last executing test programs: 8.191262507s ago: executing program 2 (id=4583): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x50d65ad7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 7.224202813s ago: executing program 1 (id=4587): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0400460c"], 0x7) 7.162862421s ago: executing program 1 (id=4588): syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xccd, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x81, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xf5, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3f, 0xa4}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3401}}, {0x22, &(0x7f0000000400)=@string={0x22, 0x3, "700eabe146ea22fad50230912602a85d7ee8cf6ccc0e538e3a2f9901136d6d87"}}, {0x0, 0x0}, {0x56, 0x0}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000300)={0x8, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48}) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}], 0x1, 0x60010000, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) fsopen(0x0, 0x0) 6.94890189s ago: executing program 2 (id=4590): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000200)={[{}]}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0xe7}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f00000002c0)=0xad) 5.527633097s ago: executing program 1 (id=4597): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f047b931904"], 0x7) 5.469584843s ago: executing program 1 (id=4598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x7, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.918506503s ago: executing program 0 (id=4605): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0x1d4a9809, @mcast2, 0x1}}}, 0x90) 2.882044868s ago: executing program 0 (id=4607): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0aca6020f7"], 0xd) 2.737717465s ago: executing program 0 (id=4608): r0 = syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, &(0x7f0000013000), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, 0x0, 0x0) 2.734787543s ago: executing program 1 (id=4609): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES64=r5]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x2, 0x4, 0x28, @loopback, @private0, 0x80, 0x80, 0x4, 0x9}}) sendmsg$nl_route_sched(r6, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005300)={&(0x7f0000001a40)=@deltfilter={0x24cc, 0x2d, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x1, 0xfff2}, {0xc, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x164, 0x2, [@TCA_CGROUP_EMATCHES={0x14c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x5ab, 0x76a, 0x2ed9, 0x4, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x7}, {0x0, 0x14, 0x582, 0xdf6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x401}, {0x5, 0x4e, 0x7, 0x1, 0xa, 0x0, 0x2}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x9, 0x9, 0xfffe}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf0a}, {0x3, 0x4, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x42, 0x3, 0x7}, {0x2, 0xbe5, 0x7, 0x3ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x5}, {0x1, 0x2, 0x0, "8244"}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0xf87, 0x4, 0x697}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x9, 0x1}, {0x9, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9, 0x2}, {0xdd, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x1800, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9}, {0x6, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x2, 0x2}, {0x93, 0x54, 0x2}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x81, 0x2, 0x5}, {0xfff, 0x8, 0x0, "68cd637a012bd64f"}}}]}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3c}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x2300, 0x2, [@TCA_FW_ACT={0x1e88, 0x4, [@m_police={0x1e0c, 0x7, 0x0, 0x0, {{0xb}, {0x1d0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7ff, 0xb, 0xd, 0x3, 0x9, 0x7, 0x4, 0x206, 0x200, 0x9, 0x400, 0x6, 0x3, 0xf64, 0x49c, 0x1000, 0x8, 0xfffffffa, 0x2000000, 0x4, 0x1, 0x5, 0x7, 0x5, 0x7, 0x5, 0xa, 0xb13, 0xe, 0x1, 0xff00, 0x1, 0x0, 0x10, 0xffffffff, 0x1, 0x5, 0x2, 0x2, 0x2, 0x5a000, 0xd, 0x40, 0x7ff, 0x2, 0x3, 0x0, 0xbce2, 0x3, 0xb, 0xfffffffa, 0x7, 0x10001, 0x0, 0x1, 0x6, 0x7, 0xfc70, 0x5, 0x9, 0x401, 0x5, 0x2, 0xe, 0x8001, 0x4, 0xff, 0x8, 0x1, 0x2, 0x5, 0xd1, 0x7, 0x3, 0x8, 0x4, 0x7, 0x6, 0x8, 0xe, 0x8, 0x7, 0x8cab, 0x0, 0xf, 0x4, 0x6, 0x80, 0x2, 0x9, 0x7, 0x9, 0x7, 0x2, 0x5, 0x1, 0xe, 0x7, 0x10, 0x3, 0x6, 0x6, 0x9, 0xfffffff3, 0x3, 0x3, 0x0, 0x3, 0x10001, 0xffff, 0xc2f0, 0x7, 0x6, 0x9, 0x80000000, 0xdc, 0x5, 0x0, 0x1, 0x3ff, 0x53338fd7, 0xfffffff6, 0xfffffffd, 0xffff, 0x6, 0xa, 0x0, 0x6, 0x6, 0x101, 0xfffffff7, 0x2, 0x0, 0x2, 0x7fffffff, 0xff, 0x9, 0x46, 0x1, 0xffffff3a, 0x5, 0x10000, 0x100, 0xc, 0x9, 0xc9, 0x2, 0x2, 0x757, 0x8, 0x4, 0x10, 0x9, 0xa, 0x1a, 0xbf8a, 0x9, 0xa, 0x80, 0x2e0e, 0xb, 0x7, 0x5, 0x10001, 0x7, 0x7, 0xfff, 0x7fff, 0x4, 0x88, 0x639f29cf, 0x10, 0x8, 0xf, 0xf, 0x9, 0x1, 0x9, 0x4, 0x1, 0x6, 0x0, 0x547, 0x6, 0x8320, 0x3, 0x4, 0x6, 0x2, 0x7ff, 0x10001, 0x6, 0x4, 0x70c0, 0x7f6, 0x7ff, 0x7, 0x3, 0x78, 0x6, 0x6, 0x5344, 0xa, 0x8, 0x0, 0xfffffff8, 0x8, 0x9, 0x5cd, 0x2, 0x7, 0x1, 0x2, 0x8, 0x9, 0x3ff, 0x9, 0x3, 0x8, 0x6, 0xfffff6af, 0x3, 0x7fff, 0x7, 0x8, 0x5, 0xc, 0x3, 0x1, 0x101, 0xffff, 0x5, 0x7c, 0x10, 0xb, 0x7fe0000, 0x0, 0xa90b, 0x73, 0x0, 0x8001, 0x4, 0x2, 0xc, 0xfffffff7, 0x7, 0x1, 0x8, 0x6, 0x7fff, 0x1000, 0xa7, 0x8, 0x2, 0x2e3a6911]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0xffffffffffffffff, 0x5, 0xbe, 0x4, {0x80, 0x2, 0x9, 0x1000, 0x5, 0x8}, {0x6, 0x2, 0x7f, 0x7, 0x9, 0x6b8}, 0x182, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa329, 0x482, 0x5, 0xdb0, 0x6, 0xf, 0x81, 0xe, 0xcb, 0x3, 0x1, 0x4, 0xa, 0x1ff, 0xffff, 0x6, 0x7, 0xc, 0x7, 0x5, 0x401, 0x5, 0x9, 0x8, 0x7, 0x25a, 0x6956, 0x6, 0x9cd7, 0x8, 0x0, 0x9, 0x6, 0xa0f, 0xfffffffe, 0x0, 0x8, 0xc, 0x200, 0x81, 0x4, 0x7, 0x1a64, 0x8001, 0x1, 0x9, 0x7, 0x7, 0x9, 0x9daf, 0x100, 0x73d9230a, 0x4, 0x537999a6, 0x4, 0x4c0, 0x7fff, 0x8, 0x0, 0x2, 0x5, 0x9, 0xe, 0x3, 0x9, 0x86a7, 0xffff6eca, 0x81, 0x4, 0x1000, 0xf4, 0x1, 0x2, 0x9, 0xd, 0x1, 0x80000000, 0xffffffff, 0x3, 0x8, 0x800, 0x12800000, 0x200, 0x8, 0x5, 0xffffffc0, 0x9, 0xcc, 0x9, 0xe, 0x9, 0x9, 0x1, 0x0, 0x1000, 0x3a2, 0x1, 0x7, 0x8, 0x1f, 0x9, 0x81, 0x7cff25c6, 0x9, 0x3, 0x7f, 0x4, 0x7, 0x9, 0x9, 0x4, 0x0, 0x10001, 0x0, 0x6, 0x1, 0x7, 0x800, 0xfffffa7e, 0x7, 0x6, 0x80, 0x10000, 0x6, 0xc0000000, 0x4, 0x81, 0x7fffffff, 0x2, 0x7, 0x46ed, 0x2, 0x10000, 0xd, 0x7, 0x5, 0x1c000000, 0x9, 0x7fff, 0x200, 0x8, 0x9, 0x7f, 0x10, 0x8f, 0xc69, 0x6, 0x7ff, 0x7fff, 0x0, 0x2, 0x7, 0x8000, 0x7c, 0x1, 0x5fc, 0x5, 0x3, 0x5, 0x7, 0x96, 0xfffffffc, 0x30000000, 0x200, 0x800, 0x44d, 0xfff, 0x6189, 0x5, 0x6, 0x81, 0x0, 0x9, 0x7, 0x7, 0x6264, 0x80, 0xe29f, 0x10001, 0x5, 0xb, 0x5, 0x521d, 0x2, 0x5, 0x6930, 0x9, 0x7, 0x9, 0x7, 0x2, 0x5, 0x6, 0x9, 0x9, 0x7, 0x3, 0x800, 0x9, 0xfff, 0x80000000, 0xd5a7, 0x1fffe0, 0x101, 0xca2f, 0x2, 0x60c, 0x8, 0xe0000000, 0x7, 0x2, 0x800, 0x6, 0x6, 0x80, 0x3ff, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x4, 0x1, 0x1, 0xfffffff0, 0x6, 0x1, 0x6, 0x3, 0x8, 0x5, 0x80000000, 0xd003, 0x1, 0x7, 0x9, 0x9, 0x8, 0xfffff7f8, 0xffff8001, 0x400, 0x1, 0x6, 0x1, 0x6, 0x1800000, 0x4, 0x2, 0xe, 0xffff, 0x4, 0x6, 0x7, 0x3, 0x8, 0x31]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x400, 0x0, 0x6, 0x9, 0x5, 0x800, 0x8f4, 0x4, 0xa03f, 0x1, 0x2, 0x9, 0x37, 0x3, 0xe88, 0x6712, 0x7da, 0xd, 0x5, 0x80, 0x40, 0x664b, 0x2, 0x4, 0x7ff, 0x400, 0x4, 0x9, 0x5, 0x8, 0x2, 0x7c, 0x5, 0x7, 0x5e, 0x3, 0xb, 0xe8b, 0x200, 0x1, 0x1, 0x7fff, 0x2, 0x0, 0x4, 0x0, 0x6, 0xe3a, 0x6, 0x401, 0x38d0, 0x7fffffff, 0xff, 0x3, 0x2, 0x8, 0xfffffffe, 0x2, 0xfffffffc, 0x7, 0xfffffc01, 0x3, 0x7, 0x7, 0x6, 0x9, 0xfffffffe, 0x80, 0x1, 0x97, 0x7, 0x7, 0x0, 0x0, 0x1, 0x10, 0x7f, 0x8, 0x6, 0x9, 0x8, 0x100, 0x0, 0x10001, 0x6, 0x9, 0x81, 0x26c8, 0x4, 0x2, 0xac68, 0xfffffffa, 0x10000000, 0x7, 0xffffffff, 0x2, 0x80000001, 0x886c, 0x256, 0x1, 0xff, 0x6, 0xb053, 0x8001, 0xc, 0x9, 0x2, 0x1, 0x211, 0x400, 0x5, 0x2, 0x25b000, 0x3, 0x7fff, 0x4, 0x891, 0x0, 0x8, 0x10000, 0xa9, 0x64dd, 0x100, 0x3, 0x6, 0x5, 0x5, 0x3, 0x7fffffff, 0xe, 0x81, 0x800, 0x7, 0x0, 0x7, 0xb7, 0x2, 0x3, 0x8001, 0x6, 0x502e6dfd, 0x1000, 0x3, 0x52419203, 0xe18, 0xffff5f4b, 0x800, 0x8, 0xf61, 0x8, 0x8, 0xf748, 0xa, 0x7, 0x9, 0x16, 0x5, 0x7fffffff, 0x1, 0x0, 0x7, 0xfffffff9, 0x0, 0x8, 0xffffff57, 0x400, 0xfffffffa, 0x6, 0x7fffffff, 0x800, 0x5583, 0x2, 0x6, 0xfffffff4, 0x7f, 0x3478, 0x80, 0x2, 0xffffffff, 0x7, 0x81, 0x2, 0x7, 0x9, 0x0, 0x3ff, 0x3, 0x81, 0x0, 0x40, 0x3, 0x400, 0x9, 0x0, 0x0, 0x3, 0x988, 0x40, 0x5, 0x2, 0x51a, 0x8, 0x6, 0xfffffff7, 0x7fffffff, 0xff, 0xffff, 0x8, 0x40, 0x10, 0x249, 0x8, 0x4, 0x7e, 0x8, 0xe3, 0x394, 0x1ff, 0x1, 0x80000000, 0x19, 0x1ff, 0x1, 0x62b, 0x2, 0xfa19, 0x69e5, 0x6, 0x7, 0xeb, 0xbf9b, 0x2, 0x800, 0x2, 0x7, 0x9, 0x3, 0xfffffbff, 0xbf, 0x2d4, 0x401, 0x10000, 0x7, 0x7, 0x2, 0x5, 0x5, 0x3, 0x2, 0x9, 0xf, 0x0, 0x8001, 0x94]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x2, 0x0, 0x3, {0x6, 0x0, 0x5, 0xbdcf, 0x9, 0x9}, {0x5, 0x1, 0x9, 0x7f, 0x0, 0x40}, 0x5, 0x4, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x93}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xee, 0x8, 0xdb3, 0x6, 0x6, 0x4, 0xd6, 0x4, 0x8, 0x1, 0x143, 0x1, 0x0, 0x3f7, 0x9, 0x9, 0x2, 0x6, 0x4, 0x4, 0x8000, 0x6, 0xffff, 0x2, 0x5, 0x3, 0xa, 0x7, 0x9, 0x6, 0x0, 0xb, 0x91ce, 0x9, 0x40, 0x0, 0x3, 0x6, 0x10, 0x0, 0x0, 0x1, 0xc7, 0x5, 0x7fff, 0x2, 0xb879, 0x5, 0x1, 0x7, 0xfffffff9, 0x5, 0x0, 0x1, 0x2, 0x6be, 0x9, 0x5, 0x2, 0x2, 0xfffffff8, 0x0, 0x8, 0x0, 0x3, 0x5, 0xe, 0xffffffff, 0xc, 0x8, 0x3d5c, 0x8001, 0x824e, 0x80000001, 0x9, 0x5, 0x3, 0x8, 0x7b6000, 0x7, 0x6, 0x63c6a3f4, 0x3ff, 0x6, 0x1, 0x2, 0x7, 0xff, 0x7, 0x7ff, 0x4, 0x200, 0xfff, 0x4, 0xff, 0x5, 0x7, 0x5, 0x9, 0x82, 0x2, 0x0, 0xffff, 0x7fff, 0xffff, 0x3, 0x0, 0x4, 0xd, 0x5, 0x10, 0x87, 0xffffe0c0, 0xccf, 0x6, 0x2, 0x0, 0x1, 0x0, 0xfffffffb, 0x80000000, 0x1, 0x7, 0x5, 0x8, 0x2, 0x10001, 0x3, 0x6, 0x2000, 0x3, 0x4, 0x7f, 0x2, 0x1, 0x80000001, 0x3, 0xb44, 0x3, 0x5, 0x505, 0xfffffff9, 0x4, 0x80000001, 0x1000, 0x1, 0x9, 0x1, 0x5, 0xd9, 0xaa, 0x1, 0xfffff0ed, 0x80000000, 0xfffffff7, 0x1ff, 0x2, 0x5056, 0x7f, 0x2, 0xa, 0x7, 0xea04, 0x0, 0x9, 0xd54e, 0x73, 0x4, 0x400, 0xff, 0x8, 0x5, 0x4, 0x7, 0x80000000, 0x7fffffff, 0x9, 0x6, 0x0, 0xb, 0x4, 0x5, 0x400, 0x1ff, 0x9, 0x400, 0x2, 0x1, 0x7, 0x8, 0xffff, 0x2, 0x5, 0x698, 0x43d, 0x6, 0x3ff, 0x3, 0xffffffff, 0x561, 0x0, 0x40, 0x8, 0x7ff, 0x6, 0x8, 0x200, 0xffffffff, 0x7, 0x8001, 0x1, 0x7fffffff, 0x3ff, 0x7, 0x1, 0xfffffff7, 0x10001, 0xed9, 0x1, 0x3ff, 0x5, 0x4, 0x4, 0x401, 0x6de, 0xfffffffa, 0xf, 0x9, 0x9, 0x6, 0x2, 0xfffffff9, 0x7, 0x924, 0x4, 0x8, 0x4a2a, 0x3, 0x9, 0x50e, 0x6, 0x9, 0xbdf, 0xfffffff8, 0x8, 0x9, 0x5, 0x7, 0x8, 0x6, 0xffff, 0x4, 0x0, 0x1, 0xac7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x1, 0x0, 0x3, 0x401, 0x8, 0x52, 0xb3, 0x2, 0x1, 0x2, 0x7, 0xd, 0x7d, 0xdf, 0x0, 0x1, 0x7, 0x6, 0x3c4, 0x3ff, 0x0, 0xfffffff9, 0x5, 0x750, 0xd, 0x9, 0x0, 0x9, 0x9, 0xd6c, 0x95, 0x1, 0x180000, 0x8, 0x3, 0x38ef, 0x7ff, 0xfffffe01, 0x7, 0xffff, 0xd, 0x0, 0x7, 0x4, 0x7, 0x2, 0x6, 0x6, 0x160f, 0x1ff, 0xf, 0x5, 0xe, 0x4, 0x2800, 0x8e, 0x9, 0x0, 0x8c03, 0xffff, 0x10001, 0x2, 0xf61, 0x7, 0xffffffff, 0x4, 0x8, 0xffffffc9, 0x368d2866, 0x1, 0x8e7, 0x1000, 0x7, 0x7, 0x400, 0x9be, 0x800, 0x2, 0xbf00, 0x1, 0xffffffff, 0xfffffffc, 0x3, 0xffffff01, 0x8, 0xdc, 0x6, 0x7, 0xbfae, 0x7fffffff, 0x1c5c, 0xec, 0x5, 0xca, 0x71f, 0x401, 0xf7, 0x4a36, 0x2, 0x1, 0x5f66d06b, 0x5, 0x7fa, 0x10001, 0x8, 0x9, 0x4, 0x7, 0x1, 0xffffffff, 0x7ff, 0xf, 0x5, 0xae2, 0x4c4, 0x5, 0x80, 0x4, 0x9, 0x4, 0x45d, 0x7, 0x100, 0x6, 0x2, 0x200, 0x1, 0xe, 0xb, 0x1e, 0x7ff, 0x3, 0x4, 0x0, 0x1, 0x5, 0x4, 0x941, 0x0, 0xbd7, 0xc, 0x2, 0x7fff, 0x77e122e8, 0x9, 0xbd20, 0x5, 0x200, 0x1, 0x8, 0x0, 0x9, 0x18, 0xdd81, 0xc8, 0xc, 0x3, 0x48209f61, 0x401, 0xa, 0x80, 0x9, 0x7, 0x8, 0xe5a3, 0x3, 0x7fff, 0x2, 0x7, 0x8, 0x1, 0xc1, 0xffffff5a, 0x2, 0xffffffff, 0x387, 0x4, 0x8001, 0x9, 0x81, 0x6, 0x81, 0x3, 0x0, 0x25b, 0x90000000, 0x400, 0x8, 0x9, 0x28, 0xffff, 0x2deb, 0x7, 0x5, 0x60d, 0x0, 0xae, 0x80, 0x8, 0x7, 0x9, 0x1, 0x0, 0xfffffffb, 0x8, 0x300, 0x5, 0x85e, 0x5, 0x6, 0x400, 0x5, 0x8, 0x0, 0x4, 0x1, 0x80000001, 0xfffffff7, 0x2, 0x10, 0x800, 0x5, 0x8, 0x89, 0x2546, 0x4671, 0x3, 0x100, 0xffffffff, 0xff, 0x6, 0x7, 0x2, 0x5ffae2c2, 0x7, 0x81, 0x4, 0x0, 0x72a68643, 0xfff, 0x40, 0x3, 0x2, 0x5, 0x6, 0x10, 0x4, 0x9, 0xf, 0xfffffff7, 0x45, 0x9, 0x1, 0x10000]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0xfffffff9, 0x7, 0x6, 0x3, 0x800, 0xffffba65, 0x5, 0x3, 0x5, 0x8, 0x1, 0x4a4, 0x7, 0x2, 0xfffffffa, 0x1ff, 0x6, 0x6, 0x7fffffff, 0x3, 0x9, 0xa, 0x2, 0x1690, 0x6, 0x0, 0x91, 0x10000, 0xc, 0x9, 0x200, 0x9, 0xffff8001, 0x3, 0xa, 0x2, 0x4, 0x8, 0x3, 0x43, 0xff, 0x9852, 0x7, 0x1000, 0x0, 0x2, 0xfffffffc, 0x0, 0x4, 0xfff, 0x7fff, 0x5, 0x2, 0x422, 0x7, 0x7, 0x3, 0x400, 0x0, 0x8, 0x3, 0x1a5, 0x34, 0x8, 0x2, 0x0, 0x6, 0x4, 0x3, 0x9, 0xc63, 0x4, 0x4, 0x1, 0x1, 0xfffffffc, 0x5, 0x0, 0x5, 0x80000000, 0x9, 0x1000, 0x5, 0xaa, 0x0, 0x9, 0x101, 0x3, 0x4, 0xfffffffc, 0x8, 0xd3, 0x2, 0x93b2, 0x9, 0x6, 0x6, 0x1, 0x8, 0x6, 0x9885, 0x9, 0x80000001, 0x4, 0x3b7, 0x80, 0x8c8, 0xe, 0x93, 0x3c11, 0x0, 0xa, 0x2, 0x4012, 0xde, 0x6, 0x9, 0xd65, 0x2, 0x5, 0x0, 0x9069, 0xfffffffa, 0x5e, 0x400, 0x6, 0x1, 0x405, 0x5, 0x8, 0x7, 0x1, 0xfffffff4, 0xd1ac, 0x2, 0x9, 0x7fffffff, 0x20ca, 0x8764, 0x7, 0x400, 0x7, 0x9, 0x7, 0xfffffffd, 0x9, 0x5, 0x6, 0x7, 0xc, 0x7fffffff, 0xf9b, 0xe, 0xe77, 0x2, 0x0, 0x7, 0xac, 0x9, 0x2e, 0x9, 0x9, 0x5, 0x8, 0x1, 0xffffffaa, 0xfffffff7, 0xc7, 0x5, 0x80, 0x3, 0x7, 0x5, 0x136, 0xd565, 0x1, 0xd, 0x2, 0x7, 0x2, 0x400, 0x400, 0xb9, 0x401, 0xa8, 0x4f71, 0x4, 0x9, 0x424, 0x8, 0x200, 0x4, 0x399, 0x0, 0x2, 0x6, 0xf, 0x3, 0x4, 0x2, 0x5, 0x9, 0x1, 0xff, 0x200, 0x8, 0xfffffff8, 0x2, 0x1, 0x4, 0x2, 0x7, 0x3, 0x2, 0x10001, 0xff, 0x4, 0x3, 0x8, 0x3, 0x400, 0x3, 0x10, 0x8, 0x0, 0x8, 0x14000000, 0x3, 0x1000, 0x0, 0x100, 0xd, 0x4, 0x3, 0x80000000, 0x0, 0x6, 0x902, 0x7ff, 0xfffffffa, 0x3, 0x3, 0x9, 0x1000, 0x7, 0xfffffffd, 0x0, 0xd7b, 0x400, 0x3, 0x1, 0x7, 0x8001, 0x7497]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x741, 0x3, 0x1, 0xfffffff9, 0x65, 0x1, 0x728f, 0x1b7, 0x2, 0x5, 0x60, 0x100, 0xffff6c88, 0x0, 0x5, 0x3, 0xad, 0x2, 0x2, 0x400, 0x3fe000, 0xff, 0x7f, 0x6, 0x5, 0x1, 0x2, 0xde8, 0x1, 0x5, 0x5df, 0x6, 0x1, 0xc2, 0x400, 0x7, 0x8001, 0x6, 0x7e, 0x3, 0x1, 0x6, 0x400, 0x80000000, 0x2, 0x0, 0xe, 0x5bf, 0x7, 0x2ee, 0xfffffffc, 0x7, 0x10001, 0xb69, 0xf, 0x52c, 0x6, 0xf, 0x8, 0x4, 0x7, 0xff, 0x1000, 0x1, 0x616, 0x6a7, 0x1, 0x8, 0x4, 0xff, 0x4, 0xfffffeff, 0xb, 0x4, 0x6d, 0x800, 0x9, 0x93a, 0x9, 0x5, 0xc, 0x5, 0x1000, 0x5, 0x9, 0x20df, 0x45, 0x2, 0x8, 0x6, 0x6fd, 0x7, 0x90f, 0x7, 0xffff09f3, 0x6, 0xc, 0x400, 0x1, 0x9, 0x100, 0x9, 0x9, 0x9, 0x80000000, 0x8, 0x7c, 0x6, 0x7, 0xfffffffe, 0xfff, 0x8, 0x3ff, 0x7, 0x7, 0x100, 0x6, 0x1a, 0x2, 0x3, 0x8, 0x6, 0x5, 0x200, 0xe, 0x80, 0x6, 0xff23, 0x101, 0x54ae, 0x1, 0x6bb0, 0xa, 0x2b, 0x8, 0x0, 0x8, 0x0, 0xc641, 0xb1, 0x42, 0x2, 0x4, 0x6, 0x0, 0xcfdc, 0x6, 0x8, 0x4, 0xfffffff8, 0x0, 0x8001, 0xfb4, 0x4e9278ae, 0xb4, 0x1, 0x3, 0x5, 0x2, 0x8, 0xfffffff6, 0x3, 0xb, 0x1ff, 0xffff, 0x2, 0x7, 0x2, 0x5, 0x8000, 0x16b, 0x1, 0x8, 0xfffffff7, 0xfff, 0x7, 0x4, 0x1, 0x2, 0xd, 0x6, 0x7ff, 0x80000000, 0x2, 0x1ff, 0x3, 0x5, 0x100, 0xd, 0x800, 0x1, 0x6, 0x5, 0xe3fc, 0x7fff, 0x7, 0x4, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0xfbec5ad5, 0x5, 0x4, 0x7, 0x6d2, 0xfd, 0x69c3, 0x3a, 0x85, 0x1, 0x1, 0x7fffffff, 0x7, 0xffff, 0xe43, 0x7, 0x0, 0x942c, 0x6, 0x1, 0x0, 0x10001, 0x4, 0x7, 0x9, 0x23, 0x36, 0xfffffff9, 0x3, 0xb0000000, 0x9, 0xf4, 0x401, 0x4, 0x9, 0x0, 0x7fff, 0x2, 0xa7, 0x4, 0x2, 0xaf9, 0x4, 0x7, 0x960d, 0x9e, 0x6, 0x80, 0x80000001, 0x2, 0x5, 0x6, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0xfff, 0x7f, 0x3, {0x3, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x7f, 0x2, 0x6, 0x101, 0xc, 0x6}, 0x0, 0x800, 0x40}}]]}, {0xd8, 0x6, "2b7db95e71dac020469cc6afdd7568ffe588f5a39d243fd504b206e107809f1759820af06511a115aceda86e04da5edefa54f4b74a95b4512a9984735fe91c65fd4f8fa8b1c1d86c2adac1931e5cff4d5980778d59d0dda57c1bd25c72c1b730a9e811af146958ac260fec6a02615917bfa43cdcc6de45e3bd330243b27d858011a177211e94749f149aa05173e83a9e6fd49a2aae0d2858940e380c5f6fdebd84a308cf68b21386f1ae4e11868ddad58381296aab6c751b8af4a1a9cd1c32034952c4604594cd29d42b14773458d51584b8cdc1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x78, 0x9, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x68d49972, 0x6, 0xffffff32, 0x2cb}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x0, 0x7, 0xf034, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x92c2263df90d6d2d}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_POLICE={0x42c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x1000, 0xff, 0x1, 0x10000, 0x7, 0x81, 0x2, 0x8, 0x4, 0x9, 0x7ff, 0x5c9, 0x1efc, 0xff, 0x3, 0x3, 0x7, 0xff, 0x400, 0x4, 0x2999e769, 0x5806, 0x4, 0x8, 0x4, 0x1, 0x39, 0x400, 0x2f000000, 0x62, 0x101, 0xf7a, 0x1, 0x6, 0x101, 0x0, 0xa51f, 0x8, 0x7, 0x6, 0xa4d5, 0x8, 0x47, 0x9, 0x80, 0x1, 0x9, 0x7, 0xbaf7, 0x601a, 0x2, 0x3, 0x8, 0x5, 0xa80000, 0xfffffffe, 0x3, 0x2, 0x4, 0x2, 0x27a, 0x4, 0x6, 0x80000001, 0x1000, 0xff, 0x8, 0x7, 0x940, 0x4a, 0x80000000, 0x1, 0x5, 0x800, 0xff, 0x6, 0xfffffffa, 0xbcfd, 0x6, 0x5, 0x4, 0x7876, 0x0, 0xc, 0x4, 0x5, 0x6, 0x9, 0x3f8, 0x0, 0x9, 0xfffffffb, 0x0, 0x8, 0xf, 0x95, 0x8, 0x9, 0x3ff, 0xb, 0xb75, 0x1, 0x0, 0x4ec, 0x5, 0x7, 0x3, 0x8, 0x3, 0x3ff, 0x1, 0x8, 0x1, 0x7, 0x7fff, 0x3, 0x4, 0x6, 0x9, 0xa, 0xfffffff8, 0x80, 0x0, 0xb3c8, 0x55f, 0xa4b, 0xfffffff8, 0xffff, 0x4, 0x7, 0x7ff, 0x9, 0x65, 0x5, 0xc, 0x84c, 0x8, 0x9, 0x80000001, 0x10, 0x2, 0x1a9, 0x491, 0x10000, 0x7, 0x7, 0x3, 0x4, 0xf9c5, 0x17f, 0x3, 0x2, 0x94, 0x40, 0xfb7, 0x0, 0x2, 0x0, 0x7, 0xfffffffa, 0x6, 0xf, 0xd, 0x0, 0x1, 0x6, 0x2, 0x9, 0x6e, 0x8, 0x12, 0x2, 0xe, 0x1, 0x9, 0xedc, 0x1ffc000, 0x800, 0x3, 0xfffff243, 0x6, 0x4, 0xd648, 0x1, 0x7ff, 0x5, 0x0, 0x80, 0x6, 0x1, 0x3, 0xfffffff7, 0x7, 0x1, 0xa, 0x6c, 0x9, 0x5, 0x5, 0xb2d5, 0x6, 0x7, 0x7, 0x2, 0xf2, 0x67, 0x401, 0x1, 0x2, 0x0, 0x3, 0x5, 0x9, 0xed, 0x4ba, 0x77, 0x3, 0x38, 0xfff, 0x101, 0x7ff, 0x10000, 0x9f24, 0x7ff, 0xfffffffc, 0x81, 0x80000000, 0x8, 0x2, 0xf10b, 0x5, 0x5, 0x9, 0x5, 0x2, 0x1, 0x7fffffff, 0xfffffffe, 0x1ba, 0x8, 0x6, 0x38, 0x968d, 0x7e, 0x4, 0x1600, 0x8001, 0x7, 0x8bc1, 0x7, 0xff, 0x401, 0x4, 0xd, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9ef9}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x10}}, @TCA_FW_CLASSID={0x8, 0x1, {0x7ff8, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bond\x00'}, @TCA_FW_INDEV={0x14}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xd}}, @TCA_FW_MASK={0x8, 0x5, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0xbd, 0xd5}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x24cc}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r8, 0x0, 0x0, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0xfffffffe, 0x6}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 2.154403132s ago: executing program 0 (id=4611): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8, 0x8000, 0xc0}) 2.114338515s ago: executing program 2 (id=4612): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) 2.094293397s ago: executing program 0 (id=4613): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) 2.026328749s ago: executing program 2 (id=4614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff56}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1c, 0x0, &(0x7f0000001500)="2b1c52ac8282565f0875f3893068471dfae71ea05b0c5e43ede4d36f", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.463693987s ago: executing program 4 (id=4615): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd87, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x0, "b12e4363", {0x3, 0x107, 0x0, 0x6, 0x46, 0x0, 0x8}}) 1.406362004s ago: executing program 0 (id=4617): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8000, 0x0, 0xb, 0x8000000000000000, 0x40000006, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4024054}, 0x20000080) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x80000000, 0xfffffffffffffff8}}, 0x28) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) connect$can_bcm(r2, &(0x7f00000002c0)={0x1d, r6}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) pipe2$watch_queue(&(0x7f0000002240), 0x80) 1.338806375s ago: executing program 1 (id=4618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, 0x0, 0x8, 0x800) msgrcv(r2, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x40080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xe, 0xffe0}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x44000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.274092836s ago: executing program 2 (id=4619): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x800) 1.241065548s ago: executing program 2 (id=4621): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) r4 = fsmount(r2, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) pause() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 1.218564272s ago: executing program 3 (id=4622): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) 1.090256456s ago: executing program 3 (id=4623): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.070370797s ago: executing program 3 (id=4624): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x5}, 0xa) 1.043292392s ago: executing program 3 (id=4625): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f0000000440)=0x68) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast1, 0x7daa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000140)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d5041825693d381516cf68ac00000ffffffffffffffffffe7", 0x56}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40080) syz_io_uring_setup(0x8ed, &(0x7f00000003c0)={0x0, 0x40299a, 0x2, 0x0, 0x74}, 0xfffffffffffffffc, 0x0, 0x0) read$msr(r0, &(0x7f0000002180)=""/102386, 0x18ff2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='f2fs\x00', 0x1800, 0x0) 346.381539ms ago: executing program 4 (id=4626): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 327.036196ms ago: executing program 4 (id=4627): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x2, 0x5, 0x20303159, 0x0, 0x5, 0xa, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) 258.881552ms ago: executing program 4 (id=4628): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x40100) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="2a08000000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) 150.501808ms ago: executing program 4 (id=4629): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) 98.541881ms ago: executing program 3 (id=4630): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x9, 0x3, 0x31324d4e, 0x6, 0x0, 0x3, 0x9, 0xfeedcafe, 0x2, 0x1}}) 60.968005ms ago: executing program 4 (id=4631): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x3}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f00000003c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x7ffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) 0s ago: executing program 3 (id=4632): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x4]}, 0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000000)=0x7ffffffc, 0x4) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r4, r3, 0x0, 0x21c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) mbind(&(0x7f000021b000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0xfffffffffffffff3, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) kernel console output (not intermixed with test programs): ntk_skb: 3 callbacks suppressed [ 215.577809][ T30] audit: type=1400 audit(1776361739.426:340): avc: denied { firmware_load } for pid=9999 comm="syz.0.1619" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 215.865116][T10014] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 216.241515][T10001] syz.0.1619 (10001) used greatest stack depth: 19704 bytes left [ 216.376059][T10022] netlink: 'syz.1.1629': attribute type 9 has an invalid length. [ 216.656848][T10031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 216.684464][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1635'. [ 216.850338][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1638'. [ 217.134737][T10050] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 217.648391][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1644'. [ 218.237683][T10084] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1654'. [ 218.286277][T10088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'. [ 218.299366][T10090] capability: warning: `syz.4.1656' uses 32-bit capabilities (legacy support in use) [ 218.592247][T10096] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 218.890488][T10098] fuse: Bad value for 'fd' [ 219.167561][T10106] siw: device registration error -23 [ 219.179152][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 221.251807][T10124] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 221.260547][T10124] overlayfs: missing 'lowerdir' [ 221.678181][T10130] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 222.346794][ T30] audit: type=1400 audit(1776361746.196:341): avc: denied { mount } for pid=10156 comm="syz.0.1680" name="/" dev="pstore" ino=4272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 222.520817][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 222.549907][T10161] netlink: 'syz.4.1674': attribute type 2 has an invalid length. [ 222.818934][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 223.236766][ T30] audit: type=1400 audit(1776361747.086:342): avc: denied { mount } for pid=10176 comm="syz.2.1689" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 224.140295][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 224.150835][T10197] netlink: 'syz.3.1695': attribute type 2 has an invalid length. [ 224.444660][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1696'. [ 225.189767][T10238] bpf: Bad value for 'uid' [ 225.361642][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1708'. [ 225.886878][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1714'. [ 226.059322][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1716'. [ 226.079365][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1716'. [ 226.666332][T10276] siw: device registration error -23 [ 226.678582][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 227.825002][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'. [ 229.428533][ T30] audit: type=1400 audit(1776361753.276:343): avc: denied { accept } for pid=10333 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.958724][T10354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.545447][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 230.576618][T10376] netlink: 'syz.0.1759': attribute type 2 has an invalid length. [ 231.043652][T10397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1774'. [ 231.741557][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 232.201138][T10428] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 232.608805][ T30] audit: type=1400 audit(1776361756.446:344): avc: denied { execstack } for pid=10432 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 232.661535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 233.083665][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1802'. [ 233.288801][T10474] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 234.421248][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1815'. [ 234.542713][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 235.342800][T10522] syz1: rxe_newlink: already configured on team_slave_0 [ 235.787505][T10524] 9p: Bad value for 'wfdno' [ 236.180953][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 236.256776][ T50] Bluetooth: hci4: failed to read key size for handle 201 [ 236.264570][ T50] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 236.456260][T10560] netlink: 'syz.3.1842': attribute type 4 has an invalid length. [ 236.605246][T10563] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 236.694392][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 236.997288][T10569] 9p: Bad value for 'wfdno' [ 237.257836][ T30] audit: type=1400 audit(1776361761.106:345): avc: denied { name_bind } for pid=10578 comm="syz.2.1848" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 237.614933][T10591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1854'. [ 237.792398][T10603] syz.0.1859 uses obsolete (PF_INET,SOCK_PACKET) [ 238.184718][T10622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.877506][T10644] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 239.046178][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 239.185762][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'. [ 239.915532][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.924638][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.933624][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.942590][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.951556][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.960514][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.969486][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.978429][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.987396][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 239.996370][T10678] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 240.050934][T10681] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 240.138757][T10685] netlink: 'syz.4.1891': attribute type 3 has an invalid length. [ 240.153932][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1891'. [ 240.264368][T10695] fuse: Bad value for 'fd' [ 240.291929][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 240.649698][T10711] syz1: rxe_newlink: already configured on team_slave_0 [ 241.081772][ T30] audit: type=1326 audit(1776361764.936:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.4.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x0 [ 242.259242][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'. [ 243.616780][ T30] audit: type=1400 audit(1776361767.466:347): avc: denied { ioctl } for pid=10804 comm="syz.4.1939" path="socket:[20949]" dev="sockfs" ino=20949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.623741][T10802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1940'. [ 244.025752][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 244.116596][T10826] team0 (unregistering): Port device team_slave_0 removed [ 244.207828][T10826] team0 (unregistering): Port device team_slave_1 removed [ 244.274054][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 244.747075][T10856] x_tables: duplicate underflow at hook 2 [ 244.774514][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1963'. [ 245.044814][T10831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1950'. [ 245.213395][T10871] fuse: Bad value for 'fd' [ 245.217875][ T30] audit: type=1400 audit(1776361769.066:348): avc: denied { mounton } for pid=10870 comm="syz.0.1966" path="/392/file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.271138][ T30] audit: type=1400 audit(1776361769.096:349): avc: denied { setattr } for pid=10870 comm="syz.0.1966" name="file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.688803][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1979'. [ 246.930261][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 246.940304][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 247.229064][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 247.274350][T10929] netlink: 'syz.1.1984': attribute type 2 has an invalid length. [ 247.677993][ T5812] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 248.126589][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 248.338545][ T30] audit: type=1400 audit(1776361772.186:350): avc: denied { read } for pid=10941 comm="syz.2.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.728690][T10957] tls_set_device_offload: netdev not found [ 249.008553][T10980] net_ratelimit: 55 callbacks suppressed [ 249.008571][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.239076][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2014'. [ 250.143192][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.149592][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.671540][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2000'. [ 251.024572][T11036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.541115][T11057] siw: device registration error -23 [ 251.754992][ T5812] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 251.766851][ T5812] Bluetooth: hci1: Injecting HCI hardware error event [ 251.780448][ T50] Bluetooth: hci1: hardware error 0x00 [ 253.268818][ T30] audit: type=1400 audit(1776361777.116:351): avc: denied { read } for pid=11096 comm="syz.2.2047" path="socket:[21293]" dev="sockfs" ino=21293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.715545][T11111] tls_set_device_offload_rx: netdev not found [ 254.070342][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'. [ 254.608668][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 254.621393][T11131] netlink: 'syz.1.2059': attribute type 2 has an invalid length. [ 254.639211][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 255.185791][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.302864][T11154] netlink: 'syz.2.2068': attribute type 2 has an invalid length. [ 255.821122][T11170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2074'. [ 255.892580][T11171] siw: device registration error -23 [ 257.415347][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'. [ 258.001564][T11204] syz1: rxe_newlink: already configured on team_slave_0 [ 258.316893][T11219] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 258.349748][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2092'. [ 258.383163][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.384598][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2085'. [ 258.444926][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.452098][T11219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.633940][T11228] overlayfs: failed to clone upperpath [ 259.333803][T11243] syz1: rxe_newlink: already configured on team_slave_0 [ 260.856157][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'. [ 260.900227][T11303] netlink: 'syz.0.2124': attribute type 2 has an invalid length. [ 261.279567][T11314] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 261.572492][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'. [ 261.748697][ T30] audit: type=1400 audit(1776361785.596:352): avc: denied { watch } for pid=11330 comm="syz.3.2134" path="/440/file0" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.824172][ T30] audit: type=1400 audit(1776361785.596:353): avc: denied { watch_sb watch_reads } for pid=11330 comm="syz.3.2134" path="/440/file0" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.436076][T11349] xt_hashlimit: size too large, truncated to 1048576 [ 262.697129][T11353] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 263.094979][T11372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 263.187528][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 263.204934][T11365] netlink: 'syz.1.2145': attribute type 2 has an invalid length. [ 263.391739][T11384] fuse: Bad value for 'fd' [ 263.450755][ T30] audit: type=1400 audit(1776361787.296:354): avc: denied { bind } for pid=11385 comm="syz.0.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.042033][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2161'. [ 264.266887][T11406] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 265.028924][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 265.636148][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 265.741164][T11451] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 266.650548][ T30] audit: type=1800 audit(1776361790.496:355): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2193" name="file1" dev="tmpfs" ino=2196 res=0 errno=0 [ 267.043396][T11504] fuse: Bad value for 'fd' [ 267.067686][T11505] io-wq is not configured for unbound workers [ 267.319041][T11518] batman_adv: batadv0: Adding interface: dummy0 [ 267.365857][T11518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.391439][T11518] batman_adv: batadv0: Interface activated: dummy0 [ 267.455549][T11519] batadv0: mtu less than device minimum [ 267.471063][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.483138][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.494412][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.505698][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.517002][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.528290][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.539591][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.550891][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.562112][T11519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.743820][ T30] audit: type=1400 audit(1776361791.596:356): avc: denied { listen } for pid=11536 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.813916][ T30] audit: type=1400 audit(1776361791.636:357): avc: denied { read } for pid=11536 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.867698][ T30] audit: type=1400 audit(1776361791.686:358): avc: denied { shutdown } for pid=11536 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.870339][T11544] overlayfs: failed to clone upperpath [ 268.015801][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 268.028675][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 268.086174][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 268.484028][ T30] audit: type=1400 audit(1776361792.336:359): avc: denied { accept } for pid=11569 comm="syz.1.2224" lport=52778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.505498][ T30] audit: type=1400 audit(1776361792.356:360): avc: denied { setopt } for pid=11569 comm="syz.1.2224" lport=52778 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 269.299509][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c799400: rx timeout, send abort [ 269.310249][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c799400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.331446][ T30] audit: type=1400 audit(1776361793.176:361): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 269.385082][ T30] audit: type=1400 audit(1776361793.176:362): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.416966][ T30] audit: type=1400 audit(1776361793.176:363): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.493581][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 269.502634][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2235'. [ 269.614874][ T30] audit: type=1400 audit(1776361793.176:364): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.635772][ T30] audit: type=1400 audit(1776361793.176:365): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.695862][T11600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11600 comm=syz.3.2236 [ 269.758273][T11600] ip6gre1: entered promiscuous mode [ 269.764373][T11600] ip6gre1: entered allmulticast mode [ 269.957548][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2243'. [ 270.360545][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 270.371784][T11627] netlink: 'syz.2.2244': attribute type 2 has an invalid length. [ 270.379748][T11635] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2252'. [ 271.203627][T11651] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 271.487992][T11654] fuse: Bad value for 'fd' [ 272.684893][T11699] syz.2.2277 (11699) used greatest stack depth: 19416 bytes left [ 272.787098][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 272.787110][ T30] audit: type=1326 audit(1776361796.636:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11719 comm="syz.0.2287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x0 [ 272.875966][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 272.885431][T11721] netlink: 'syz.1.2283': attribute type 2 has an invalid length. [ 273.673137][T11728] siw: device registration error -23 [ 274.744676][ T30] audit: type=1400 audit(1776361798.596:373): avc: denied { write } for pid=11730 comm="syz.3.2291" lport=49635 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 274.856568][T11740] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2295'. [ 275.125922][ T30] audit: type=1400 audit(1776361798.976:374): avc: denied { mount } for pid=11753 comm="syz.1.2300" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 275.153187][T11756] overlayfs: failed to clone lowerpath [ 275.174634][T11754] overlayfs: failed to clone upperpath [ 276.552207][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 276.990922][ T30] audit: type=1400 audit(1776361800.836:375): avc: denied { setopt } for pid=11782 comm="syz.1.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.039891][ T30] audit: type=1400 audit(1776361800.886:376): avc: denied { mount } for pid=11787 comm="syz.4.2311" name="/" dev="configfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 277.081877][ T30] audit: type=1400 audit(1776361800.926:377): avc: denied { search } for pid=11787 comm="syz.4.2311" name="/" dev="configfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.109754][ T30] audit: type=1400 audit(1776361800.956:378): avc: denied { setattr } for pid=11787 comm="syz.4.2311" name="/" dev="configfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.509899][T11809] fuse: Bad value for 'fd' [ 277.514947][ T30] audit: type=1400 audit(1776361801.356:379): avc: denied { mounton } for pid=11807 comm="syz.2.2320" path="/508/file0" dev="tmpfs" ino=2598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 277.661244][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 277.692403][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 277.739336][T11822] overlayfs: failed to clone upperpath [ 277.959537][T11834] overlayfs: failed to resolve './cgroup': -2 [ 278.037811][T11839] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 278.081184][T11839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.093308][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2330'. [ 278.221268][T11842] bond1: (slave geneve2): making interface the new active one [ 278.230594][T11842] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 278.718055][T11874] fuse: Bad value for 'fd' [ 278.766254][ T30] audit: type=1400 audit(1776361802.616:380): avc: denied { bind } for pid=11875 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.890327][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2341'. [ 279.021123][ T30] audit: type=1400 audit(1776361802.866:381): avc: denied { write } for pid=11882 comm="syz.1.2347" path="socket:[25652]" dev="sockfs" ino=25652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.320694][ T30] audit: type=1400 audit(1776361803.166:382): avc: denied { write } for pid=11888 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.399520][ T30] audit: type=1400 audit(1776361803.246:383): avc: denied { mount } for pid=11894 comm="syz.0.2353" name="/" dev="hugetlbfs" ino=24810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 279.677689][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 279.686682][T11904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2355'. [ 279.870707][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'. [ 279.881617][T11898] netlink: 'syz.1.2352': attribute type 2 has an invalid length. [ 280.255018][T11912] netlink: 'syz.0.2358': attribute type 10 has an invalid length. [ 280.453470][T11912] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.562702][T11917] netlink: 'syz.4.2360': attribute type 4 has an invalid length. [ 280.618495][T11921] netlink: 'syz.4.2360': attribute type 4 has an invalid length. [ 281.263513][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.829401][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.869747][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.049434][T11922] tipc: Resetting bearer [ 282.338446][ T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.365487][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.377706][ T48] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.392167][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.406802][ T48] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.427816][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.443301][ T48] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.469500][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.508015][T11954] bridge0: port 3(vlan3) entered blocking state [ 282.522883][T11954] bridge0: port 3(vlan3) entered disabled state [ 282.533011][T11954] vlan3: entered allmulticast mode [ 282.542463][T11954] geneve0: entered allmulticast mode [ 282.551278][T11954] vlan3: entered promiscuous mode [ 282.556582][T11954] geneve0: entered promiscuous mode [ 282.776834][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2379'. [ 282.910745][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 282.932712][T11975] netlink: 'syz.0.2374': attribute type 2 has an invalid length. [ 283.343047][T11987] overlayfs: failed to clone upperpath [ 283.369717][T11987] fuse: Bad value for 'fd' [ 283.777847][T12002] siw: device registration error -23 [ 283.789082][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2390'. [ 285.169747][T12018] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=106 sclass=netlink_xfrm_socket pid=12018 comm=syz.0.2397 [ 285.243025][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 285.435888][ T30] audit: type=1400 audit(1776361809.276:384): avc: denied { map } for pid=12030 comm="syz.3.2401" path="socket:[25021]" dev="sockfs" ino=25021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.499241][ T30] audit: type=1400 audit(1776361809.276:385): avc: denied { create } for pid=12030 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 285.521419][T12033] fuse: Bad value for 'fd' [ 285.665988][T12045] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 285.708025][T12048] overlayfs: failed to clone upperpath [ 285.767176][T12049] bond2: (slave geneve3): making interface the new active one [ 285.778115][T12049] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 285.799970][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.866872][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2406'. [ 285.922994][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.950202][T12045] bond2 (unregistering): (slave geneve3): Releasing active interface [ 285.996874][T12045] bond2 (unregistering): Released all slaves [ 286.020260][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.058751][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.138507][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 286.161765][T12058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.233342][T12058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.505307][T12069] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2414'. [ 286.515975][ T30] audit: type=1400 audit(1776361810.356:386): avc: denied { kexec_image_load } for pid=12063 comm="syz.0.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 286.547703][T12069] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2414'. [ 287.186493][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2416'. [ 288.008102][T12070] kexec: Could not allocate control_code_buffer [ 288.163618][T12096] ref_ctr going negative. vaddr: 0x2000002e1002, curr val: -7112, delta: 1 [ 288.181240][T12096] ref_ctr increment failed for inode: 0x8cb offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888036ae0c40 [ 288.194777][T12098] tipc: Cannot configure node identity twice [ 288.375138][T12102] fuse: Bad value for 'fd' [ 288.550683][T12112] fuse: Bad value for 'fd' [ 288.559556][T12117] fuse: Bad value for 'fd' [ 289.431620][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2438'. [ 289.452288][T12151] netlink: 'syz.4.2438': attribute type 2 has an invalid length. [ 289.488335][ T30] audit: type=1400 audit(1776361813.336:387): avc: denied { checkpoint_restore } for pid=12152 comm="syz.0.2444" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.534843][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2446'. [ 289.621961][T12156] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2445'. [ 289.742815][T12160] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 290.125163][T12164] fuse: Bad value for 'fd' [ 290.227362][T12169] netlink: 'syz.1.2450': attribute type 1 has an invalid length. [ 290.235302][T12169] netlink: 'syz.1.2450': attribute type 2 has an invalid length. [ 290.243028][T12169] netlink: 'syz.1.2450': attribute type 3 has an invalid length. [ 290.501470][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2448'. [ 291.149647][ T30] audit: type=1400 audit(1776361814.996:388): avc: denied { bind } for pid=12201 comm="syz.2.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.174269][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 291.211433][ T30] audit: type=1400 audit(1776361815.026:389): avc: denied { setopt } for pid=12201 comm="syz.2.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.336700][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2457'. [ 291.517379][ T30] audit: type=1400 audit(1776361815.366:390): avc: denied { cmd } for pid=12211 comm="syz.2.2465" path="socket:[25235]" dev="sockfs" ino=25235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 291.943092][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2466'. [ 292.034764][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 292.096404][T12218] netlink: 'syz.2.2467': attribute type 2 has an invalid length. [ 292.586338][T12243] VFS: Mount too revealing [ 292.668365][T12248] fuse: Bad value for 'fd' [ 292.878796][ T30] audit: type=1400 audit(1776361816.726:391): avc: denied { mounton } for pid=12251 comm="syz.4.2481" path="/484/file0" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 292.902188][T12252] fuse: fd is not a fuse device [ 293.006830][T12254] overlayfs: failed to clone upperpath [ 293.033534][ T30] audit: type=1326 audit(1776361816.886:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.081020][ T30] audit: type=1326 audit(1776361816.886:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.114933][ T30] audit: type=1326 audit(1776361816.926:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.177825][ T30] audit: type=1326 audit(1776361816.926:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.265681][ T30] audit: type=1326 audit(1776361816.926:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.337164][ T30] audit: type=1326 audit(1776361816.926:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f491459c819 code=0x7ffc0000 [ 293.364096][T12265] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 293.457787][T12265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.723729][T12279] fuse: fd is not a fuse device [ 293.740791][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2487'. [ 294.176955][ T5958] kernel read not supported for file inotify (pid: 5958 comm: kworker/0:8) [ 294.915131][T12313] tipc: Failed to remove unknown binding: 66,0,0/10005162:676994454/676994455 [ 294.930703][T12313] tipc: Failed to remove unknown binding: 66,0,0/10005162:676994454/676994455 [ 294.970842][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 295.697354][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2518'. [ 295.912502][T12347] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 296.357036][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'. [ 296.722824][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 296.722839][ T30] audit: type=1400 audit(1776361820.576:452): avc: denied { create } for pid=12357 comm="syz.4.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 297.173091][T12370] fuse: fd is not a fuse device [ 297.285118][ T30] audit: type=1400 audit(1776361821.136:453): avc: denied { watch watch_reads } for pid=12373 comm="syz.2.2529" path="pipe:[26266]" dev="pipefs" ino=26266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 297.311028][T12376] fuse: fd is not a fuse device [ 297.516876][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2532'. [ 297.525972][ T30] audit: type=1400 audit(1776361821.366:454): avc: denied { mount } for pid=12384 comm="syz.1.2533" name="/" dev="autofs" ino=26276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 298.679668][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2538'. [ 299.037660][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2539'. [ 299.364920][ T30] audit: type=1400 audit(1776361823.206:455): avc: denied { mount } for pid=12414 comm="syz.3.2544" name="/" dev="ramfs" ino=25554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 299.448722][ T30] audit: type=1400 audit(1776361823.266:456): avc: denied { execute } for pid=12414 comm="syz.3.2544" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=25560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 300.275259][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 300.319620][T12448] netlink: 'syz.2.2555': attribute type 2 has an invalid length. [ 300.897074][T12460] fuse: fd is not a fuse device [ 300.930478][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2562'. [ 301.214624][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2560'. [ 302.129432][T12496] overlayfs: failed to clone upperpath [ 302.230964][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 302.803231][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2583'. [ 304.216196][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 304.246305][T12526] netlink: 'syz.0.2587': attribute type 2 has an invalid length. [ 304.556190][T12549] fuse: fd is not a fuse device [ 304.597838][T12553] netlink: 'syz.2.2597': attribute type 10 has an invalid length. [ 304.664889][T12553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.951078][ T30] audit: type=1400 audit(1776361828.796:457): avc: denied { getopt } for pid=12556 comm="syz.1.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 305.309737][T12561] fuse: Bad value for 'fd' [ 305.470014][ T30] audit: type=1400 audit(1776361829.316:458): avc: denied { read } for pid=12562 comm="syz.2.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.915305][T12575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2607'. [ 305.924636][ T30] audit: type=1400 audit(1776361829.766:459): avc: denied { ioctl } for pid=12574 comm="syz.0.2607" path="socket:[26536]" dev="sockfs" ino=26536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.957604][T12575] batman_adv: batadv0: Interface deactivated: dummy0 [ 305.973820][T12575] batman_adv: batadv0: Removing interface: dummy0 [ 306.174811][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.314456][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.353999][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.714773][ T30] audit: type=1400 audit(1776361830.566:460): avc: denied { create } for pid=12594 comm="syz.4.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 307.012770][T12604] fuse: Bad value for 'fd' [ 307.183361][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 307.422080][ T76] wlan1: Trigger new scan to find an IBSS to join [ 307.575616][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 307.584768][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2628'. [ 308.041761][T12648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2634'. [ 308.061855][ T30] audit: type=1400 audit(1776361831.896:461): avc: denied { bind } for pid=12649 comm="syz.1.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 308.140041][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2634'. [ 308.158619][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2625'. [ 308.170803][ T30] audit: type=1400 audit(1776361832.016:462): avc: denied { map } for pid=12646 comm="syz.3.2634" path="socket:[27700]" dev="sockfs" ino=27700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 309.095532][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2642'. [ 309.204272][T12672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12672 comm=syz.2.2642 [ 309.641684][T12686] fuse: fd is not a fuse device [ 309.778850][ T30] audit: type=1400 audit(1776361833.626:463): avc: denied { read } for pid=12689 comm="syz.2.2650" path="socket:[27755]" dev="sockfs" ino=27755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 310.823298][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2651'. [ 311.346487][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 311.355789][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2658'. [ 311.591620][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.598915][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.661511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 312.461823][ T48] wlan1: Trigger new scan to find an IBSS to join [ 312.817268][T12751] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 312.824858][ T30] audit: type=1400 audit(1776361836.666:464): avc: denied { mounton } for pid=12749 comm="syz.1.2669" path="/file1" dev="ramfs" ino=27869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 312.858516][T12751] overlayfs: failed to set xattr on upper [ 312.879452][T12751] overlayfs: ...falling back to redirect_dir=nofollow. [ 312.925172][T12751] overlayfs: ...falling back to index=off. [ 312.932567][ T30] audit: type=1400 audit(1776361836.756:465): avc: denied { bind } for pid=12750 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 312.965184][T12751] overlayfs: ...falling back to uuid=null. [ 312.983534][T12751] overlayfs: failed to clone lowerpath [ 313.081718][ T30] audit: type=1804 audit(1776361836.926:466): pid=12754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2671" name="file0" dev="tmpfs" ino=2824 res=1 errno=0 [ 313.492678][ T81] wlan1: Creating new IBSS network, BSSID b6:3f:3e:57:a9:a1 [ 313.831072][T12762] fuse: fd is not a fuse device [ 314.402679][ T30] audit: type=1400 audit(1776361838.256:467): avc: denied { bind } for pid=12779 comm="syz.0.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.504616][T12768] __nla_validate_parse: 1 callbacks suppressed [ 314.504629][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2676'. [ 314.617357][T12784] veth0: entered allmulticast mode [ 314.723783][T12789] siw: device registration error -23 [ 314.735223][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 316.441629][ T30] audit: type=1400 audit(1776361840.286:468): avc: denied { create } for pid=12802 comm="syz.1.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 316.909497][ T30] audit: type=1400 audit(1776361840.296:469): avc: denied { write } for pid=12802 comm="syz.1.2687" path="socket:[27115]" dev="sockfs" ino=27115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 317.682398][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'. [ 318.713017][T12833] fuse: fd is not a fuse device [ 319.188101][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 319.338464][T12848] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 320.123398][T12860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.142230][T12860] batadv_slave_0: entered promiscuous mode [ 320.960664][T12873] siw: device registration error -23 [ 320.972195][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 321.968678][T12875] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 322.461731][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.687568][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 323.703398][T12890] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.339688][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2711'. [ 325.503203][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2721'. [ 326.000789][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 326.133496][T12933] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.435690][ T30] audit: type=1400 audit(1776361850.286:470): avc: denied { block_suspend } for pid=12938 comm="syz.1.2729" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.490787][T12940] x_tables: duplicate underflow at hook 2 [ 326.808533][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 327.197532][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2738'. [ 327.544433][ T50] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 327.630565][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2739'. [ 327.667976][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 327.835752][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 327.845162][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2740'. [ 328.627995][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 328.740057][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 331.581474][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 331.592111][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 331.601668][ T5812] Bluetooth: hci2: hardware error 0x00 [ 331.914269][ T30] audit: type=1400 audit(1776361855.766:471): avc: denied { getopt } for pid=13001 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.141487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 332.186261][T13030] fuse: fd is not a fuse device [ 332.213929][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 332.478941][T13036] fuse: fd is not a fuse device [ 332.607775][ T30] audit: type=1400 audit(1776361856.456:472): avc: denied { write } for pid=13037 comm="syz.0.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 332.630510][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 332.784780][T13038] bond1: entered promiscuous mode [ 332.807709][T13038] bond1: entered allmulticast mode [ 332.918740][ T30] audit: type=1400 audit(1776361856.766:473): avc: denied { getopt } for pid=13050 comm="syz.0.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.943330][T13049] fuse: fd is not a fuse device [ 333.662567][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 334.479333][T13067] infiniband syz1: set active [ 334.484117][T13067] infiniband syz1: added team_slave_0 [ 334.514717][T13067] RDS/IB: syz1: added [ 334.518758][T13067] smc: adding ib device syz1 with port count 1 [ 334.524944][T13067] smc: ib device syz1 port 1 has no pnetid [ 334.960078][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 336.432283][ T50] Bluetooth: hci0: hardware error 0x07 [ 337.346289][ T30] audit: type=1400 audit(1776361861.196:474): avc: denied { setattr } for pid=13126 comm="syz.2.2786" name="ALG" dev="sockfs" ino=28346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.488892][T13129] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 338.031283][ T30] audit: type=1804 audit(1776361861.876:475): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2788" name="file0" dev="tmpfs" ino=2681 res=1 errno=0 [ 338.033875][T13133] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 338.093235][T13133] ref_ctr increment failed for inode: 0xa79 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880311b8c40 [ 338.178571][T13137] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 338.221729][T13137] ref_ctr decrement failed for inode: 0xa79 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880311b8c40 [ 338.280736][T13137] uprobe: syz.1.2788:13137 failed to unregister, leaking uprobe [ 338.466672][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 339.291010][T13150] fuse: fd is not a fuse device [ 339.555808][T13159] fuse: fd is not a fuse device [ 340.020377][ T30] audit: type=1400 audit(1776361863.866:476): avc: denied { ioctl } for pid=13167 comm="syz.4.2799" path="socket:[27567]" dev="sockfs" ino=27567 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 340.218303][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'. [ 340.232929][T13169] netlink: 'syz.0.2797': attribute type 2 has an invalid length. [ 340.441689][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'. [ 340.591918][T13181] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 340.839155][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2800'. [ 342.046711][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 342.067315][T13217] netlink: 'syz.3.2809': attribute type 2 has an invalid length. [ 342.242560][T13225] fuse: fd is not a fuse device [ 343.534501][ T9786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.064462][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2819'. [ 344.084932][T13249] netlink: 'syz.1.2819': attribute type 2 has an invalid length. [ 344.501831][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2822'. [ 346.334856][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 346.346338][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'. [ 346.356172][T13294] netlink: 'syz.1.2835': attribute type 2 has an invalid length. [ 346.388043][T13291] netlink: 'syz.0.2831': attribute type 2 has an invalid length. [ 347.128732][T13305] tipc: Enabling of bearer rejected, failed to enable media [ 347.220541][T13309] overlayfs: failed to clone upperpath [ 348.532615][T13318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2842'. [ 349.061447][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2848'. [ 349.080501][T13348] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 349.550511][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 351.385536][ T30] audit: type=1400 audit(1776361875.236:477): avc: denied { watch_mount } for pid=13389 comm="syz.4.2863" path="/571" dev="tmpfs" ino=2946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 352.363374][T13409] fuse: Unknown parameter '0x0000000000000004' [ 352.441583][T13413] netlink: 'syz.3.2869': attribute type 1 has an invalid length. [ 352.478690][T13413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.538663][T13416] bond1: (slave gretap1): making interface the new active one [ 352.570815][T13413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13413 comm=syz.3.2869 [ 352.592051][T13416] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 352.680333][T13419] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 352.691591][T13419] CIFS: VFS: Malformed UNC in devname [ 353.935666][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 353.944611][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'. [ 354.934613][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 355.248254][T13469] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.939026][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2875'. [ 358.004742][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 358.013839][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2888'. [ 361.491875][T13552] fuse: fd is not a fuse device [ 363.597208][T13570] overlayfs: failed to clone upperpath [ 363.919939][ T30] audit: type=1400 audit(1776361887.756:478): avc: denied { mount } for pid=13574 comm="syz.1.2908" name="/" dev="rpc_pipefs" ino=29912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 365.043290][T13607] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 366.157333][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 366.180373][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 366.626297][T13603] netlink: 'syz.4.2915': attribute type 4 has an invalid length. [ 366.634799][T13603] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2915'. [ 366.637966][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.675967][T13598] bond2: (slave bond0): making interface the new active one [ 366.703180][T13598] bond2: (slave bond0): Enslaving as an active interface with an up link [ 367.260383][T13603] .`: renamed from bond0 (while UP) [ 370.566248][T13658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2930'. [ 370.661107][T13666] tipc: Enabling of bearer rejected, failed to enable media [ 371.082287][T13678] net_ratelimit: 10 callbacks suppressed [ 371.082320][T13678] openvswitch: netlink: IP tunnel dst address not specified [ 372.931064][T13696] fuse: fd is not a fuse device [ 373.029725][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.038614][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.098209][T13698] netlink: 'syz.4.2940': attribute type 10 has an invalid length. [ 373.149906][T13698] team0: Port device dummy0 added [ 373.872874][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2937'. [ 374.086579][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 374.772406][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.789198][T13720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2944'. [ 375.966472][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 377.455418][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2952'. [ 378.028014][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 378.151445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.353874][T13779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2961'. [ 380.279117][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2965'. [ 380.516221][T13813] fuse: Bad value for 'fd' [ 381.154120][T13821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2974'. [ 381.823211][T13832] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2979'. [ 381.969509][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 381.978632][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2980'. [ 381.990753][T13837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2980'. [ 382.282321][T13842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2981'. [ 382.292076][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 383.336760][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2978'. [ 383.680809][T13864] netlink: 'syz.2.2984': attribute type 2 has an invalid length. [ 383.790600][T13852] overlayfs: failed to clone upperpath [ 383.799212][ T30] audit: type=1400 audit(1776361907.636:479): avc: denied { watch_sb } for pid=13851 comm="syz.4.2985" path="/594/file0" dev="tmpfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 384.099831][T13867] netlink: 'syz.3.2987': attribute type 2 has an invalid length. [ 384.580402][ T30] audit: type=1400 audit(1776361908.056:480): avc: denied { lock } for pid=13868 comm="syz.0.2988" path="socket:[30251]" dev="sockfs" ino=30251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.049746][T13877] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 385.388354][T13879] ip6gre1: entered allmulticast mode [ 387.931398][T13900] delete_channel: no stack [ 389.218065][T13932] syz1: rxe_newlink: already configured on team_slave_0 [ 392.929259][T13965] vlan2: entered promiscuous mode [ 392.934393][T13965] bridge0: entered promiscuous mode [ 393.031367][ T30] audit: type=1400 audit(1776361916.876:481): avc: denied { watch watch_reads } for pid=13966 comm="syz.4.3015" path="/602/file1" dev="tmpfs" ino=3113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 393.670143][ T30] audit: type=1400 audit(1776361916.986:482): avc: denied { search } for pid=13966 comm="syz.4.3015" name="/" dev="configfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.129524][ T30] audit: type=1400 audit(1776361916.986:483): avc: denied { setattr } for pid=13966 comm="syz.4.3015" name="/" dev="configfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.220935][T13983] __nla_validate_parse: 2 callbacks suppressed [ 394.228993][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3017'. [ 395.475100][ T30] audit: type=1400 audit(1776361918.576:484): avc: denied { create } for pid=13986 comm="syz.4.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 395.561614][T13998] syz1: rxe_newlink: already configured on team_slave_0 [ 395.782347][ T30] audit: type=1326 audit(1776361919.626:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.0.3022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f491459c819 code=0x0 [ 396.595345][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.602553][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.763355][T14005] overlayfs: failed to clone lowerpath [ 396.769103][ T30] audit: type=1400 audit(1776361920.616:486): avc: denied { mount } for pid=14004 comm="syz.2.3025" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 396.804912][T14005] overlayfs: failed to clone lowerpath [ 398.473608][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.015507][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.311316][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 399.346844][T14022] netlink: 'syz.2.3027': attribute type 2 has an invalid length. [ 400.089150][ T1151] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.110012][ T1151] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.194917][ T1151] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.239958][ T30] audit: type=1401 audit(1776361924.086:487): op=fscreate invalid_context="?" [ 400.249024][ T1151] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.270222][ T1151] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.300612][ T1151] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.322338][ T1151] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.348313][ T1151] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.710759][T14040] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 401.490579][T14056] netlink: 'syz.1.3036': attribute type 21 has an invalid length. [ 401.498761][T14056] netlink: 'syz.1.3036': attribute type 6 has an invalid length. [ 401.506566][T14056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3036'. [ 402.014788][T14045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 403.025657][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'. [ 403.240176][ T30] audit: type=1400 audit(1776361927.086:488): avc: denied { watch } for pid=14077 comm="syz.2.3042" path="/649/file0" dev="tmpfs" ino=3333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 404.083808][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 404.130325][T14097] netlink: 'syz.0.3046': attribute type 2 has an invalid length. [ 404.386947][ T30] audit: type=1400 audit(1776361928.236:489): avc: denied { listen } for pid=14091 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 406.424837][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.732977][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 407.788591][T14130] netlink: 'syz.3.3055': attribute type 2 has an invalid length. [ 410.540402][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 410.560873][T14158] netlink: 'syz.4.3062': attribute type 2 has an invalid length. [ 410.813378][T14165] overlayfs: failed to resolve './file1': -2 [ 412.972715][T14181] bridge_slave_0: left allmulticast mode [ 412.994324][T14181] bridge_slave_0: left promiscuous mode [ 413.000942][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.037966][T14181] bridge_slave_1: left allmulticast mode [ 413.052116][T14181] bridge_slave_1: left promiscuous mode [ 413.078844][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.127061][T14181] bond0: (slave bond_slave_0): Releasing backup interface [ 413.189224][T14181] bond0: (slave bond_slave_1): Releasing backup interface [ 413.270259][T14181] team0: Port device team_slave_0 removed [ 413.305498][T14181] team0: Port device team_slave_1 removed [ 413.346864][T14181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.383610][T14181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.439951][T14181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.521653][ T5807] syz1: Port: 1 Link DOWN [ 414.643126][ T30] audit: type=1400 audit(1776361938.306:490): avc: denied { setopt } for pid=14200 comm="syz.1.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.846824][ T30] audit: type=1400 audit(1776361938.696:491): avc: denied { ioctl } for pid=14204 comm="syz.2.3078" path="socket:[30854]" dev="sockfs" ino=30854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 416.865682][T14212] Process accounting resumed [ 417.099125][T14217] @: renamed from bond_slave_0 (while UP) [ 418.281229][T14217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3081'. [ 419.387862][T14234] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 419.445785][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 421.195610][ T5807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.061599][ T5807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.629697][T14281] siw: device registration error -23 [ 426.426904][T14306] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 427.201668][T14306] veth0_vlan: left promiscuous mode [ 427.297760][T14306] veth0_vlan: entered promiscuous mode [ 427.362376][T14306] team0: Device veth0_vlan failed to register rx_handler [ 427.680774][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'. [ 427.736627][T14322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.321225][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3101'. [ 428.546433][T14338] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.3105'. [ 432.517791][T14360] overlayfs: failed to resolve './file1': -2 [ 434.475387][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.486675][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.513769][T14374] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3115'. [ 434.526069][T14374] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 435.876464][ T30] audit: type=1400 audit(1776361959.726:492): avc: denied { create } for pid=14383 comm="syz.2.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.138855][T14394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.395696][ T30] audit: type=1400 audit(1776361960.906:493): avc: denied { map } for pid=14402 comm="syz.4.3122" path="socket:[31111]" dev="sockfs" ino=31111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 437.425365][T14399] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 437.537078][ T30] audit: type=1400 audit(1776361960.906:494): avc: denied { accept } for pid=14402 comm="syz.4.3122" path="socket:[31111]" dev="sockfs" ino=31111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 437.562139][ T30] audit: type=1400 audit(1776361961.286:495): avc: denied { relabelto } for pid=14397 comm="syz.3.3121" name="file0" dev="tmpfs" ino=3329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 437.589989][ T30] audit: type=1400 audit(1776361961.286:496): avc: denied { associate } for pid=14397 comm="syz.3.3121" name="file0" dev="tmpfs" ino=3329 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 438.053271][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.606423][ T30] audit: type=1400 audit(1776361962.456:497): avc: denied { unlink } for pid=5804 comm="syz-executor" name="file0" dev="tmpfs" ino=3329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 438.674739][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 439.058414][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3128'. [ 439.067649][T14428] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 439.079044][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3126'. [ 439.271767][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3130'. [ 440.073091][T14442] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3131'. [ 440.115480][ T30] audit: type=1400 audit(1776361963.936:498): avc: denied { execute } for pid=14441 comm="syz.3.3131" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 441.849761][T14464] bridge0: entered promiscuous mode [ 441.857055][T14464] macsec1: entered promiscuous mode [ 445.075031][T14486] x_tables: duplicate underflow at hook 1 [ 445.473070][T14486] vlan4: entered allmulticast mode [ 445.478255][T14486] macsec0: entered allmulticast mode [ 445.862879][T14493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3146'. [ 447.311289][ T30] audit: type=1400 audit(1776361970.816:499): avc: denied { unmount } for pid=14509 comm="syz.0.3149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 447.856068][T14527] overlayfs: missing 'lowerdir' [ 451.327391][T14563] kAFS: unable to lookup cell '' [ 452.503309][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 452.535163][T14578] netlink: 'syz.3.3157': attribute type 2 has an invalid length. [ 452.604748][T14580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.657765][T14580] fuse: fd is not a fuse device [ 452.682350][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3156'. [ 452.814898][T14587] netlink: 'syz.0.3159': attribute type 3 has an invalid length. [ 452.822728][T14587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3159'. [ 453.378979][ T30] audit: type=1400 audit(1776361977.226:500): avc: denied { accept } for pid=14595 comm="syz.4.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.114828][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3163'. [ 454.345172][T14602] : entered promiscuous mode [ 454.798958][T14605] siw: device registration error -23 [ 455.394005][T14615] fuse: Bad value for 'fd' [ 456.430041][ T30] audit: type=1400 audit(1776361979.896:501): avc: denied { create } for pid=14620 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 457.672664][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3166'. [ 458.550353][T14653] x_tables: duplicate underflow at hook 2 [ 459.892813][ T30] audit: type=1400 audit(1776361983.736:502): avc: denied { mount } for pid=14659 comm="syz.3.3177" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 460.071579][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 461.080071][T14680] syz.3.3180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 461.881715][ T50] Bluetooth: Frame is too long (len 12, expected len 4) [ 462.316091][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'. [ 462.328055][T14685] netlink: 'syz.0.3176': attribute type 2 has an invalid length. [ 462.352626][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 462.947492][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.960446][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 463.001114][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 463.144356][T14698] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 463.178678][T14695] ceph: No mds server is up or the cluster is laggy [ 463.612307][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 463.625998][T14698] bond0 (unregistering): Released all slaves [ 463.641898][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 463.968441][T14715] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 463.996958][T14715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.010344][T14715] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 464.072667][T14715] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 464.080571][T14715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3185'. [ 464.090703][T14715] batadv0: entered promiscuous mode [ 464.096089][T14715] batadv0: entered allmulticast mode [ 464.446568][T14715] bond0: (slave batadv0): Releasing backup interface [ 464.448396][ T30] audit: type=1800 audit(1776361988.296:503): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.3186" name="/" dev="tmpfs" ino=1283 res=0 errno=0 [ 464.503324][T14715] bridge0: port 1(batadv0) entered blocking state [ 464.510046][T14715] bridge0: port 1(batadv0) entered disabled state [ 464.541046][T14711] sctp: [Deprecated]: syz.1.3186 (pid 14711) Use of int in max_burst socket option. [ 464.541046][T14711] Use struct sctp_assoc_value instead [ 464.641630][ T1151] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 464.651374][ T1151] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 466.196285][T14734] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 467.198725][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3191'. [ 467.378290][T14718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.519715][T14747] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 468.355322][T14718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.046225][T14545] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.057816][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.112910][T14545] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.204957][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.272992][ T30] audit: type=1400 audit(1776361993.106:504): avc: denied { connect } for pid=14755 comm="syz.4.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 469.297939][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.472507][ T5807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.110130][T14718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.129218][T14718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.027505][T14718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.116599][T14778] overlayfs: failed to clone lowerpath [ 472.123441][ T30] audit: type=1400 audit(1776361995.956:505): avc: denied { mount } for pid=14775 comm="syz.0.3200" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 472.190932][T14779] overlayfs: failed to clone lowerpath [ 472.434037][T14718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.668107][T14718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.134393][T14718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.261454][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.556518][T14797] syz1: rxe_newlink: already configured on team_slave_0 [ 474.039456][ T9786] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.047996][ T9786] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.126568][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3203'. [ 474.135667][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 474.560310][ T9786] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.573119][ T9786] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.598379][ T9786] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.607143][ T9786] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.659488][ T9786] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.675800][ T9786] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.747673][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 474.828867][T14807] netlink: 'syz.3.3204': attribute type 2 has an invalid length. [ 476.021810][T14829] netlink: 'syz.2.3209': attribute type 10 has an invalid length. [ 477.349711][T14821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3205'. [ 479.234878][T14829] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 479.337102][T14830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.421036][T14831] @: entered promiscuous mode [ 479.427219][T14831] bond_slave_1: entered promiscuous mode [ 479.432948][T14831] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 479.441194][T14831] syz_tun: entered promiscuous mode [ 479.526787][T14831] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 479.554098][T14831] bond1: (slave macvlan0): unknown ethtool speed (30000) for port 1 (set it to 0) [ 479.577626][T14831] bond1: (slave macvlan0): speed changed to 0 on port 1 [ 479.605552][T14831] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 480.852291][T14884] fuse: Bad value for 'fd' [ 480.858512][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3212'. [ 481.821411][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.186195][T14910] 9p: Bad value for 'rfdno' [ 485.126377][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3229'. [ 485.142388][ T30] audit: type=1400 audit(1776362008.966:506): avc: denied { mount } for pid=14936 comm="syz.0.3229" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 485.671521][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.245659][ T30] audit: type=1400 audit(1776362010.086:507): avc: denied { shutdown } for pid=14945 comm="syz.0.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 486.514568][T14952] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 489.935515][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 489.961579][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 490.023077][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 490.613449][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 490.628328][T14987] ceph: No mds server is up or the cluster is laggy [ 491.620279][T15006] dummy0: entered allmulticast mode [ 495.488965][T15041] netlink: 'syz.0.3250': attribute type 4 has an invalid length. [ 495.496756][T15041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3250'. [ 495.506569][T15041] wlan1: mtu less than device minimum [ 496.280204][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.289657][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.531336][T15054] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 496.848884][T15054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.488803][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 497.625860][T15076] xt_l2tp: v2 tid > 0xffff: 134217728 [ 497.797964][T15078] syz_tun: entered allmulticast mode [ 497.821419][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.832692][T15075] syz_tun: left allmulticast mode [ 498.061590][T15085] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3258'. [ 498.082563][T15082] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 501.316469][T15106] PKCS8: Unsupported PKCS#8 version [ 501.871350][ T30] audit: type=1400 audit(1776362025.716:508): avc: denied { lock } for pid=15116 comm="syz.0.3269" path="socket:[32752]" dev="sockfs" ino=32752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 502.023119][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.390192][T15129] overlayfs: missing 'lowerdir' [ 503.059225][T15136] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 503.501841][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 505.228177][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 506.533901][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3279'. [ 506.560305][T15168] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 507.302484][T15191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3285'. [ 509.687088][T15218] vlan2: left promiscuous mode [ 509.692156][T15218] bridge0: left promiscuous mode [ 509.701540][T15218] ip6gre1: left promiscuous mode [ 510.310250][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.107646][T15232] batadv_slave_0: left promiscuous mode [ 511.131614][T15232] macsec1: left promiscuous mode [ 511.880786][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.633949][ T30] audit: type=1326 audit(1776362036.486:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 512.721344][ T30] audit: type=1326 audit(1776362036.516:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 512.844795][ T30] audit: type=1326 audit(1776362036.546:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 512.918265][ T30] audit: type=1326 audit(1776362036.576:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 512.966721][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 512.999446][T15247] netlink: 'syz.3.3295': attribute type 2 has an invalid length. [ 513.024171][ T30] audit: type=1326 audit(1776362036.576:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 513.060425][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'. [ 513.725133][T15253] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.745105][ T30] audit: type=1326 audit(1776362036.576:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 513.807736][T15258] netlink: 'syz.0.3299': attribute type 4 has an invalid length. [ 513.887365][ T30] audit: type=1326 audit(1776362036.576:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 514.080194][ T30] audit: type=1326 audit(1776362036.576:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 514.227456][ T30] audit: type=1326 audit(1776362036.596:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 514.253129][ T30] audit: type=1326 audit(1776362036.596:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15238 comm="syz.1.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde99c819 code=0x7ffc0000 [ 514.291075][T15287] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 514.299595][T15287] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 514.309693][T15287] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 514.408750][T15290] IPVS: Error connecting to the multicast addr [ 517.851372][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 517.851389][ T30] audit: type=1800 audit(1776362041.556:544): pid=15310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3306" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=33543 res=0 errno=0 [ 518.169369][T15313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.462742][T15312] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 519.287067][T15327] syzkaller0: entered allmulticast mode [ 519.302204][ T30] audit: type=1400 audit(1776362043.136:545): avc: denied { ioctl } for pid=15319 comm="syz.4.3307" path="socket:[33573]" dev="sockfs" ino=33573 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 519.566372][T15330] overlayfs: failed to clone upperpath [ 520.849536][T15349] overlayfs: failed to clone upperpath [ 525.814207][T15397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3323'. [ 526.078586][T15409] trusted_key: syz.3.3327 sent an empty control message without MSG_MORE. [ 526.229132][T15414] fuse: Bad value for 'fd' [ 526.749978][T15418] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3329'. [ 527.904750][ T30] audit: type=1326 audit(1776362051.756:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.2.3333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586bf9c819 code=0x0 [ 528.101618][ T30] audit: type=1400 audit(1776362051.956:547): avc: denied { map } for pid=15432 comm="syz.0.3334" path="socket:[34088]" dev="sockfs" ino=34088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 529.831399][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.962945][T15447] netlink: 'syz.4.3336': attribute type 10 has an invalid length. [ 530.973509][T15447] wlan1: mtu less than device minimum [ 530.987507][T15447] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 532.124654][T15438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.828210][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3342'. [ 534.284263][T14544] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 534.721621][ T30] audit: type=1400 audit(1776362058.446:548): avc: denied { ioctl } for pid=15473 comm="syz.0.3344" path="/647/file0" dev="tmpfs" ino=3348 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 536.445161][T15501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 536.513673][T15507] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[15507] [ 537.395623][T15524] netlink: 'syz.3.3354': attribute type 4 has an invalid length. [ 539.591112][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 539.606265][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 540.025193][T15556] overlayfs: failed to clone upperpath [ 540.343332][T15572] 9p: Bad value for 'wfdno' [ 540.562994][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3364'. [ 541.500097][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 541.596234][T15590] fuse: fd is not a fuse device [ 541.791042][ T50] Bluetooth: hci3: unexpected event for opcode 0x080f [ 543.885635][ T30] audit: type=1400 audit(1776362067.296:549): avc: denied { ioctl } for pid=15617 comm="syz.1.3379" path="socket:[35037]" dev="sockfs" ino=35037 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 544.150003][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3377'. [ 546.908357][T15652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.075021][T15651] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 548.748313][T15662] could not allocate digest TFM handle crc32 [ 549.472756][T15687] overlayfs: failed to resolve './cgroup': -2 [ 550.075759][T15681] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 550.577899][T15701] cgroup: release_agent respecified [ 551.536566][T15712] overlayfs: failed to clone upperpath [ 552.937658][T15715] bridge0: port 3(erspan0) entered blocking state [ 552.944442][T15715] bridge0: port 3(erspan0) entered disabled state [ 552.950948][T15715] erspan0: entered allmulticast mode [ 553.399330][T15715] erspan0: entered promiscuous mode [ 553.725321][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3411'. [ 554.050205][T15743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'. [ 554.218852][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3415'. [ 554.898301][T15775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.728369][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 556.291590][T15818] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3438'. [ 556.346739][T15819] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3437'. [ 557.411956][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.418504][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.415119][T15842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.852053][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3447'. [ 561.431483][ T76] wlan0: Trigger new scan to find an IBSS to join [ 561.704059][T15930] x_tables: duplicate underflow at hook 2 [ 562.585387][ T30] audit: type=1400 audit(1776362086.436:550): avc: denied { name_bind } for pid=15955 comm="syz.0.3492" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 564.232686][T15998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3504'. [ 564.461412][T14542] wlan0: Trigger new scan to find an IBSS to join [ 564.939102][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 564.953099][T16012] netlink: 'syz.1.3510': attribute type 2 has an invalid length. [ 566.227841][T14550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.568179][ T30] audit: type=1326 audit(1776362090.416:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 566.692220][ T30] audit: type=1326 audit(1776362090.416:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 566.799329][ T30] audit: type=1326 audit(1776362090.416:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 566.891111][ T30] audit: type=1326 audit(1776362090.446:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 566.971082][ T30] audit: type=1326 audit(1776362090.446:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 567.061872][ T30] audit: type=1326 audit(1776362090.456:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 567.138252][ T30] audit: type=1326 audit(1776362090.456:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 567.248973][ T30] audit: type=1326 audit(1776362090.456:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 567.325861][ T30] audit: type=1326 audit(1776362090.466:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1bb079c819 code=0x7ffc0000 [ 567.422523][T14542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.816798][T16222] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 571.944244][T16225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3603'. [ 572.207445][T16208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3593'. [ 573.272373][T16272] 9p: Bad value for 'rfdno' [ 573.959766][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3643'. [ 574.490720][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 574.511775][T16351] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 574.524003][T16351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 574.557744][T16355] netlink: 231 bytes leftover after parsing attributes in process `syz.1.3662'. [ 574.955787][T16373] 9p: Bad value for 'wfdno' [ 576.161380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 577.479055][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3685'. [ 577.517379][T16431] netlink: 'syz.2.3685': attribute type 2 has an invalid length. [ 577.737860][T16441] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 577.793419][T16441] overlayfs: failed to clone lowerpath [ 578.139594][T16448] ptrace attach of "./syz-executor exec"[5804] was attempted by "./syz-executor exec"[16448] [ 578.689132][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'. [ 579.072073][T16470] fuse: fd is not a fuse device [ 579.657828][T16491] siw: device registration error -23 [ 581.531957][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 581.560470][T16536] netlink: 'syz.3.3734': attribute type 2 has an invalid length. [ 581.685141][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.693094][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.700963][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.708864][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.716722][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.724583][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.732433][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.740297][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.748161][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 581.756011][T16540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 582.315117][T16574] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3752'. [ 582.452485][T16582] 9p: Bad value for 'rfdno' [ 583.088453][T16618] rdma_op ffff8880772991f0 conn xmit_rdma 0000000000000000 [ 584.017821][T16638] could not allocate digest TFM handle ghash-generic [ 584.485916][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'. [ 585.022309][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3791'. [ 585.282587][T16681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'. [ 585.330078][T16690] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[16690] [ 586.908428][T16748] netlink: 'syz.2.3824': attribute type 4 has an invalid length. [ 586.921695][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 587.286111][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3827'. [ 587.310820][T16760] netlink: 'syz.1.3827': attribute type 2 has an invalid length. [ 587.726145][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3830'. [ 587.805402][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3830'. [ 587.922144][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3830'. [ 589.019551][T16799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3841'. [ 589.033751][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3844'. [ 591.145086][T16839] __nla_validate_parse: 2 callbacks suppressed [ 591.145124][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3852'. [ 591.165211][T16839] netlink: 'syz.3.3852': attribute type 2 has an invalid length. [ 591.430260][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3853'. [ 592.382741][ T48] wlan1: Trigger new scan to find an IBSS to join [ 593.606611][T16915] overlayfs: failed to clone upperpath [ 594.762922][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 595.422745][ T48] wlan1: Trigger new scan to find an IBSS to join [ 595.922400][T16999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3926'. [ 596.063395][T17011] fuse: fd is not a fuse device [ 598.087701][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 598.087719][ T30] audit: type=1400 audit(1776362121.936:587): avc: denied { mount } for pid=17105 comm="syz.3.3975" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 598.232275][T17120] netlink: 'syz.3.3980': attribute type 2 has an invalid length. [ 598.301423][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.382312][T14550] wlan1: Trigger new scan to find an IBSS to join [ 598.520998][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3976'. [ 598.580827][ T30] audit: type=1800 audit(1776362122.426:588): pid=17130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3983" name="nullb0" dev="tmpfs" ino=3977 res=0 errno=0 [ 598.791701][T17134] xt_hashlimit: size too large, truncated to 1048576 [ 599.392671][ T6255] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 599.581342][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.856086][T17158] overlayfs: failed to resolve './cgroup': -2 [ 600.271393][ T30] audit: type=1800 audit(1776362124.116:589): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4002" name="nullb0" dev="tmpfs" ino=1639 res=0 errno=0 [ 600.725925][T17189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4009'. [ 600.755500][T17197] netlink: 'syz.1.4011': attribute type 20 has an invalid length. [ 600.791343][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 601.159020][T17197] netlink: 'syz.1.4011': attribute type 20 has an invalid length. [ 601.218552][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 601.277088][T17214] fuse: fd is not a fuse device [ 601.750005][T17222] overlayfs: failed to clone upperpath [ 601.801809][T17225] overlayfs: failed to clone upperpath [ 601.842403][T17228] fuse: fd is not a fuse device [ 601.866870][T17225] overlayfs: failed to clone upperpath [ 602.065087][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4018'. [ 603.095859][ T30] audit: type=1326 audit(1776362126.946:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17266 comm="syz.4.4038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb079c819 code=0x0 [ 603.518073][T17279] fuse: fd is not a fuse device [ 604.240767][T17308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4048'. [ 605.349442][T17338] fuse: fd is not a fuse device [ 605.792144][T17360] fuse: fd is not a fuse device [ 605.828036][T17362] fuse: fd is not a fuse device [ 606.286663][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 606.311615][T17385] netlink: 'syz.4.4080': attribute type 2 has an invalid length. [ 606.817243][T17387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4083'. [ 606.920569][T17400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4085'. [ 607.068515][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.129901][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.249374][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.309262][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.506136][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.593137][T17412] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 607.615539][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 607.976759][T17424] fuse: fd is not a fuse device [ 609.519993][ T30] audit: type=1400 audit(1776362133.356:591): avc: denied { getopt } for pid=17456 comm="syz.3.4104" lport=36797 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 609.635474][T17462] sctp: [Deprecated]: syz.1.4105 (pid 17462) Use of int in max_burst socket option deprecated. [ 609.635474][T17462] Use struct sctp_assoc_value instead [ 610.338826][T17481] __nla_validate_parse: 2 callbacks suppressed [ 610.338838][T17481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4114'. [ 610.460273][T17485] fuse: fd is not a fuse device [ 610.461014][T17483] fuse: fd is not a fuse device [ 611.235374][T17512] netlink: 'syz.0.4126': attribute type 4 has an invalid length. [ 611.286294][T17515] netlink: 'syz.0.4126': attribute type 4 has an invalid length. [ 611.353062][T17517] fuse: fd is not a fuse device [ 611.386461][T17517] Process accounting resumed [ 611.597031][T17526] netlink: 'syz.4.4130': attribute type 10 has an invalid length. [ 611.633926][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.666331][T17526] team0: Port device netdevsim0 added [ 611.777472][T17535] fuse: fd is not a fuse device [ 611.949785][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4133'. [ 611.975369][T17537] netlink: 'syz.3.4133': attribute type 2 has an invalid length. [ 612.008270][T17547] overlayfs: failed to clone upperpath [ 612.656232][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4148'. [ 612.960496][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4151'. [ 612.974577][T17578] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4151'. [ 613.675669][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'. [ 613.709400][T17603] netlink: 'syz.3.4156': attribute type 2 has an invalid length. [ 613.778778][ T30] audit: type=1400 audit(1776362137.626:592): avc: denied { accept } for pid=17609 comm="syz.4.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 614.595712][T17630] fuse: fd is not a fuse device [ 615.035149][T17647] overlayfs: failed to clone upperpath [ 615.277896][ T30] audit: type=1400 audit(1776362139.126:593): avc: denied { accept } for pid=17657 comm="syz.0.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 615.400230][T17667] fuse: fd is not a fuse device [ 615.434541][T17670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17670 comm=syz.2.4183 [ 615.553563][T17681] fuse: fd is not a fuse device [ 615.616985][T17684] xt_hashlimit: size too large, truncated to 1048576 [ 615.713316][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4186'. [ 615.731475][T17685] netlink: 'syz.1.4186': attribute type 2 has an invalid length. [ 615.948491][T17695] fuse: fd is not a fuse device [ 616.068292][T17699] xt_hashlimit: size too large, truncated to 1048576 [ 617.746075][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4217'. [ 617.811575][T17756] netlink: 'syz.1.4217': attribute type 2 has an invalid length. [ 617.884768][ T30] audit: type=1400 audit(1776362141.736:594): avc: denied { watch watch_reads } for pid=17761 comm="syz.3.4219" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 618.783166][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.789940][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.347936][ T30] audit: type=1400 audit(1776362143.196:595): avc: denied { ioctl } for pid=17800 comm="syz.3.4235" path="socket:[39721]" dev="sockfs" ino=39721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 619.375138][ T30] audit: type=1400 audit(1776362143.226:596): avc: denied { bind } for pid=17800 comm="syz.3.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 619.980128][T17816] dummy0: entered promiscuous mode [ 620.003649][T17816] macvlan2: entered promiscuous mode [ 620.009136][T17816] macvlan2: entered allmulticast mode [ 620.037831][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 620.049611][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 620.049630][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 620.049639][ T50] Workqueue: hci3 hci_rx_work [ 620.049661][ T50] Call Trace: [ 620.049666][ T50] [ 620.049672][ T50] dump_stack_lvl+0x100/0x190 [ 620.049687][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 620.049705][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 620.049725][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 620.049742][ T50] ? find_held_lock+0x2b/0x80 [ 620.049759][ T50] ? kobject_add_internal+0x25f/0x930 [ 620.049778][ T50] ? kobject_add_internal+0x25f/0x930 [ 620.049796][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 620.049813][ T50] kobject_add_internal+0x2c8/0x930 [ 620.049832][ T50] kobject_add+0x16a/0x1e0 [ 620.049849][ T50] ? __pfx_kobject_add+0x10/0x10 [ 620.049864][ T50] ? class_to_subsys+0x10f/0x150 [ 620.049883][ T50] ? kobject_put+0xb9/0x640 [ 620.049901][ T50] ? _raw_spin_unlock+0x28/0x50 [ 620.049917][ T50] device_add+0x294/0x1920 [ 620.049932][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 620.049948][ T50] ? __pfx_device_add+0x10/0x10 [ 620.049964][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 620.049984][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 620.050002][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 620.050021][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 620.050040][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 620.050055][ T50] ? skb_pull_data+0x15f/0x1e0 [ 620.050069][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 620.050084][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 620.050101][ T50] hci_event_packet+0x51c/0xcd0 [ 620.050116][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 620.050132][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 620.050148][ T50] ? kcov_remote_start+0x374/0x660 [ 620.050160][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 620.050178][ T50] hci_rx_work+0x451/0xfc0 [ 620.050195][ T50] process_one_work+0xa0e/0x1980 [ 620.050216][ T50] ? __pfx_process_one_work+0x10/0x10 [ 620.050234][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 620.050249][ T50] worker_thread+0x5ef/0xe50 [ 620.050268][ T50] ? kthread+0x13a/0x450 [ 620.050279][ T50] ? __pfx_worker_thread+0x10/0x10 [ 620.050292][ T50] kthread+0x370/0x450 [ 620.050303][ T50] ? __pfx_kthread+0x10/0x10 [ 620.050316][ T50] ret_from_fork+0x72b/0xd50 [ 620.050331][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 620.050345][ T50] ? __switch_to+0x800/0x1100 [ 620.050363][ T50] ? __pfx_kthread+0x10/0x10 [ 620.050375][ T50] ret_from_fork_asm+0x1a/0x30 [ 620.050399][ T50] [ 620.050966][ T50] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 620.320129][ T50] Bluetooth: hci3: failed to register connection device [ 620.482100][T17829] netlink: 'syz.3.4244': attribute type 2 has an invalid length. [ 620.492976][T17829] netlink: 'syz.3.4244': attribute type 2 has an invalid length. [ 620.592206][ T30] audit: type=1400 audit(1776362144.446:597): avc: denied { create } for pid=17830 comm="syz.2.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 620.665334][ T30] audit: type=1400 audit(1776362144.486:598): avc: denied { ioctl } for pid=17830 comm="syz.2.4247" path="socket:[40125]" dev="sockfs" ino=40125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 620.716015][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'. [ 620.751026][ T30] audit: type=1400 audit(1776362144.516:599): avc: denied { bind } for pid=17830 comm="syz.2.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 620.797163][ T30] audit: type=1400 audit(1776362144.516:600): avc: denied { setopt } for pid=17830 comm="syz.2.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 622.590163][T17885] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.4260'. [ 622.857008][T17893] fuse: fd is not a fuse device [ 624.127224][ T30] audit: type=1804 audit(1776362147.976:601): pid=17901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4269" name="file0" dev="tmpfs" ino=4501 res=1 errno=0 [ 624.156629][T17900] uprobe: syz.4.4269:17900 failed to unregister, leaking uprobe [ 624.225339][T17903] bond1: left promiscuous mode [ 624.251853][T17903] bond1: left allmulticast mode [ 624.277543][T17903] ip6gre1: left allmulticast mode [ 629.250461][T18019] x_tables: duplicate underflow at hook 2 [ 629.493517][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4304'. [ 629.539853][T18024] netlink: 'syz.3.4304': attribute type 2 has an invalid length. [ 632.264469][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4329'. [ 632.406815][T18115] fuse: fd is not a fuse device [ 632.861641][T18142] batadv_slave_0: entered promiscuous mode [ 633.727573][T18127] batadv_slave_0: left promiscuous mode [ 634.118441][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4339'. [ 634.530030][T18151] tipc: Started in network mode [ 634.541597][T18151] tipc: Node identity 080211000001, cluster identity 4711 [ 634.559180][T18151] tipc: Enabled bearer , priority 0 [ 634.667411][T18161] tipc: Enabling of bearer rejected, already enabled [ 636.045807][ T5917] tipc: Node number set to 134418688 [ 636.065166][T18185] overlayfs: failed to clone upperpath [ 637.238277][T18200] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4353'. [ 637.247584][T18200] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4353'. [ 638.351123][T18208] netlink: 'syz.1.4356': attribute type 178 has an invalid length. [ 640.724479][T18246] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4368'. [ 640.969313][T18252] netlink: 'syz.3.4369': attribute type 11 has an invalid length. [ 640.977322][T18252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4369'. [ 644.441123][T18286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.481677][T18286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.744590][T18286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.792964][T18286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.018383][T18286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.054875][T18286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.195395][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4387'. [ 645.207770][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4387'. [ 645.268271][T18286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.286883][T18286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.345012][T18312] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4389'. [ 645.557033][ T6255] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.572235][ T6255] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.620168][ T6255] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.646131][ T6255] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.701118][ T6255] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.725644][ T6255] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.799892][T14542] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.268609][T14542] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.814190][T18345] tipc: Enabled bearer , priority 0 [ 651.041667][T18386] overlayfs: failed to resolve './file1': -2 [ 651.423203][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 653.147119][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'. [ 658.146242][ T30] audit: type=1400 audit(1776362181.806:602): avc: denied { lock } for pid=18474 comm="syz.0.4437" path="socket:[42012]" dev="sockfs" ino=42012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 659.949102][T18468] team0: Port device netdevsim0 removed [ 661.108100][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4446'. [ 661.121240][T18515] netlink: 'syz.1.4446': attribute type 2 has an invalid length. [ 661.337230][T18525] overlayfs: failed to clone upperpath [ 664.632765][T18554] kAFS: unable to lookup cell '' [ 664.733273][T18549] team0: Port device team_slave_0 removed [ 667.121751][T18584] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4467'. [ 669.085077][T18608] fuse: fd is not a fuse device [ 669.096849][T18608] bridge1: entered promiscuous mode [ 669.102257][T18608] bridge1: entered allmulticast mode [ 669.509530][T18621] fuse: fd is not a fuse device [ 672.748383][T18638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4480'. [ 672.799251][T18642] overlayfs: failed to clone upperpath [ 673.427824][T18652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.699551][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4495'. [ 677.514827][T18702] netlink: 'syz.4.4498': attribute type 10 has an invalid length. [ 677.522757][T18702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4498'. [ 677.680487][T18702] team0: Port device dummy0 removed [ 677.688305][T18702] bridge0: port 4(dummy0) entered blocking state [ 677.695061][T18702] bridge0: port 4(dummy0) entered disabled state [ 677.702026][T18702] dummy0: entered allmulticast mode [ 677.714041][T18702] dummy0: entered promiscuous mode [ 677.722708][T18703] : renamed from lo [ 680.173084][T18740] futex_wake_op: syz.4.4507 tries to shift op by 144; fix this program [ 680.188611][T18739] nfs: Unknown parameter '' [ 680.223554][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.230345][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.341400][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.571629][T18836] overlayfs: failed to resolve './file1': -2 [ 689.875495][T18841] mmap: syz.3.4530 (18841): VmData 37466112 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 690.910915][T18850] ipvlan3: entered allmulticast mode [ 690.916601][T18850] batadv_slave_1: entered allmulticast mode [ 690.927451][T18850] batman_adv: batadv0: Adding interface: ipvlan3 [ 690.934236][T18850] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.982436][T18850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.993246][T18850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.004906][T18850] batman_adv: batadv0: Interface activated: ipvlan3 [ 691.306500][T18860] No such timeout policy "syz0" [ 694.682651][T18888] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4542'. [ 694.953856][T18892] netlink: 'syz.3.4543': attribute type 23 has an invalid length. [ 698.242861][T18921] xt_l2tp: missing protocol rule (udp|l2tpip) [ 698.570297][T18928] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4553'. [ 698.703497][T18936] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 698.765955][T18941] xt_TCPMSS: Only works on TCP SYN packets [ 698.887245][T18944] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 698.925748][ T30] audit: type=1400 audit(1776362222.746:603): avc: denied { ioctl } for pid=18939 comm="syz.4.4556" path="socket:[43304]" dev="sockfs" ino=43304 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 699.413814][T18948] overlayfs: failed to clone upperpath [ 701.055927][ T30] audit: type=1800 audit(1776362224.896:604): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4559" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 701.942358][T18971] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 702.611033][ T30] audit: type=1400 audit(1776362226.456:605): avc: denied { listen } for pid=18975 comm="syz.3.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 702.641793][T17821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 702.651645][T17821] CPU: 1 UID: 0 PID: 17821 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 702.651671][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.651683][T17821] Workqueue: hci3 hci_rx_work [ 702.651709][T17821] Call Trace: [ 702.651714][T17821] [ 702.651718][T17821] dump_stack_lvl+0x100/0x190 [ 702.651735][T17821] sysfs_warn_dup.cold+0x1c/0x28 [ 702.651752][T17821] sysfs_create_dir_ns+0x24b/0x2b0 [ 702.651776][T17821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 702.651796][T17821] ? find_held_lock+0x2b/0x80 [ 702.651823][T17821] ? kobject_add_internal+0x25f/0x930 [ 702.651850][T17821] ? kobject_add_internal+0x25f/0x930 [ 702.651874][T17821] ? do_raw_spin_unlock+0x145/0x1e0 [ 702.651890][T17821] kobject_add_internal+0x2c8/0x930 [ 702.651910][T17821] kobject_add+0x16a/0x1e0 [ 702.651927][T17821] ? __pfx_kobject_add+0x10/0x10 [ 702.651943][T17821] ? class_to_subsys+0x10f/0x150 [ 702.651961][T17821] ? kobject_put+0xb9/0x640 [ 702.651976][T17821] ? _raw_spin_unlock+0x28/0x50 [ 702.651992][T17821] device_add+0x294/0x1920 [ 702.652007][T17821] ? __pfx_dev_set_name+0x10/0x10 [ 702.652025][T17821] ? __pfx_device_add+0x10/0x10 [ 702.652039][T17821] ? mgmt_send_event_skb+0x2fb/0x460 [ 702.652058][T17821] hci_conn_add_sysfs+0x1a3/0x260 [ 702.652076][T17821] le_conn_complete_evt+0x11eb/0x1f60 [ 702.652094][T17821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 702.652113][T17821] hci_le_conn_complete_evt+0x23c/0x3a0 [ 702.652128][T17821] ? skb_pull_data+0x15f/0x1e0 [ 702.652141][T17821] hci_le_meta_evt+0x34a/0x5f0 [ 702.652157][T17821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 702.652174][T17821] hci_event_packet+0x51c/0xcd0 [ 702.652188][T17821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 702.652204][T17821] ? __pfx_hci_event_packet+0x10/0x10 [ 702.652219][T17821] ? hci_send_to_monitor+0x28/0x4e0 [ 702.652241][T17821] hci_rx_work+0x451/0xfc0 [ 702.652258][T17821] process_one_work+0xa0e/0x1980 [ 702.652278][T17821] ? __pfx_process_one_work+0x10/0x10 [ 702.652296][T17821] ? __pfx_hci_rx_work+0x10/0x10 [ 702.652312][T17821] worker_thread+0x5ef/0xe50 [ 702.652329][T17821] ? __pfx_worker_thread+0x10/0x10 [ 702.652343][T17821] ? kthread+0x13a/0x450 [ 702.652354][T17821] ? __pfx_worker_thread+0x10/0x10 [ 702.652366][T17821] kthread+0x370/0x450 [ 702.652377][T17821] ? __pfx_kthread+0x10/0x10 [ 702.652390][T17821] ret_from_fork+0x72b/0xd50 [ 702.652405][T17821] ? __pfx_ret_from_fork+0x10/0x10 [ 702.652419][T17821] ? rcu_is_watching+0x12/0xc0 [ 702.652435][T17821] ? __switch_to+0x800/0x1100 [ 702.652451][T17821] ? __pfx_kthread+0x10/0x10 [ 702.652464][T17821] ret_from_fork_asm+0x1a/0x30 [ 702.652487][T17821] [ 702.722994][T17821] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 702.944832][T17821] Bluetooth: hci3: failed to register connection device [ 702.966972][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 703.420491][T18982] nbd: socks must be embedded in a SOCK_ITEM attr [ 703.656693][T18990] udevd[18990]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 704.146810][ T30] audit: type=1400 audit(1776362227.916:606): avc: denied { listen } for pid=19001 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 706.082190][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 706.090081][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 706.670593][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 706.680390][T19030] ceph: No mds server is up or the cluster is laggy [ 706.765665][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 708.090571][ T30] audit: type=1400 audit(1776362231.936:607): avc: denied { getopt } for pid=19048 comm="syz.1.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 708.332056][T19052] SQUASHFS error: Failed to read block 0x0: -5 [ 709.168268][ T30] audit: type=1400 audit(1776362233.016:608): avc: denied { write } for pid=19063 comm="syz.1.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 709.189305][T19065] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 710.967168][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 710.999369][T19098] netlink: 'syz.1.4598': attribute type 2 has an invalid length. [ 713.099974][T19110] xt_hashlimit: max too large, truncated to 1048576 [ 715.010063][T19156] fuse: fd is not a fuse device [ 716.313906][T19190] smc: removing ib device syz2 [ 716.805823][T19190] ------------[ cut here ]------------ [ 716.811388][T19190] !xa_empty(&pool->xa) [ 716.811399][T19190] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.4631/19190 [ 716.828578][T19190] Modules linked in: [ 716.832652][T19190] CPU: 0 UID: 0 PID: 19190 Comm: syz.4.4631 Not tainted syzkaller #0 PREEMPT(full) [ 716.842044][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.852097][T19190] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 716.857675][T19190] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 99 4e f9 5b c3 cc cc cc cc e8 0b 99 4e f9 90 <0f> 0b 90 e8 02 99 4e f9 5b c3 cc cc cc cc e8 d7 49 bb f9 eb d0 0f [ 716.877459][T19190] RSP: 0018:ffffc90008d771c0 EFLAGS: 00010246 [ 716.883549][T19190] RAX: 0000000000080000 RBX: ffff888037671390 RCX: ffffc90006ad9000 [ 716.891540][T19190] RDX: 0000000000080000 RSI: ffffffff88ba4bf5 RDI: ffff888037671410 [ 716.899494][T19190] RBP: ffffffff88b8ae80 R08: 0000000000000005 R09: 0000000000000001 [ 716.907584][T19190] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880376706a0 [ 716.915617][T19190] R13: ffff88803766ffe0 R14: ffff88803766ffe0 R15: ffff8880376710f8 [ 716.923585][T19190] FS: 00007f1bb15706c0(0000) GS:ffff888124303000(0000) knlGS:0000000000000000 [ 716.932528][T19190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.939091][T19190] CR2: 0000001b2fa0dff8 CR3: 000000007bce7000 CR4: 00000000003526f0 [ 716.947068][T19190] Call Trace: [ 716.950326][T19190] [ 716.953260][T19190] rxe_dealloc+0x25/0xc0 [ 716.957486][T19190] ib_dealloc_device+0x49/0x230 [ 716.962446][T19190] __ib_unregister_device+0x396/0x480 [ 716.967802][T19190] ib_unregister_device_and_put+0x5a/0x80 [ 716.973537][T19190] nldev_dellink+0x226/0x320 [ 716.978120][T19190] ? __pfx_nldev_dellink+0x10/0x10 [ 716.983252][T19190] ? rcu_is_watching+0x12/0xc0 [ 716.988012][T19190] ? cap_capable+0x10b/0x440 [ 716.992618][T19190] ? bpf_lsm_capable+0x9/0x10 [ 716.997271][T19190] ? security_capable+0x80/0x260 [ 717.002212][T19190] ? ns_capable+0xd2/0xf0 [ 717.006536][T19190] ? __pfx_nldev_dellink+0x10/0x10 [ 717.011647][T19190] rdma_nl_rcv_msg+0x392/0x6f0 [ 717.016395][T19190] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 717.021734][T19190] ? __lock_acquire+0x4a5/0x2630 [ 717.026656][T19190] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 717.033079][T19190] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 717.039997][T19190] ? netlink_deliver_tap+0x1ae/0xcc0 [ 717.045333][T19190] netlink_unicast+0x585/0x850 [ 717.050133][T19190] ? __pfx_netlink_unicast+0x10/0x10 [ 717.055532][T19190] netlink_sendmsg+0x8b0/0xda0 [ 717.060329][T19190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.065882][T19190] ? __might_fault+0x40/0x140 [ 717.070571][T19190] ____sys_sendmsg+0x9e1/0xb70 [ 717.075356][T19190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.080620][T19190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.085899][T19190] ? __pfx_futex_wake_mark+0x10/0x10 [ 717.091192][T19190] ___sys_sendmsg+0x190/0x1e0 [ 717.095855][T19190] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.101041][T19190] __sys_sendmsg+0x170/0x220 [ 717.105857][T19190] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.110963][T19190] ? __x64_sys_futex+0x34f/0x4d0 [ 717.115906][T19190] ? rcu_is_watching+0x12/0xc0 [ 717.120653][T19190] do_syscall_64+0x10b/0xf80 [ 717.125254][T19190] ? clear_bhb_loop+0x40/0x90 [ 717.129920][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.135801][T19190] RIP: 0033:0x7f1bb079c819 [ 717.140194][T19190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.159800][T19190] RSP: 002b:00007f1bb1570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.168308][T19190] RAX: ffffffffffffffda RBX: 00007f1bb0a15fa0 RCX: 00007f1bb079c819 [ 717.176278][T19190] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 717.184371][T19190] RBP: 00007f1bb0832c91 R08: 0000000000000000 R09: 0000000000000000 [ 717.192355][T19190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.200308][T19190] R13: 00007f1bb0a16038 R14: 00007f1bb0a15fa0 R15: 00007fff015ce2e8 [ 717.208292][T19190] [ 717.211311][T19190] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 717.218579][T19190] CPU: 0 UID: 0 PID: 19190 Comm: syz.4.4631 Not tainted syzkaller #0 PREEMPT(full) [ 717.227919][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.237947][T19190] Call Trace: [ 717.241208][T19190] [ 717.244116][T19190] dump_stack_lvl+0x100/0x190 [ 717.248770][T19190] vpanic+0x552/0x970 [ 717.252723][T19190] ? __pfx_vpanic+0x10/0x10 [ 717.257204][T19190] panic+0xd1/0xe0 [ 717.260898][T19190] ? __pfx_panic+0x10/0x10 [ 717.265293][T19190] check_panic_on_warn.cold+0x19/0x34 [ 717.270656][T19190] ? rxe_pool_cleanup+0x46/0x60 [ 717.275485][T19190] __warn.cold+0x191/0x328 [ 717.279889][T19190] __report_bug+0x296/0x3d0 [ 717.284368][T19190] ? rxe_pool_cleanup+0x46/0x60 [ 717.289194][T19190] ? __pfx___report_bug+0x10/0x10 [ 717.294203][T19190] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 717.299986][T19190] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 717.305774][T19190] ? __flush_workqueue+0x426/0x1200 [ 717.310948][T19190] ? rxe_pool_cleanup+0x46/0x60 [ 717.315783][T19190] report_bug+0xb2/0x220 [ 717.320011][T19190] ? rxe_pool_cleanup+0x46/0x60 [ 717.324836][T19190] handle_bug+0x16a/0x2a0 [ 717.329153][T19190] exc_invalid_op+0x17/0x50 [ 717.333647][T19190] asm_exc_invalid_op+0x1a/0x20 [ 717.338472][T19190] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 717.343906][T19190] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 99 4e f9 5b c3 cc cc cc cc e8 0b 99 4e f9 90 <0f> 0b 90 e8 02 99 4e f9 5b c3 cc cc cc cc e8 d7 49 bb f9 eb d0 0f [ 717.363495][T19190] RSP: 0018:ffffc90008d771c0 EFLAGS: 00010246 [ 717.369540][T19190] RAX: 0000000000080000 RBX: ffff888037671390 RCX: ffffc90006ad9000 [ 717.377485][T19190] RDX: 0000000000080000 RSI: ffffffff88ba4bf5 RDI: ffff888037671410 [ 717.385431][T19190] RBP: ffffffff88b8ae80 R08: 0000000000000005 R09: 0000000000000001 [ 717.393376][T19190] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880376706a0 [ 717.401320][T19190] R13: ffff88803766ffe0 R14: ffff88803766ffe0 R15: ffff8880376710f8 [ 717.409265][T19190] ? __pfx_rxe_dealloc+0x10/0x10 [ 717.414178][T19190] ? rxe_pool_cleanup+0x45/0x60 [ 717.419006][T19190] rxe_dealloc+0x25/0xc0 [ 717.423223][T19190] ib_dealloc_device+0x49/0x230 [ 717.428051][T19190] __ib_unregister_device+0x396/0x480 [ 717.433416][T19190] ib_unregister_device_and_put+0x5a/0x80 [ 717.439115][T19190] nldev_dellink+0x226/0x320 [ 717.443690][T19190] ? __pfx_nldev_dellink+0x10/0x10 [ 717.448835][T19190] ? rcu_is_watching+0x12/0xc0 [ 717.453606][T19190] ? cap_capable+0x10b/0x440 [ 717.458184][T19190] ? bpf_lsm_capable+0x9/0x10 [ 717.462836][T19190] ? security_capable+0x80/0x260 [ 717.467762][T19190] ? ns_capable+0xd2/0xf0 [ 717.472068][T19190] ? __pfx_nldev_dellink+0x10/0x10 [ 717.477169][T19190] rdma_nl_rcv_msg+0x392/0x6f0 [ 717.481914][T19190] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 717.487189][T19190] ? __lock_acquire+0x4a5/0x2630 [ 717.492108][T19190] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 717.498511][T19190] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 717.505432][T19190] ? netlink_deliver_tap+0x1ae/0xcc0 [ 717.510697][T19190] netlink_unicast+0x585/0x850 [ 717.515438][T19190] ? __pfx_netlink_unicast+0x10/0x10 [ 717.520701][T19190] netlink_sendmsg+0x8b0/0xda0 [ 717.525440][T19190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.530700][T19190] ? __might_fault+0x40/0x140 [ 717.535359][T19190] ____sys_sendmsg+0x9e1/0xb70 [ 717.540099][T19190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.545358][T19190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.550623][T19190] ? __pfx_futex_wake_mark+0x10/0x10 [ 717.555914][T19190] ___sys_sendmsg+0x190/0x1e0 [ 717.560569][T19190] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.565758][T19190] __sys_sendmsg+0x170/0x220 [ 717.570329][T19190] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.575430][T19190] ? __x64_sys_futex+0x34f/0x4d0 [ 717.580350][T19190] ? rcu_is_watching+0x12/0xc0 [ 717.585096][T19190] do_syscall_64+0x10b/0xf80 [ 717.589664][T19190] ? clear_bhb_loop+0x40/0x90 [ 717.594317][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.600195][T19190] RIP: 0033:0x7f1bb079c819 [ 717.604584][T19190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.624167][T19190] RSP: 002b:00007f1bb1570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.632555][T19190] RAX: ffffffffffffffda RBX: 00007f1bb0a15fa0 RCX: 00007f1bb079c819 [ 717.640498][T19190] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 717.648439][T19190] RBP: 00007f1bb0832c91 R08: 0000000000000000 R09: 0000000000000000 [ 717.656384][T19190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.664332][T19190] R13: 00007f1bb0a16038 R14: 00007f1bb0a15fa0 R15: 00007fff015ce2e8 [ 717.672287][T19190] [ 717.675588][T19190] Kernel Offset: disabled [ 717.679895][T19190] Rebooting in 86400 seconds..