [ 51.817747][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.827002][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.834840][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.843364][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.851980][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.860244][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.868102][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.876884][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.885466][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.893364][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.903480][ T3137] veth0_macvtap: entered promiscuous mode [ 51.912428][ T3137] veth1_macvtap: entered promiscuous mode [ 51.923684][ T3137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.934263][ T3137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.949070][ T3137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.958097][ T3137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.968802][ T3137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.979752][ T3137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.994247][ T3153] veth0_macvtap: entered promiscuous mode [ 52.002846][ T23] audit: type=1400 audit(1681978268.980:90): avc: denied { mounton } for pid=3133 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 52.032114][ T3161] veth0_macvtap: entered promiscuous mode [ 52.039749][ T3140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.046928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.056584][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.064621][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.072385][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.080056][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.088595][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.097433][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.106157][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.114997][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.123654][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.132505][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.141172][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.149905][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.158706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.168320][ T3127] veth0_macvtap: entered promiscuous mode [ 52.175259][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.183441][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.191445][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.200641][ T3153] veth1_macvtap: entered promiscuous mode [ 52.208436][ T3161] veth1_macvtap: entered promiscuous mode [ 52.222294][ T23] audit: type=1400 audit(1681978269.200:91): avc: denied { read write } for pid=3133 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.259998][ T3137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.268843][ T3137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.277632][ T3137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.281846][ T23] audit: type=1400 audit(1681978269.200:92): avc: denied { open } for pid=3133 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.286456][ T3137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 08:11:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 08:11:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) [ 52.310419][ T23] audit: type=1400 audit(1681978269.200:93): avc: denied { ioctl } for pid=3133 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.346449][ T3127] veth1_macvtap: entered promiscuous mode [ 52.361319][ T3153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 08:11:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) [ 52.371831][ T3153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.381866][ T3153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.381883][ T3153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.383162][ T3153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.416853][ T3161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.427513][ T3161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.437480][ T3161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.437568][ T3161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.437584][ T3161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.437595][ T3161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.452457][ T3161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.452705][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.453324][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.453763][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.454328][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.454887][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.455239][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.455882][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.462327][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.462348][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.462360][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.462374][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.462386][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.462399][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.462438][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.462453][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.463397][ T3127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.463858][ T3161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.463875][ T3161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.463887][ T3161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.463901][ T3161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.464721][ T3161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.466609][ T3161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.466647][ T3161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.466759][ T3161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.466792][ T3161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.472895][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.473749][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.474255][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.474791][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.476524][ T3153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.476541][ T3153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.476552][ T3153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.476566][ T3153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:11:09 executing program 0: r0 = socket(0x2, 0x2, 0x1) sendto$l2tp6(r0, &(0x7f0000000000)="cf716ec18e0dada8", 0x8, 0x0, 0x0, 0x0) [ 52.476634][ T3153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.476714][ T3153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.477776][ T3153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.531505][ T3153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.855973][ T3153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.864821][ T3153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 08:11:09 executing program 0: r0 = socket(0x2, 0x2, 0x1) sendto$l2tp6(r0, &(0x7f0000000000)="cf716ec18e0dada8", 0x8, 0x0, 0x0, 0x0) [ 52.873561][ T3153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.885509][ T23] audit: type=1400 audit(1681978269.860:94): avc: denied { create } for pid=3315 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.906483][ T23] audit: type=1400 audit(1681978269.860:95): avc: denied { write } for pid=3315 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 08:11:09 executing program 0: r0 = socket(0x2, 0x2, 0x1) sendto$l2tp6(r0, &(0x7f0000000000)="cf716ec18e0dada8", 0x8, 0x0, 0x0, 0x0) 08:11:09 executing program 0: r0 = socket(0x2, 0x2, 0x1) sendto$l2tp6(r0, &(0x7f0000000000)="cf716ec18e0dada8", 0x8, 0x0, 0x0, 0x0) [ 52.908772][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.935092][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.950543][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.961139][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.970973][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.981419][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.991384][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.001858][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.011697][ T3127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.022212][ T3127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.034947][ T3127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.055963][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.065261][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.074626][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.083406][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.106333][ T23] audit: type=1400 audit(1681978270.080:96): avc: denied { create } for pid=3326 comm="syz-executor.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.127886][ T23] audit: type=1400 audit(1681978270.080:97): avc: denied { map } for pid=3326 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.152505][ T23] audit: type=1400 audit(1681978270.080:98): avc: denied { read write } for pid=3326 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.210283][ T3127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.219122][ T3127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.228168][ T3127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.236898][ T3127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.256635][ T23] audit: type=1400 audit(1681978270.230:99): avc: denied { bpf } for pid=3326 comm="syz-executor.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.312534][ T3327] cgroup: fork rejected by pids controller in /syz1 [ 53.477945][ T4194] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 53.779047][ T6607] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 53.785855][ T3140] veth0_vlan: entered promiscuous mode [ 53.799512][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.808176][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 08:11:10 executing program 0: set_mempolicy(0x3, &(0x7f00000001c0)=0x1ff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x10}}, 0x24, 0x0) [ 53.826053][ T3140] veth1_vlan: entered promiscuous mode [ 53.841996][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.867965][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.896236][ T3140] veth0_macvtap: entered promiscuous mode [ 53.903447][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.912867][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.922356][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.933984][ T3140] veth1_macvtap: entered promiscuous mode 08:11:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:10 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000300)="9c", 0x1001, r0) [ 53.948435][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.959098][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.968945][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.979462][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.989338][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.999848][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.009687][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.020241][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.030074][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.040647][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.053118][ T3140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.141337][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.150651][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.161078][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.174705][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.185238][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.195224][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.205677][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.215514][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.226014][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.235883][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.246372][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.256475][ T3140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.266998][ T3140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.278538][ T3140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.286632][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.296150][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.313258][ T3140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.322086][ T3140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.331019][ T3140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.339786][ T3140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.622399][ T7825] loop4: detected capacity change from 0 to 2048 08:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) 08:11:11 executing program 2: socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1105243, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2}, 0x20) 08:11:11 executing program 0: set_mempolicy(0x3, &(0x7f00000001c0)=0x1ff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x10}}, 0x24, 0x0) 08:11:11 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000300)="9c", 0x1001, r0) 08:11:11 executing program 4: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) 08:11:11 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000300)="9c", 0x1001, r0) 08:11:11 executing program 0: set_mempolicy(0x3, &(0x7f00000001c0)=0x1ff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x10}}, 0x24, 0x0) [ 54.784170][ T9632] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 54.797072][ T9611] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 08:11:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:11 executing program 3: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) 08:11:11 executing program 0: set_mempolicy(0x3, &(0x7f00000001c0)=0x1ff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x10}}, 0x24, 0x0) 08:11:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) [ 54.978404][T10546] loop4: detected capacity change from 0 to 2048 08:11:13 executing program 2: socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1105243, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2}, 0x20) [ 56.048811][ C1] sched: RT throttling activated 08:11:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) 08:11:13 executing program 4: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) 08:11:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) 08:11:13 executing program 3: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) [ 56.156728][T10580] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 56.174374][T10577] loop3: detected capacity change from 0 to 2048 [ 56.190070][T10583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 08:11:13 executing program 2: socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x1105243, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2}, 0x20) 08:11:13 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:13 executing program 4: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) [ 56.222952][T10585] loop4: detected capacity change from 0 to 2048 [ 56.230542][T10588] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 08:11:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:13 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) [ 56.323889][T10590] loop3: detected capacity change from 0 to 2048 [ 56.387503][T10604] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 57.338583][T10603] cgroup: fork rejected by pids controller in /syz0 08:11:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:14 executing program 3: pidfd_open(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) shutdown(0xffffffffffffffff, 0x0) gettid() r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) 08:11:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) [ 57.846599][T11089] loop4: detected capacity change from 0 to 2048 [ 58.794998][T12720] ================================================================== [ 58.803118][T12720] BUG: KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker [ 58.811973][T12720] [ 58.814291][T12720] write to 0xffff88812885fa84 of 4 bytes by task 12930 on cpu 0: [ 58.822004][T12720] io_wq_worker_running+0x64/0xa0 [ 58.827039][T12720] schedule_timeout+0xcc/0x230 [ 58.831813][T12720] io_wqe_worker+0x4bd/0x8a0 [ 58.836398][T12720] ret_from_fork+0x1f/0x30 [ 58.840821][T12720] [ 58.843140][T12720] read to 0xffff88812885fa84 of 4 bytes by task 12720 on cpu 1: [ 58.850765][T12720] io_wqe_activate_free_worker+0xf4/0x270 [ 58.856492][T12720] io_wqe_enqueue+0x268/0x470 [ 58.861186][T12720] io_wq_enqueue+0x35/0x40 [ 58.865611][T12720] io_queue_iowq+0x1d1/0x310 [ 58.870208][T12720] io_req_task_submit+0xf4/0x130 [ 58.875160][T12720] tctx_task_work+0x1fe/0x4d0 [ 58.879844][T12720] task_work_run+0x123/0x160 [ 58.884449][T12720] get_signal+0xe64/0xff0 [ 58.888796][T12720] arch_do_signal_or_restart+0x89/0x2a0 [ 58.894356][T12720] exit_to_user_mode_loop+0x6f/0xe0 [ 58.899571][T12720] exit_to_user_mode_prepare+0x6c/0xb0 [ 58.905045][T12720] syscall_exit_to_user_mode+0x26/0x140 [ 58.910599][T12720] do_syscall_64+0x4d/0xc0 [ 58.915017][T12720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.920922][T12720] [ 58.923241][T12720] value changed: 0x00000005 -> 0x00000003 [ 58.928950][T12720] [ 58.931269][T12720] Reported by Kernel Concurrency Sanitizer on: [ 58.937405][T12720] CPU: 1 PID: 12720 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00089-gcb0856346a60 #0 [ 58.947812][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 58.957875][T12720] ================================================================== [ 59.089525][T12939] loop3: detected capacity change from 0 to 2048 08:11:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:18 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:19 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) [ 65.309598][T13553] cgroup: fork rejected by pids controller in /syz2 [ 65.375301][T13567] cgroup: fork rejected by pids controller in /syz4 [ 65.420553][T13567] ================================================================== [ 65.428687][T13567] BUG: KCSAN: data-race in io_wq_worker_running / io_wqe_activate_free_worker [ 65.437579][T13567] [ 65.439923][T13567] write to 0xffff88812736e604 of 4 bytes by task 13643 on cpu 0: [ 65.447655][T13567] io_wq_worker_running+0x64/0xa0 [ 65.452768][T13567] schedule_timeout+0xcc/0x230 [ 65.457624][T13567] io_wqe_worker+0x4bd/0x8a0 [ 65.462216][T13567] ret_from_fork+0x1f/0x30 [ 65.466635][T13567] [ 65.468956][T13567] read to 0xffff88812736e604 of 4 bytes by task 13567 on cpu 1: [ 65.476600][T13567] io_wqe_activate_free_worker+0xf4/0x270 [ 65.482327][T13567] io_wqe_enqueue+0x268/0x470 [ 65.487002][T13567] io_wq_enqueue+0x35/0x40 [ 65.491416][T13567] io_queue_iowq+0x1d1/0x310 [ 65.496011][T13567] io_req_task_submit+0xf4/0x130 [ 65.500967][T13567] tctx_task_work+0x1fe/0x4d0 [ 65.505676][T13567] task_work_run+0x123/0x160 [ 65.510285][T13567] get_signal+0xe64/0xff0 [ 65.514624][T13567] arch_do_signal_or_restart+0x89/0x2a0 [ 65.520263][T13567] exit_to_user_mode_loop+0x6f/0xe0 [ 65.525566][T13567] exit_to_user_mode_prepare+0x6c/0xb0 [ 65.531042][T13567] syscall_exit_to_user_mode+0x26/0x140 [ 65.536614][T13567] do_syscall_64+0x4d/0xc0 [ 65.541029][T13567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.546933][T13567] [ 65.549261][T13567] value changed: 0x00000005 -> 0x00000003 [ 65.554985][T13567] [ 65.557311][T13567] Reported by Kernel Concurrency Sanitizer on: [ 65.563453][T13567] CPU: 1 PID: 13567 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00089-gcb0856346a60 #0 [ 65.579244][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 65.589306][T13567] ================================================================== 08:11:22 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:22 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) [ 66.219183][T14760] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 66.944765][T14817] cgroup: fork rejected by pids controller in /syz3 08:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) [ 67.101192][T14925] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 08:11:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x392b, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) r3 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x340a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1217]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000013c0)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x4, &(0x7f0000000280)={0x0, {}, {{0x2, 0x0, @loopback}}}, 0x108) pipe2(&(0x7f0000000000), 0x4000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000003c0)=""/4096) 08:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x8, 0x9bbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}}, 0x0) [ 68.097412][T14949] netlink: 'syz-executor.5': attribute type 8 has an invalid length.